Data Processing Agreement
Effective Date: December 17, 2025
This Data Processing Agreement ("DPA") forms part of the Terms of Service between you ("Customer", "Controller") and SEO Rank Tracker ("Processor") for the use of our SEO analytics platform at seoranktracker.solutions.
1. Key Terms (Plain English)
- Controller (You): You decide what data to collect and why. You own your Google Search Console data and website information.
- Processor (SEO Rank Tracker): We process your data only to provide our SEO analytics, optimization, and indexing services.
- Subprocessor: Third-party vendors we use to help deliver our services (listed below).
2. Scope of Processing
When you connect your Google Search Console account to SEO Rank Tracker, we access and process the following data:
- Website URLs and indexed pages
- Search performance metrics (impressions, clicks, CTR, average position)
- Indexing status and coverage reports
- Sitemap information
- Page content (when you request AI optimization)
Purpose Limitation
We process your data solely to provide:
- SEO analytics and performance dashboards
- AI-powered optimization recommendations
- Automatic page indexing to Google and Bing
- Reporting and insights features
Our commitment: We never use your data for our own marketing or profiling. We never sell or share your data with third parties for their own purposes.
3. Your Responsibilities (as Controller)
- Ensure you have the legal right to share your Google Search Console data with us
- Maintain lawful basis for any data collection on your websites
- Implement required cookie banners and privacy notices on your sites
- Handle data subject access requests from your website visitors
- Notify us if you become aware of any data breach affecting shared data
4. Our Responsibilities (as Processor)
- Process data only according to your instructions and this agreement
- Maintain appropriate security and confidentiality measures
- Assist you with data protection compliance obligations
- Notify you promptly of any data breach affecting your data
- Delete your data upon account termination or upon request
- Make available information necessary to demonstrate compliance
5. Data Retention
- Active accounts: Data retained while your account is active
- Free trial users: Data deleted within 30 days after trial expiration if no subscription is started
- Cancelled subscriptions: Data retained for 30 days, then deleted
- On request: You can request immediate deletion at any time via hello@seoranktracker.solutions
6. Subprocessors
We use the following third-party vendors to provide our services:
| Vendor | Purpose | Location |
|---|---|---|
| Supabase | Database & Authentication | US/EU |
| Vercel | Hosting & Deployment | US/Global |
| Stripe | Payment Processing | US |
| OpenAI / Anthropic | AI Optimization | US |
| Search Console API, Indexing API | US/Global | |
| Microsoft | Bing Indexing API | US/Global |
We may update this list as needed. Significant changes will be communicated to active users.
7. International Data Transfers
Some of our infrastructure and subprocessors operate outside the EU/EEA, including in the United States. For transfers of personal data from the EU/EEA, we rely on:
- EU Standard Contractual Clauses (SCCs) with subprocessors
- Subprocessor compliance with applicable data protection frameworks
- Technical measures including encryption in transit and at rest
8. Security Measures
We implement appropriate technical and organizational measures to protect your data:
- Encryption: HTTPS/TLS for all data in transit
- Authentication: Secure OAuth 2.0 with Google
- Access Control: Role-based access limited to authorized personnel
- Backups: Regular automated backups to prevent data loss
- Hosting: Secure, reputable cloud infrastructure providers
- Monitoring: Security logging and anomaly detection
9. Data Subject Rights
We will assist you in responding to data subject requests including:
- Right of access
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
Contact us at hello@seoranktracker.solutions for assistance with any data subject requests.
10. Audit Rights
Upon reasonable notice, we will make available information necessary to demonstrate compliance with this DPA and applicable data protection laws. This may include documentation, certifications, or responses to questionnaires.
11. Term and Termination
This DPA remains in effect for as long as we process your data. Upon termination of your account:
- We will cease processing your data except as required by law
- We will delete your data within 30 days unless you request earlier deletion
- Upon request, we can provide a copy of your data before deletion
12. Governing Law
This DPA is governed by the laws of the jurisdiction in which SEO Rank Tracker operates, with exclusive jurisdiction for disputes in the courts of that jurisdiction.
13. Contact
For questions about this DPA or data processing practices, contact us at:
Email: hello@seoranktracker.solutions
By using SEO Rank Tracker, you agree to this Data Processing Agreement.