Privacy Policy

1. Data we collect

Account data: email address, password hash, project name and site domain, subscription and payment status.

Data from connected services: Google Search Console, Google Analytics 4, Yandex Metrica, Yandex Webmaster and Yandex Wordstat — only after you connect them yourself and only with read-only permissions.

Data we collect about your website: pages, links, response codes and page markup gathered by our crawler.

Technical data: request logs, IP address and browser information, used for security and troubleshooting.

2. How we use the data

To run the audit, build reports and recommendations, and show dynamics over time.

To bill your subscription and support you when you write to us.

We do not sell data, do not share it with advertisers, and do not use it to build advertising profiles.

3. Google user data and Limited Use

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We request read-only scopes and use the data solely to provide features visible to you in the service.

We do not transfer Google user data to third parties except as required to provide the service, comply with the law, or with your explicit consent.

We do not use Google user data for advertising, and we do not allow humans to read it except for security, legal compliance, or with your explicit permission for support.

4. AI processing

Some features (assistant, report summaries, analytics answers) send the relevant excerpt of your data to AI providers — OpenAI and Anthropic — to generate the text you asked for.

These providers process the data as our subprocessors and do not use it to train their models.

5. Storage and security

Data is stored on servers we control. Access tokens of connected services are stored encrypted.

Access to production systems is limited to people who need it to run the service.

6. Retention and deletion

We keep your data while your account exists. You can disconnect any data source at any time — its tokens are deleted immediately.

When you delete a project or an account, the related data is deleted; backups are rotated within 30 days.

To request deletion, write to support@simhadigital.com.

7. Your rights

You may request access to your data, correction, export or deletion, and you may object to certain processing.

If you are in the EEA or the UK, you also have the right to lodge a complaint with your data protection authority.

8. Cookies

We use only the cookies and local storage required to keep you signed in and to remember interface preferences such as the language. We do not use advertising cookies.

9. Changes

We may update this policy. The date at the top always shows the current version; material changes will be announced in the service.