Privacy Policy

Last updated September 23, 2026

SEOChunk ("we", "us") is a beta product. This policy describes what we collect, why, and how you can remove it.

What we collect

• Account: email and a bcrypt-hashed password, or your name/email/photo if you sign in with Google.
• Business info you enter: business name, website URL, address, and (if provided) your Google Business Profile place ID.
• Audit data: publicly crawlable content from the website you submit (titles, headings, meta tags, schema, links), plus search-rank data we look up for it via DataForSEO.
• Credits and usage: a ledger of credits granted and spent, and which audit findings you've unlocked or rated.
• Chat messages: anything you type into the in-app chat widget.
• Google Search Console data (only if you connect it): read-only search performance for the property you choose — queries, clicks, impressions, and average position.

Google Search Console access specifically

If you connect Search Console, we request the webmasters.readonly scope — read-only, we cannot change anything in your Search Console account. That data is fetched live and shown back to you on your tracking page; it is never sent to any AI model or third party, and never shared, sold, or used for anything other than displaying it to you. Your refresh token is encrypted at rest (AES-256-GCM) and used only to fetch that data on your behalf. You can revoke access at any time from your Google Account permissions page, or by clicking "Disconnect" on your tracking page — either immediately deletes the stored token.

Where the rest of your data goes

• OpenRouter (routing to Anthropic/Google/OpenAI models) processes your website's crawled facts to produce audit findings, and processes chat messages to answer them. It does not receive your Search Console data, password, or payment details (we don't collect payment details yet — see Terms).
• DataForSEO receives search queries and your general location to look up rank data — no personal account data.
• Everything is stored in a Postgres database we operate, hosted on our own infrastructure (Coolify/Hostinger), not a third-party SaaS database.

We do not sell your data, and we do not run ads.

Cookies

We use an httpOnly session cookie to keep you signed in, and short-lived (10-minute) httpOnly cookies during the Google Search Console connect flow only. No advertising or cross-site tracking cookies.

Deleting your data

Email us (below) to request deletion of your account and everything tied to it — business profiles, audits, credit history, and any connected Search Console token.

Changes

We'll update the date at the top of this page if this changes materially while we're in beta.

Contact

[email protected]