Privacy

This draft outlines how we expect the hosted version of OpenSEO to handle data. Details may change before launch.

What the hosted version stores

• The account details you give us when you sign up.
• Your YepAPI key, stored encrypted, so the app can make calls on your behalf.
• The work you create in the app, such as saved keyword lists, tracked keywords and the results of actions you run.
• If you connect Google Search Console or Google Analytics: which Google account and property, its email address, and read-only access tokens, stored encrypted. The data Google returns is not stored.
• If you use the free tools on this site: a one-way hash of your IP address for rate limiting, kept for at most three days, and the tool's result, shared with anyone who asks the same thing within 24 hours.

YepAPI

All SEO data comes from YepAPI. When you run an action, the request is sent to YepAPI using your key. Your billing relationship is with YepAPI, and their handling of your account and payment data is covered by their own policies at yepapi.com. OpenSEO does not process payments.

Self-hosting

If you self-host OpenSEO, the database and everything in it run on infrastructure you control. We do not receive that data.

Still to be written

The final policy will cover retention, deletion, cookies, sub-processors, your rights and how to contact us. Those sections are not written yet.