Privacy Policy

1. Introduction

SEO MASTER ("we", "our", "the application") is a SaaS platform developed by Mogacode SARL-AUthat provides SEO analysis, keyword research, competitor monitoring, and Google data integration for website owners and SEO professionals.

This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data, in compliance with the Google API Services User Data Policy, GDPR, and Moroccan Law 09-08.

2. Data Controller

3. Google API Data — Access, Use, Storage & Sharing

3.1 Google Scopes Requested

SEO MASTER requests the following OAuth scopes to provide its core features:

Search Console Read-only access to Google Search Console data (clicks, impressions, position, CTR per page/keyword). Used to display your website's organic performance directly in the SEO audit dashboard.

Analytics Read-only access to Google Analytics 4 data (sessions, users, bounce rate, traffic sources). Used to enrich SEO audit pages with real traffic context.

Business Profile Access to your Google Business Profile to display reviews, posting status, and local SEO metrics. Used in the GMB Manager module to monitor and manage your local presence.

3.2 Data Usage

Google user data accessed via these APIs is used exclusively to:

• Display your website's SEO performance metrics (clicks, impressions, rankings) inside your private dashboard.
• Enrich AI-generated SEO recommendations with real traffic data.
• Show your Google Business Profile metrics and review statistics in the GMB Manager.
• Generate keyword and content strategy reports based on your Search Console queries.

We do not use Google user data to train AI/ML models, for advertising, or for any purpose beyond the features described above.

3.3 Data Sharing

Google user data accessed by SEO MASTER is never shared, sold, or disclosed to any third party. It is used solely to render your personal dashboard. No Google user data is passed to external analytics services, advertising networks, or AI training pipelines.

3.4 Data Storage & Protection

Your Google OAuth tokens (access tokens and refresh tokens) are stored encrypted at rest in our database using AES-256 encryption. Our infrastructure is hosted by Infomaniak (Geneva, Switzerland), certified ISO 27001 and ISO 14001.

• All data is transmitted over HTTPS/TLS 1.3.
• OAuth tokens are stored per-user and isolated by tenant.
• Access to production data is restricted to authorized personnel only.
• Google API data fetched in real-time is not permanently stored — it is fetched on demand and displayed.

3.5 Data Retention & Deletion

Google OAuth tokens are retained as long as your account is active and you have not revoked access. Cached API responses (Search Console metrics, Analytics data) are not persisted beyond your session or dashboard load.

To revoke access and delete your Google data from SEO MASTER:

• Go to your Dashboard → Settings → Integrations and click "Disconnect Google".
• Or visit Google Account Permissions and revoke SEO MASTER's access.
• To permanently delete your account and all associated data, contact us via WhatsApp.

Upon account deletion, all stored OAuth tokens and associated data are permanently erased within 30 days.

4. Other Data We Collect

• Account data: Email, name, business name collected at registration.
• Site data: URLs and SEO analysis results you submit to the platform.
• Usage data: Feature usage logs for billing (SEO Coins system) and service improvement.
• Payment data: Processed securely by Stripe. We do not store card numbers.

5. Your Rights

Under GDPR and Moroccan Law 09-08, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Delete your data (right to be forgotten).
• Revoke Google API access at any time.
• Export your data in a portable format.

To exercise any of these rights, contact us via WhatsApp.

6. Contact

For any privacy-related questions or data deletion requests: