What we collect, and why
Draft for legal review. Effective from the date of publication.
The controller is the seonate Provider (Lemoon Web - Jakub Jóźwiak, ul. Nad Łyną 97/2, 10-687 Bartąg, NIP 8762402511). The app is at https://app.seonate.com and this site is https://seonate.com. The same service is described in Polish at https://seonate.pl. We process data to provide the SEO service: the account, projects, recommendations, billing and contact. We do not sell data. We do not use Google data for advertising, or to train models for anyone else.
Data you give us yourself
When you register we store your email address, a hash of your password, a first name or display name and, if you provide them, invoice details (name, address, tax ID). The contact form stores your name, email and the message. Technical logs (IP address, date, error) are used for security and diagnostics. Payments are handled by Stripe. We do not store the card number.
Data from Google — read-only
When you click “Connect with Google” we ask only for the scope https://www.googleapis.com/auth/webmasters.readonly. We read the list of your Search Console properties and the search statistics (clicks, impressions, average position, pages and queries) for the property you choose. We do not publish anything in Search Console, we do not change settings, and we have no access to Gmail, Drive or Ads.
OAuth tokens (access and refresh) are encrypted and tied to your project. We use them only to import results and to measure the effect of changes in the seonate panel. We do not share Search Console data with other users, advertising partners, or AI models, except to prepare recommendations for you inside your account. You can disconnect Google at any time, and we then delete the tokens. Deleting the account deletes the projects and the Search Console data linked to them.
Reading the site, and the analyses
To prepare recommendations we fetch the publicly available content of your site (HTML, titles, headings, meta). Query and competitor research goes through DataForSEO. Drafting copy and brand hypotheses goes through OpenRouter. We send them only the data a specific analysis in your project needs, not your whole Google account.
Access, deletion, contact
You have the right to access, rectify, restrict, port and erase your data, and to complain to the Polish data protection authority (PUODO). Send a request to [email protected] or use the form on the Contact page. You can also revoke Google’s access at https://myaccount.google.com/permissions. The service itself is described in the Terms of service.