Privacy Policy

Information We Collect

We collect account information, workspace membership, project settings, website URLs, sitemap URLs, competitor domains, content assets, SEO tasks, audit results, and other information that users submit or generate while using the product.

When a project administrator connects Google Search Console, we collect and process the Google data that the administrator authorizes for the selected Search Console property.

Google Search Console Data

Semonitapp uses Google OAuth to connect a verified Search Console property to a project. Depending on the permission granted, the service may access Search Console data for the following purposes:

• List Search Console properties that the authorized Google Account can access.
• Fetch Search Analytics metrics such as queries, pages, clicks, impressions, CTR, and average position.
• Inspect URL indexing status for URLs that belong to a verified Search Console property.
• Submit a sitemap only when an authorized project administrator explicitly requests that action.
• Generate SEO diagnostics, content opportunity reports, monitoring views, and project-level recommendations.

How We Use Information

We use information to provide the service, authenticate users, maintain projects, display SEO performance and indexing diagnostics, generate content recommendations, monitor website issues, support customer requests, improve reliability, prevent abuse, and comply with legal obligations.

Google API Limited Use

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell Google user data, and do not allow humans to read Google user data unless necessary for security, legal compliance, support requested by the user, or service operation.

Storage and Security

• OAuth refresh tokens are stored server-side and encrypted at rest.
• Access to connected Search Console data is limited to authenticated users in the relevant workspace or project.
• API credentials and OAuth tokens are not exposed in the user interface.
• Application logs are designed to avoid storing raw access tokens, refresh tokens, or client secrets.
• Google data is not sold, used for advertising profiles, or shared with unrelated third parties.

Payments

Payments are processed through your selected provider, Paddle or Stripe. Paddle is our reseller and Merchant of Record for Paddle orders. Stripe processes payments for orders sold directly by Semonitapp. These providers collect the payment details, billing address, and tax information needed to complete an order under their respective privacy notices. We do not receive or store card numbers. We keep order references, plan, amount, billing period, and subscription status to provide the service and handle support.

Sharing

We may share information with infrastructure, hosting, analytics, security, and support providers that help us operate the service. These providers are only allowed to process information for our service purposes. We may also disclose information when required by law or to protect users, the service, and the public.

Retention, Revocation, and Deletion

Users may disconnect Google Search Console from a project at any time. Users may also revoke access from their Google Account permissions page. After disconnection or revocation, Semonitapp stops refreshing data from that Google Account. Users may request deletion of stored project data, OAuth credentials, or Google-derived data by contacting us.

Contact

For privacy questions, support, or data deletion requests, contact [email protected].