Privacy Policy
SEODevil ("we", "us") is a technical SEO audit tool operated by team Execudea. This policy explains what information we collect when you use SEODevil, how we use it, who we share it with and the choices you have. If you have questions, email us at privacy@seodevil.com.
1. Information we collect
Account information
When you sign up we collect your name, email address and a password. Passwords are stored only as a one-way hash. If you join a team, we store your membership and role.
Websites and audit data
When you add a website or run an audit, we fetch the public pages you point us to and store the results: page HTML metadata, headings, links, images, headers, robots.txt, sitemaps, performance measurements, scores, issues, tasks, comments and generated PDF reports. When monitoring is on, we re-check your pages on a schedule and store the changes we detect.
Connected services
You can optionally connect other services. We only store what each integration needs:
- Google Search Console: an OAuth refresh token, the Google account email you connected with, and Search Console performance data for your verified properties (see section 3).
- WordPress: your site URL, username and an Application Password, used to read and update titles, meta descriptions and image alt text when you apply a fix. We keep a record of each change, including the previous value so you can revert it.
- GitHub: a fine-grained personal access token, used to read your repository's source files and open pull requests that you approve.
- Slack: an incoming webhook URL, used to post monitoring alerts.
Tokens, passwords and keys for connected services are encrypted at rest. You can disconnect any of them at any time from the website's settings.
Usage information
We log which AI features you use and how many tokens they consume, so we can enforce plan limits and manage costs. Our servers also keep standard technical logs (IP address, request time, browser user agent) for security and debugging.
2. How we use information
- To run audits, monitoring, reports and the other features you request.
- To generate fix suggestions and apply changes to your connected sites when you ask us to.
- To send account emails such as password resets, alerts you've enabled and shared reports.
- To enforce plan limits, prevent abuse and keep the service secure.
- To fix bugs and improve the product.
We do not sell your personal information and we do not use it for advertising.
3. Google user data
If you connect Google Search Console, we request read-only access to your Search Console data (webmasters.readonly) plus your basic Google account email (openid, email). We never request write access.
What we access: the list of Search Console properties you can view, and search performance data for the property matching your website: clicks, impressions, click-through rate and average position, broken down by page, search query and date.
How we use it: only to show you your search performance inside SEODevil, measure the effect of SEO fixes you've made, and find opportunities such as pages ranking just off page one, pages competing for the same query and pages losing traffic. Data syncs once a day. On paid plans, you can also ask us to rewrite a page's title and description for a search query it ranks for.
Sharing: your Google data is visible only to you and to teammates you've given access to that website. We don't sell it or use it for advertising. The one exception is the snippet rewrite: only when you request one, we send that single search query and page URL (no click, impression or ranking figures) to our AI provider to write the suggestion. We only use AI providers that don't train their models on this data, and we never use Google data to train AI models ourselves.
Storage and deletion: the refresh token is stored encrypted. When you disconnect Search Console, we delete the token and stop syncing. Performance data that was already synced is kept so your fix-impact history survives a reconnect; it's permanently deleted when you delete the website or your account, or within 30 days of you asking us at privacy@seodevil.com. You can also revoke our access anytime at myaccount.google.com/permissions.
SEODevil's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. Service providers we share data with
We use these providers to run SEODevil. Each receives only what it needs for its task:
- AI providers (Anthropic, Google Gemini or Groq): when you use AI features such as fix suggestions, alt-text generation, llms.txt generation or AI visibility checks, we send relevant page content, URLs, issue details and your prompts. Image files may be sent for alt-text generation. For a snippet rewrite you request, we also send the Search Console query and page URL it's for (see section 3). We don't send your account details or any other Search Console data, and these providers don't use it to train their models.
- Google PageSpeed Insights: receives the URLs you audit to measure performance.
- Traffic data providers (SimilarWeb, DataForSEO): when enabled, receive your website's domain to return traffic estimates.
- Email delivery: our email provider processes your email address to send account and alert emails.
- Hosting: our servers and database host all of the data described above.
We may also disclose information if required by law, or to protect the rights and safety of our users and the service.
5. Data retention
We keep your account and audit data for as long as your account is active. When you delete a website, its audits, tasks, reports, monitoring history and Search Console data are deleted with it. When you ask us to delete your account, we delete your personal information within 30 days, except where we must keep it to meet legal obligations.
6. Security
All traffic to SEODevil uses HTTPS. Credentials for connected services are encrypted at rest, passwords are hashed, and access to production systems is limited to the people who operate the service. No system is perfectly secure, but we work to protect your data and will notify you of a breach that affects it as required by law.
7. Your rights
You can view and update your account information in your profile, disconnect integrations at any time, and delete your websites. You can also ask us to access, correct, export or delete your personal information by emailing privacy@seodevil.com. Depending on where you live (for example the EU, UK or California), you may have additional rights, including the right to complain to your local data protection authority.
8. Cookies and local storage
We use your browser's local storage to keep you signed in and remember interface preferences. We don't use advertising or third-party tracking cookies.
9. Children
SEODevil is not intended for anyone under 16, and we don't knowingly collect their data.
10. Changes to this policy
If we make material changes, we'll update the date above and notify signed-in users by email or in the app before the changes take effect.
11. Contact
Questions or requests about your privacy: privacy@seodevil.com.