Privacy Policy

Effective April 28, 2026

1. What We Collect

When you use Clickr SEO, we collect:

  • Account information — your email address and name from your Google account login
  • Google Search Console data — clicks, impressions, CTR, position, queries, and pages for the GSC properties you authorize
  • OAuth tokens — access and refresh tokens required to fetch your GSC data on your behalf
  • Usage data — basic application logs for debugging and reliability

2. How We Use Your Data

We use your data solely to:

  • Display your Google Search Console performance data inside the dashboard
  • Cache GSC API responses for up to 6 hours to improve performance and reduce API load
  • Authenticate you and maintain your session
We do not sell your data, use it for advertising, or share it with third parties except as described below.

3. Data Storage

Your GSC data is cached in a Supabase Postgres database hosted on AWS (us-west-2). OAuth tokens are stored encrypted in the same database. Cached data is scoped to your account and is not accessible to other users.

4. Google API Services

Clickr SEO's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only request the webmasters.readonly scope — read-only access to your Search Console data. We never write to or modify your GSC data.

5. Data Sharing

We do not sell or rent your personal data. We may share data only:

  • With service providers (Supabase for database hosting, Vercel for application hosting) who are contractually bound to protect your data
  • If required by law or to protect the rights and safety of users

6. Data Retention

GSC performance cache is retained for up to 6 hours and then refreshed. If you delete your account, we will delete your stored tokens and cached data within 30 days. You can request deletion at any time by emailing us.

7. Revoking Access

You can revoke Clickr SEO's access to your Google account at any time via your Google Account permissions. After revocation, we will no longer be able to fetch new data, and any cached data will expire naturally.

8. Cookies and Sessions

We use cookies only for authentication purposes — to maintain your login session via Supabase Auth. We do not use tracking or advertising cookies.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this policy from time to time. We will update the effective date above when we do. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Email us at hi@clickrseo.com.