SEO Rank Tracker

Data Processing Agreement

Effective Date: December 17, 2025

This Data Processing Agreement ("DPA") forms part of the Terms of Service between you ("Customer", "Controller") and SEO Rank Tracker ("Processor") for the use of our SEO analytics platform at seoranktracker.solutions.

1. Key Terms (Plain English)

  • Controller (You): You decide what data to collect and why. You own your Google Search Console data and website information.
  • Processor (SEO Rank Tracker): We process your data only to provide our SEO analytics, optimization, and indexing services.
  • Subprocessor: Third-party vendors we use to help deliver our services (listed below).

2. Scope of Processing

When you connect your Google Search Console account to SEO Rank Tracker, we access and process the following data:

  • Website URLs and indexed pages
  • Search performance metrics (impressions, clicks, CTR, average position)
  • Indexing status and coverage reports
  • Sitemap information
  • Page content (when you request AI optimization)

Purpose Limitation

We process your data solely to provide:

  • SEO analytics and performance dashboards
  • AI-powered optimization recommendations
  • Automatic page indexing to Google and Bing
  • Reporting and insights features

Our commitment: We never use your data for our own marketing or profiling. We never sell or share your data with third parties for their own purposes.

3. Your Responsibilities (as Controller)

  • Ensure you have the legal right to share your Google Search Console data with us
  • Maintain lawful basis for any data collection on your websites
  • Implement required cookie banners and privacy notices on your sites
  • Handle data subject access requests from your website visitors
  • Notify us if you become aware of any data breach affecting shared data

4. Our Responsibilities (as Processor)

  • Process data only according to your instructions and this agreement
  • Maintain appropriate security and confidentiality measures
  • Assist you with data protection compliance obligations
  • Notify you promptly of any data breach affecting your data
  • Delete your data upon account termination or upon request
  • Make available information necessary to demonstrate compliance

5. Data Retention

  • Active accounts: Data retained while your account is active
  • Free trial users: Data deleted within 30 days after trial expiration if no subscription is started
  • Cancelled subscriptions: Data retained for 30 days, then deleted
  • On request: You can request immediate deletion at any time via hello@seoranktracker.solutions

6. Subprocessors

We use the following third-party vendors to provide our services:

Vendor Purpose Location
Supabase Database & Authentication US/EU
Vercel Hosting & Deployment US/Global
Stripe Payment Processing US
OpenAI / Anthropic AI Optimization US
Google Search Console API, Indexing API US/Global
Microsoft Bing Indexing API US/Global

We may update this list as needed. Significant changes will be communicated to active users.

7. International Data Transfers

Some of our infrastructure and subprocessors operate outside the EU/EEA, including in the United States. For transfers of personal data from the EU/EEA, we rely on:

  • EU Standard Contractual Clauses (SCCs) with subprocessors
  • Subprocessor compliance with applicable data protection frameworks
  • Technical measures including encryption in transit and at rest

8. Security Measures

We implement appropriate technical and organizational measures to protect your data:

  • Encryption: HTTPS/TLS for all data in transit
  • Authentication: Secure OAuth 2.0 with Google
  • Access Control: Role-based access limited to authorized personnel
  • Backups: Regular automated backups to prevent data loss
  • Hosting: Secure, reputable cloud infrastructure providers
  • Monitoring: Security logging and anomaly detection

9. Data Subject Rights

We will assist you in responding to data subject requests including:

  • Right of access
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability

Contact us at hello@seoranktracker.solutions for assistance with any data subject requests.

10. Audit Rights

Upon reasonable notice, we will make available information necessary to demonstrate compliance with this DPA and applicable data protection laws. This may include documentation, certifications, or responses to questionnaires.

11. Term and Termination

This DPA remains in effect for as long as we process your data. Upon termination of your account:

  • We will cease processing your data except as required by law
  • We will delete your data within 30 days unless you request earlier deletion
  • Upon request, we can provide a copy of your data before deletion

12. Governing Law

This DPA is governed by the laws of the jurisdiction in which SEO Rank Tracker operates, with exclusive jurisdiction for disputes in the courts of that jurisdiction.

13. Contact

For questions about this DPA or data processing practices, contact us at:

Email: hello@seoranktracker.solutions

By using SEO Rank Tracker, you agree to this Data Processing Agreement.