SEO War Room ("SEO War Room", "we", "us") operates the SEO operations platform available at seowarroom.app. For any privacy question or request under this policy, contact us at hello@seowarroom.app. We respond to privacy requests within 30 days.

Account data. Name, email address, password (stored only as a salted hash by our authentication provider), profile details, and workspace membership.

Billing data. Subscriptions are processed by Gumroad. Gumroad collects your payment card details directly; we never receive or store full card numbers. We receive your purchase status, plan tier, and the email used at checkout.

Workspace and client data. Projects, keywords, tasks, content drafts, client records, reports, and anything else you or your team enter into the platform. This data belongs to you and is processed only to operate your workspace.

Integration data. When you connect Google Search Console, Google Analytics, or other integrations, we store the OAuth tokens you authorize and the metrics those integrations return (queries, clicks, impressions, positions, page data). See Section 4 for how Google user data is handled.

Browser extension data. Our optional Chrome extension captures content from pages you actively use it on (for example drafting assistance and engagement capture on social platforms) and syncs it to your workspace. The extension only sends data to your own workspace, only while you are signed in, and captures nothing when you are signed out or have not paired it.

Usage data. Log data, device and browser information, and product analytics collected via Google Analytics and Microsoft Clarity (see our Cookie Policy).

Support communications. Emails and messages you send us.

We use your data to provide and secure the service (contract performance), to bill subscriptions (contract performance), to improve the product through aggregated usage analytics (legitimate interest), to send transactional email such as receipts, alerts, and workspace notifications (contract performance), and to comply with legal obligations. Where consent is the basis (for example optional analytics cookies in regions that require it), you can withdraw it at any time.

We do not sell personal information. We do not share your data with third-party data brokers or advertisers. We do not aggregate your proprietary SEO strategy or client data across customers.

SEO War Room's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: we access Google Search Console and Google Analytics data only after you explicitly authorize the connection via Google's OAuth consent screen. That data is used solely to display your own metrics inside your workspace, power your reports, and feed the analysis features you invoke on it. We store OAuth tokens encrypted, we do not transfer Google user data to third parties except as needed to provide the features you use, we do not use it for advertising, and we do not allow humans to read it except with your permission for support, for security purposes, or where required by law. Disconnecting an integration or deleting your account revokes and deletes the associated tokens.

AI-assisted features send the relevant inputs you provide to third-party model providers (currently OpenAI, Anthropic, Google, and DeepSeek for search-engine visibility checks) to produce a result. We send only what the request needs, and we do not permit our customer data to be used to train public AI models. Full details are in our AI Disclosure.

We share data only with the service providers required to run the platform (hosting, database, payments, email, AI providers, SERP data). Each one is listed with its purpose on our Subprocessors page. We may also disclose data if required by law, or as part of a merger or acquisition, in which case this policy continues to apply to your data.

Workspace and client data is retained while your account is active. After account deletion, personal data and workspace content are deleted from production systems within 30 days and from backups within 90 days. Billing records are retained as long as tax and accounting law requires. Aggregated analytics that no longer identify anyone may be retained indefinitely.

Data is encrypted in transit with TLS and at rest with AES-256. Workspaces are isolated with database row-level security, access is role-based, and integration tokens are stored encrypted. Full detail is on our Security page. If a breach affects your personal data, we will notify affected customers without undue delay after confirming it, including what happened and what we are doing about it.

Our infrastructure and subprocessors are primarily located in the United States. Where data of EU, UK, or Swiss residents is transferred internationally, we rely on Standard Contractual Clauses or an equivalent lawful transfer mechanism with each subprocessor.

Wherever you are, you can access, export, correct, or permanently delete your personal and workspace data from your workspace settings, or by emailing us. If you are in the EU, UK, or a similar jurisdiction, you additionally have the rights to restrict or object to processing, to data portability, and to lodge a complaint with your supervisory authority. If you are a California resident, you have the rights to know, delete, correct, and opt out of sale or sharing; we do not sell or share personal information as defined by the CCPA/CPRA, and we honor these rights without discrimination.

If you use SEO War Room as an agency, you act as the controller (or processor) for your clients' data and we act as your processor. Our Data Processing Addendum governs that relationship, including subprocessor commitments, breach notification, and deletion on termination.

The platform is a business tool and is not directed at children under 16. We do not knowingly collect data from them; if you believe a child has provided us data, contact us and we will delete it.

When we make material changes, we will update the date above and notify active customers by email or in-product notice before the change takes effect. Prior versions are available on request.

Privacy questions, rights requests, and complaints: hello@seowarroom.app.