Privacy Policy

1. Who we are

SEO Pinpoint (“we”, “us”) is based in the United Kingdom and is the data controller for the personal data described in this policy.

2. Data we collect

If you sign in with Google: your Google account ID and email address, plus a session cookie that keeps you signed in.

If you use the free report tool: the file you upload is processed in memory to build your report and is never stored. Your IP address is used only to enforce the one-report-per-24-hours limit, held in our cache for 24 hours, and never linked to an account or written to our database.

A separate cookie set by your browser after a free report shows a “come back in X hours” countdown. It holds only a timestamp, is not used for enforcement, and you can clear it freely.

If you subscribe to Pro: payment details are handled directly by Stripe. We never see or store your card number. We keep a Stripe customer reference and your subscription period so we know your account is active.

If you connect Google Search Console directly: the search performance data that connection provides, for as long as the connection stays active.

3. How we use your data

To create and secure your account, to generate your report, to enforce the free-tier limit, to process your subscription, and to run any direct Search Console connection you set up.

4. Legal basis for processing

We process your account and session data because it is necessary to provide the service you asked for (performance of a contract). We process your IP address for rate-limiting and for blocking automated abuse, under our legitimate interest in keeping the service secure.

5. Who we share your data with

Google, to verify your identity when you sign in. OpenAI, which receives only aggregated, non-identifying summaries of your keyword data (clicks, impressions, positions) to write the prose parts of your report, never your name, email, or account details.

Stripe, to process payments, and Google Search Console, if you connect an account directly. Cloudflare, which routes and protects traffic to the site and our API. We do not sell your data or share it for advertising.

6. International transfers

OpenAI processes data in the United States, and Cloudflare operates a global network that routes requests outside the UK. Where your data leaves the UK, we rely on appropriate safeguards such as standard contractual clauses.

7. How long we keep it

Account data (your Google ID and email) is kept for as long as your account exists. Free-tier report uploads are never stored. Rate-limit records tied to your IP address expire automatically after 24 hours. Your session cookie expires after 7 days or when you sign out.

8. Cookies

sp_session: essential, keeps you signed in, httpOnly so it cannot be read by scripts. sp_upload_after: functional, shows your free-tier countdown, holds no personal data. We do not use advertising or analytics cookies.

9. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict, or port your data, and to object to how we use it. You can delete your account and its data at any time from account settings.

You can also complain to the UK Information Commissioner’s Office (ico.org.uk) if you believe we have not handled your data properly.

10. Children’s privacy

SEO Pinpoint is not directed at children under 13, and we do not knowingly collect data from them.

11. Changes to this policy

We may update this policy as the service changes. If we make a material change, we will update the date below.