Privacy Policy

Last updated:

OWNER / LEGAL REVIEW REQUIRED. This page is a factual description of SEOwithRiz's current and planned data handling, prepared by engineering. It is not a substitute for review by qualified legal counsel before this page is relied upon for compliance purposes, and it does not claim any certification SEOwithRiz has not actually obtained.

Who this applies to

This policy covers the SEOwithRiz application at app.seowithriz.com and the public site at seowithriz.com. SEOwithRiz is operated as a self-hosted platform for its account holders; it is not a public consumer service.

Account information

We store the account information needed to operate the platform: your email address, a securely hashed password (never the plaintext password itself), your role, and basic account activity (login times, session activity) needed for security and audit purposes.

Google integration

If you choose to connect a Google account, SEOwithRiz requests read-only access to Google Search Console and Google Analytics (GA4) data for properties you choose to map to a project, using Google's standard OAuth 2.0 sign-in — SEOwithRiz never asks for or stores your Google password. The resulting access and refresh tokens are encrypted before storage and are used only to read the search-performance and analytics data you've explicitly connected, in order to display it inside the platform.

Shopify integration

If you choose to connect a Shopify store, SEOwithRiz requests access limited to SEO-relevant store data (such as products, collections, pages, and blog content) needed to analyze and report on that store's search visibility. The resulting access token is encrypted before storage.

Other connected providers

If you choose to configure a SERP-tracking provider or an AI-monitoring provider (such as OpenAI, Anthropic, Google Gemini, or Perplexity), the API credential you provide is encrypted before storage and used only to make the requests that provider's integration is designed to perform on your behalf.

How credentials are protected

Every third-party credential and access/refresh token stored by SEOwithRiz is encrypted at rest before it is written to the database. Stored credentials are never displayed back in full through the application, are not included in application logs, and are not included in audit-log entries.

Disconnecting an integration

Disconnecting a provider or removing a stored credential stops future data collection from that provider. Historical data already imported is not automatically deleted when you disconnect — a separate, explicit action would be required to delete historical data, and no such automatic deletion is currently implemented.

Data retention

Account and project data is retained for as long as your account and project exist within the platform. Specific automated data-retention or deletion schedules beyond that are not currently implemented; if introduced later, this policy will be updated to describe them.

Data sharing

SEOwithRiz does not sell personal data. Data connected to your account is used to provide the platform's own functionality to you and is not shared with unrelated third parties.

Contact

Questions about this policy can be sent to the account holder responsible for your SEOwithRiz deployment.