Privacy notice

Who is responsible

[operator: legal name, ID code and address - to be filled in by the owner] operates seo.producer.ge and is responsible for the personal data described here.

What we store

Account: e-mail address, name (optional), a salted scrypt hash of the password (never the password itself), the language, the plan, sign-in sessions (only a hash of the session token) and, if you use Google sign-in, your Google account id.

Sites and audits: the addresses you add, the audit results (crawled public pages, their status and the issues found), the monitoring schedule, the Search Console property and keywords you choose.

Google Search Console: a refresh token, stored encrypted (AES-256-GCM); the reports themselves are fetched when you open them and kept in memory for a few minutes.

Quick audits without an account: the result and a keyed hash of your IP address (for the rate limit), deleted after one day.

Cookies

We use only cookies that the service needs: seo_s (your sign-in session, 30 days), seo_v (the quick audit without an account, 1 day), seo_lang (the language you chose, 1 year), short OAuth state cookies (10 minutes) during Google sign-in or the Search Console connection, and seo_admin for the administrator. No analytics, advertising or tracking cookies - therefore there is no cookie banner.

Who receives data

E-mail provider (SMTP) for confirmation, password and monitoring e-mails.

Google, when you use Google sign-in or connect Search Console.

Anthropic (Claude), only when you request an AI suggestion: the address, title, description, headings and the beginning of the text of that audited page are sent to write the suggestion.

The sites you audit see requests from our crawler (PRODUCER.GE-SEO-Bot) and our server address.

How long

Account data and audits are kept until you delete the site or the account; older audits are reduced to their score after the limit of your plan. Quick audits without an account are deleted after one day. Server logs are kept for a short time for security.

Your rights

You can see and delete your data in "My sites" (deleting the account deletes everything in it). For access, correction or other requests under the Law of Georgia on Personal Data Protection (and the GDPR where it applies) write to us through producer.ge.