Data controller
The data controller is the Seonate Service Provider (Lemoon Web - Jakub Jóźwiak, ul. Nad Łyną 97/2, 10-687 Bartąg, Poland, tax ID (NIP) 8762402511), the application available at https://app.seonate.com (information site: https://seonate.com). We process data to provide the SEO service: your account, projects, recommendations, billing and contact. We don’t sell data. We don’t use Google data for advertising or to train models for third parties.
Data you give us
When you sign up, we store your email address, your password as a hash, your name or display name and, if you provide them, your billing details (name, address, tax ID). The contact form stores your name, email and message. Technical logs (IP address, date, error) are used for security and diagnostics. Payments are handled by Stripe; we don’t store your card number.
Google data — read-only
When you click “Connect with Google”, we only request the https://www.googleapis.com/auth/webmasters.readonly scope. We read the list of your Search Console properties and the search statistics (clicks, impressions, average position, pages and queries) for the property you choose. We don’t publish anything in GSC, we don’t change settings and we have no access to Gmail, Drive or Ads.
OAuth tokens (access and refresh) are encrypted and linked to your project. We use them only to import results and measure the effects of changes in the Seonate dashboard. We don’t share GSC data with other users, advertising partners or AI models, other than to prepare recommendations for you alone in your account. You can disconnect Google at any time; we then delete the tokens. Deleting your account deletes your projects and the related GSC data.
Reading your site and analyses
To prepare recommendations, we fetch the publicly available content of your website (HTML, titles, headings, meta tags). Keyword and competitor research goes through DataForSEO. Text generation and brand hypotheses go through OpenRouter. We send them only the data needed for a specific analysis in your project, not your whole Google account.
Cookies and site analytics
On seonate.pl and seonate.com we use cookies (small files saved in your browser) and browser storage. Necessary ones are always on. We set analytics and advertising cookies only if you agree to them in the banner.
Necessary (no consent needed):
seonate-themeremembers the site theme (light or dark) for one year. The same value is also kept in browser storage (localStorage).seonate_consentremembers your choice in the banner (allornecessary) for 180 days.
The application at https://app.seonate.com also uses the necessary cookies seonate_session (keeps you signed in) and seonate_project (remembers the selected project).
Analytics and advertising (only with your consent):
We use Google Analytics 4, run through Google Tag Manager. Both are provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics shows us how you use the site: which pages you visit, how you found us, how far you scroll, which external links and files you click, and what device and region you use. We use this to improve the site’s content and how it works. Google signals (linking statistics to Google accounts) are turned off.
_gaholds a random browser ID that lets us tell repeat visits apart, for up to 2 years._ga_DJ0V6Z582Ekeeps the state of the current visit, for up to 2 years.
Choosing “Accept all” also covers Google’s advertising consents (ad_storage, ad_user_data and ad_personalization): for advertising cookies, for sending Google data about your activity on the site for advertising purposes, and for ad personalisation. They may be used to measure how Seonate’s ads perform and to personalise ads. If we start using Google advertising tools (such as Google Ads), we will list them in this section before turning them on.
Google Tag Manager loads on every page but does not set cookies itself. Without your consent, Google Analytics does not set or read cookies and does not assign you a lasting ID. It may only send Google technical information without using cookies (for example, that a page was viewed and that consent was not given). This information carries a one-time number that changes with every page view, so your visits cannot be linked together. Google uses it to estimate statistics.
The legal basis for analytics and advertising cookies is your consent (Art. 6(1)(a) GDPR). We use necessary cookies because without them the site cannot remember your settings; this is our legitimate interest (Art. 6(1)(f) GDPR). In Google Analytics, we keep detailed event data (such as single page views and clicks) for 2 months and data linked to the browser ID for 14 months. Aggregated statistics without identifiers may be kept longer. Google may also process data in the USA. Google LLC takes part in the EU-U.S. Data Privacy Framework, for which the European Commission has issued an adequacy decision. More on how Google uses data: https://policies.google.com/technologies/partner-sites.
You can change or withdraw your consent at any time: click “Cookie settings” in the site footer, turn off “Analytics and advertising” and save your choice. Withdrawing consent does not affect the lawfulness of processing before it was withdrawn. You can also delete cookies in your browser settings.
Access, deletion, contact
You have the right to access, rectify, restrict processing of, port and delete your data, to withdraw your consent at any time, and to lodge a complaint with the Polish data protection authority (PUODO). Requests: [email protected] or the form on the Contact page. You can also revoke Google access at https://myaccount.google.com/permissions. Details of the service are in the Terms of Service.