Privacy Policy

1. Who this policy covers

This policy applies to visitors, account holders and invited clients who use SEOboard. The person who invites a client controls that client’s website access and the content shared through it. Questions about platform data practices can be sent to seo@primsite.net.

2. Information SEOboard handles

• Account information: email address, display name, optional profile image, sign-in records and invitation or membership details.
• Workspace content: website details, reports, commentary, tasks, goals, custom metrics, comments, uploaded documents and sharing settings entered by authorized users.
• Google reporting data: selected Analytics and Search Console properties and the reporting metrics and dimensions imported at a user’s request.
• Service records: security events, audit activity, email delivery status, error information and essential session identifiers.

3. Google user data

SEOboard requests only read-only Google Analytics and Google Search Console reporting permissions. After a user authorizes a connection, SEOboard can list properties the user may access and retrieve reporting data for the property and dates that user selects. This can include traffic and engagement metrics, landing pages, countries, devices, search queries, clicks, impressions and search positions.

SEOboard uses this data to display analytics, preserve imported reporting periods and create reports the user chooses to publish or share. Selected property identifiers, imported reporting data and encrypted OAuth credentials are stored in the private backend so authorized users can reconnect and view saved work. Disconnecting a source deletes its stored credential and cached reporting data from SEOboard; a user can separately revoke the OAuth grant in their Google Account.

Google user data is not sold, used for targeted advertising or used to train general-purpose artificial intelligence models. It is disclosed only to infrastructure providers needed to operate the service, to authorized members of the relevant website, or through a report or public link a user deliberately shares.

SEOboard’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How information is used

• Authenticate users and enforce invitation, workspace and website permissions.
• Provide reporting, collaboration, document, email and sharing features.
• Secure, troubleshoot and monitor the service and prevent misuse.
• Respond to support, access, correction and deletion requests.
• Meet legal obligations and protect users, SEOboard and others.

5. Service providers and sharing

SEOboard relies on service providers for hosting, PostgreSQL and private file storage, passwordless authentication, email delivery and Google API access. These currently include Hostinger, Supabase, Google and the configured email provider. They process information to provide their services and under their own applicable terms and privacy commitments.

SEOboard does not make workspace content public by default. Authorized managers may invite a client to a specific website, publish selected report content, or create a public link. Anyone who receives an enabled public link can view the content deliberately made public through that link. Revoking membership or a public link prevents future access through that method.

6. Cookies and security

SEOboard uses an essential, secure session cookie to keep signed-in users authenticated. The public marketing and legal pages do not use advertising trackers. Reasonable technical controls include encrypted provider credentials, private storage, access checks, short-lived sessions and audit records. No online service can guarantee absolute security.

7. Retention and deletion

Workspace data is kept while it is needed to provide the service or until an authorized owner deletes the relevant report, website or workspace. Invitations expire after seven days. In-app activity and completed delivery records are generally retained for 90 days. Security, audit and backup copies may remain for a limited period where needed for integrity, recovery or legal obligations.

To request access, correction or deletion of account-level information, email seo@primsite.net from the address associated with the account. SEOboard may need to verify the request. Workspace owners can also remove website access and delete workspace content from the application.

8. Choices and rights

Depending on applicable law, users may have rights to access, correct, export, restrict, object to or delete personal information, and may have the right to complain to a data protection authority. Consent can be withdrawn where consent is the basis for processing, without affecting earlier lawful processing. Some information may need to be retained where required by law or to protect the service.

9. Children

SEOboard is a business reporting service and is not directed to children. Accounts should not be created for anyone who cannot lawfully agree to these practices.

10. Changes

This policy may be updated when the service or its data practices change. The effective date above will be revised, and material changes will be communicated through the service or by email when appropriate.