Privacy Policy
Last updated: June 4, 2025
SEOMentor (“we”, “us”, “our”) is operated by Vignesh Anbalagan, based in Kraków, Poland. This Privacy Policy explains how we collect, use, and protect your personal data when you use seomentor.io (the “Service”). By using the Service, you agree to this policy.
We are subject to the General Data Protection Regulation (GDPR) as we operate from within the European Economic Area (Poland). If you are located in the EU/EEA, you have specific rights described in Section 8 below.
1. Data We Collect
1.1 Account Data
When you sign up, we collect your name and email address through our authentication provider, Clerk. This is required to create and manage your account.
1.2 Website Scan Data
When you submit a URL for analysis, we scan that URL and store the results (speed scores, SEO metrics, Core Web Vitals, meta tags, image data, and related technical data) in our database. This data is linked to your account.
1.3 Google Search Console Data
If you connect your Google Search Console account, we request read-only access to your GSC data (keyword rankings, impressions, clicks). We store OAuth access tokens and refresh tokens securely in our database to allow ongoing data retrieval. You can disconnect GSC at any time from your settings page.
1.4 Payment Data
Payment processing is handled by Stripe. We do not store your credit card details. We receive and store non-sensitive billing information such as your subscription plan, status, and Stripe customer ID.
1.5 Usage Data
We automatically collect basic usage information such as pages visited, features used, scan counts, and chat message counts. This helps us improve the Service. We may also collect your IP address and browser type for security and fraud prevention.
1.6 AI Chat History
Conversations with our AI mentor feature are stored in our database and linked to your scan results. This allows the AI to provide contextual responses within a session.
1.7 Cookies
We use essential cookies required for authentication and session management. We may use analytics cookies (e.g. Google Analytics) to understand aggregate usage. You can manage cookie preferences through the cookie banner displayed on your first visit.
2. How We Use Your Data
- To create and manage your account
- To perform website scans and deliver results
- To power our AI mentor chat feature
- To process payments and manage subscriptions via Stripe
- To send essential service emails (billing receipts, account alerts)
- To improve and develop the Service
- To detect fraud and ensure security
- To comply with legal obligations
We do not sell your personal data to third parties. We do not use your data for advertising purposes.
3. Legal Basis for Processing (GDPR)
We process your data on the following legal bases:
- Contract performance: Processing necessary to provide the Service you have signed up for (account management, scans, billing).
- Legitimate interests: Improving the Service, preventing fraud, and maintaining security.
- Consent: For optional cookies and analytics. You may withdraw consent at any time.
- Legal obligation: Where required by applicable law.
4. Third-Party Services
We share your data with the following third-party processors only as necessary to operate the Service:
| Provider | Purpose | Location |
|---|---|---|
| Clerk | Authentication & user management | USA (SCCs apply) |
| Stripe | Payment processing | USA (SCCs apply) |
| Neon | Database hosting | EU (Frankfurt) |
| Vercel | Application hosting & CDN | Global (EU region used) |
| Google (PageSpeed API) | Website performance analysis | USA (SCCs apply) |
| Google (Search Console API) | Keyword & ranking data (with your consent) | USA (SCCs apply) |
| Anthropic (Claude) | AI mentor responses | USA (SCCs apply) |
| Google (Gemini) | AI fallback responses | USA (SCCs apply) |
| Keywords Everywhere | Keyword volume data | Canada |
| DataForSEO | SERP & keyword data (Pro users) | USA |
SCCs = Standard Contractual Clauses (approved GDPR mechanism for data transfers outside the EEA).
5. Data Retention
- Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
- Scan data: Free tier scans older than 90 days may be automatically deleted. Pro/Agency scan data is retained for the duration of your subscription.
- GSC tokens: Deleted immediately when you disconnect Google Search Console.
- Billing records: Retained for 7 years as required by Polish accounting law.
- Chat history: Retained with your scan data, deleted when the scan is deleted.
6. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
- HTTPS encryption for all data in transit
- Encrypted storage for OAuth tokens
- Database access restricted to application layer only
- Authentication managed by Clerk (SOC 2 certified)
No method of transmission or storage is 100% secure. If you believe your data has been compromised, contact us immediately at support@seomentor.io.
7. Cookies
We use the following types of cookies:
- Essential cookies: Required for authentication and session management. Cannot be disabled.
- Analytics cookies: Help us understand how the Service is used in aggregate. Can be declined via the cookie banner.
You can manage or delete cookies through your browser settings at any time.
8. Your Rights (GDPR)
If you are located in the EU/EEA, you have the following rights regarding your personal data:
- Right of access: Request a copy of your data.
- Right to rectification: Correct inaccurate data.
- Right to erasure: Request deletion of your data.
- Right to restriction: Limit how we process your data.
- Right to data portability: Receive your data in a portable format.
- Right to object: Object to processing based on legitimate interests.
- Right to withdraw consent: For consent-based processing (e.g. cookies).
To exercise any of these rights, email us at support@seomentor.io. We will respond within 30 days. You also have the right to lodge a complaint with the Polish data protection authority (UODO) at uodo.gov.pl.
9. Children's Privacy
The Service is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice on the Service. Continued use of the Service after changes constitutes acceptance of the updated policy. The date at the top of this page indicates when the policy was last updated.
11. Contact
For any privacy-related questions, requests, or complaints, please contact us at:
Vignesh AnbalaganOperating as SEOMentor
Kraków, Poland
support@seomentor.io