Privacy Policy

1. Who We Are

SEO Runway ("SEO Runway", "we", "our", or "us") provides a unified digital marketing and search visibility intelligence platform designed for search engine optimization (SEO), generative engine optimization (GEO), local search management, Google Ads campaign optimization, and social media scheduling. This Privacy Policy details our practices concerning data collection, processing, protection, and your privacy choices.

Data Controller & Operator: SEO Runway. Location: India.
Privacy & Data Protection Officer Contact: connect@seorunway.com

2. Information We Collect

We only collect information necessary to deliver, secure, and improve our services:

• Account Information: Name, business email address, company or organization name, role, and securely hashed passwords.
• User-Configured Project Data: Domain names, tracked keywords, business location addresses, brand assets, task lists, and custom audit configurations.
• Connected Google Account Data: When you connect your Google Account, we access Google Search Console (Search analytics, clicks, impressions, average CTR, position, and inspected URL statuses) and Google Analytics 4 (session metrics, engagement, pageviews, and property configurations). We securely store OAuth access and refresh tokens.
• Connected Social Media & Ads Data: Facebook, Instagram, LinkedIn, or Google Ads campaign metrics, ad groups, scheduled posts, and performance metrics authorised by your connected accounts.
• Billing & Subscription Information: Subscription tiers, transaction records, invoice history, and billing dates. All payment card transactions are processed securely through PCI-DSS compliant third-party payment gateways; we never store raw payment card credentials.
• Technical & Usage Diagnostics: IP addresses, browser specifications, operating system details, referring URLs, timestamps, and feature interactions used solely for security auditing, fraud mitigation, and service stability.

3. How We Use Information

We process your data strictly to fulfill our contractual commitments to you and for legitimate business purposes:

• To aggregate, analyze, and present organic search traffic, keyword ranking progression, technical crawling audits, and marketing analytics in your private project dashboard.
• To perform automated site architecture checks, Core Web Vitals diagnostics, indexability verifications, and broken link scans.
• To calculate AI-driven optimization recommendations, title/meta tag suggestions, and content gap insights upon your request.
• To authenticate workspace members, enforce role-based access permissions, verify account limits, and generate downloadable executive reports.
• To communicate important service notifications, security alerts, system maintenance, and billing updates.

4. Google API Services User Data & Limited Use Policy

SEO Runway's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, regarding Google User Data:

• Specific Scopes Requested: We only request read-only access to Google Search Console (https://www.googleapis.com/auth/webmasters.readonly) and Google Analytics 4 (https://www.googleapis.com/auth/analytics.readonly).
• Purpose of Access: We access this data strictly to display search console performance graphs, indexation statuses, and analytics telemetry within the specific project dashboard you designated.
• No Generalized AI Model Training: Google user data retrieved via Google APIs is NEVER used to train, retrain, fine-tune, or improve generalized Artificial Intelligence (AI) or Machine Learning (ML) models or large language models.
• No Sale of Google Data: We do not sell, rent, license, or monetize Google user data under any circumstance.
• No Advertising Use: Google user data is never used to serve targeted advertisements, build consumer profiling databases, or facilitate third-party commercial marketing.
• Human Access Restrictions: Human employees, contractors, or agents do not read or view your Google user data unless: (1) you have provided explicit consent to investigate a specific technical support issue; (2) it is necessary for security investigations; or (3) required by applicable law.
• Revocation of Google Access: You can disconnect your Google account at any time directly within the SEO Runway dashboard (via Project Settings > Google Connections), or revoke access globally via the Google Account Security Permissions page.

5. AI Features & LLM Processing

SEO Runway incorporates generative AI tools to assist with content strategy, technical remediation, and keyword clustering. When you request AI recommendations:

• Only user-provided prompts and specific non-sensitive SEO diagnostics (such as broken status codes or missing meta descriptions) are submitted to secure AI providers (e.g., Google Gemini).
• All AI processing agreements with our enterprise infrastructure providers explicitly restrict the retention or use of your submitted business data for public foundation model training.

6. Social Media & Advertising Platform Data

When you authorize Facebook, Instagram, LinkedIn, or Google Ads accounts, we use authorized API tokens exclusively to publish scheduled marketing content, measure post engagement, and retrieve campaign return on ad spend (ROAS) as configured by you. You may disconnect connected platforms at any time with immediate effect.

7. Data Sharing & Third Parties

We do not sell, trade, or transfer your personal data to outside parties. Data is shared exclusively under strict confidentiality terms with:

• Infrastructure & Hosting Partners: Certified cloud infrastructure providers (Ubuntu Linux, LiteSpeed, PostgreSQL) hosting our secure servers and database instances.
• Designated Workspace Members: Users invited by your workspace administrators, governed by assigned user roles (e.g., Owner, Admin, Member, Client).
• Legal & Regulatory Authorities: When strictly required by law, subpoena, or valid court order to comply with legal processes or protect vital security interests.

8. Data Retention & User Deletion Rights

We retain your account and project data only as long as your account remains active or as required to fulfill service obligations:

• Account Disconnection: Disconnecting a Google or Social Media account from SEO Runway immediately terminates token refreshes and revokes ongoing API access.
• Full Data Deletion Requests: To request complete, permanent deletion of your account and all associated project data (including historical audit crawls and connected tokens), email connect@seorunway.com with the subject line Data Deletion Request. We process and confirm verified deletion requests within 30 days.

9. Data Security & Storage

We implement industry-standard administrative, physical, and technical safeguards:

• All web traffic and API interactions are encrypted in transit using Transport Layer Security (TLS 1.3 / HTTPS).
• OAuth access and refresh tokens are stored securely in encrypted databases with restricted access.
• Servers are safeguarded behind active firewalls, role-based key management, and isolated application user privilege boundaries.

10. Cookies & Tracking

SEO Runway uses essential, functional session cookies required for authentication, CSRF security verification, and workspace state navigation. We do not use third-party behavioral ad tracking cookies.

11. Your Privacy Rights

Depending on your jurisdiction (such as GDPR, CCPA, or applicable Indian data privacy regulations), you have rights to:

• Access and obtain a copy of the personal information we hold about you.
• Rectify inaccurate or incomplete records.
• Request restriction of processing or deletion of your personal data.
• Export your project metrics and reports in standard portable formats (CSV/PDF).

To exercise any privacy rights, reach out directly to our privacy contact at connect@seorunway.com.

12. International Data Transfers

Your information may be transferred to, stored, and processed in secure data centers operating globally where our cloud infrastructure resides. All cross-border data processing is protected by rigorous contractual commitments and data security standards.

13. Contact Information

If you have any questions, inquiries, or complaints regarding this Privacy Policy or our data handling practices, please contact us at:

SEO Runway
Privacy & Compliance Team
Email: connect@seorunway.com
Website: https://seorunway.com