Privacy Policy

Last updated: August 2026

1. Introduction & Commitment

SEO Pulse SEO Pulse (seopulse.com.br) values transparency, privacy, and maximum security for user and corporate data. This Privacy Policy outlines our technical and legal compliance (GDPR, LGPD) regarding how we collect, process, store, and protect data across our SEO intelligence, analytics, and AI platform.

2. Google API Data Accessed & Purposes

SEO Pulse operates under the Principle of Least Privilege. The primary sign-in requires strictly read-only scopes:

  • Google Search Console API (webmasters.readonly): Exclusively used to retrieve and display clicks, impressions, CTR, and average positions for queries and URLs across your verified sites.
  • Google Analytics 4 API (analytics.readonly): Used to analyze organic sessions, traffic sources, events, bounce rates, top landing pages, and conversion funnels.
  • Google User Info (openid, email, profile): Used solely for identity verification, secure authentication, and access control for your account and team.
  • Incremental Authorization (Google Drive — drive.file): This permission is NEVER required during default sign-in. It is requested on-demand only when a user explicitly chooses to export a report to Google Sheets or Google Slides, and is restricted exclusively to files SEO Pulse itself creates -- we never gain access to any pre-existing spreadsheet, presentation, or other file already in your Google Drive.
  • Google Ads API (Keyword Planner): Used to query aggregate keyword search-volume data, publicly available from Google and not tied to any individual user or personal data. Access is managed through a single application-level credential and does not require individual authorization from each user or organization.

3. Compliance with Google API Services User Data Policy

SEO Pulse's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do NOT sell, rent, transfer, or use your Google data for advertising, data brokering, or training public artificial intelligence models.

4. AI Providers & API Key Encryption

SEO Pulse supports AI providers (Google Gemini, Anthropic Claude, OpenAI, OmniRoute). All user-supplied API keys and secrets are encrypted with AES-256-GCM before storage and never exposed client-side. Data sent to AI models is strictly confined to the analytical context of the requested report.

5. Shared Links & Competitor Intelligence

Reports shared publicly via links utilize unique cryptographic tokens with optional expiration. Live SERP and competitor intelligence queries operate in isolation for analytical performance diagnostics.

6. Storage, Data Retention, & Security

All communications are encrypted via HTTPS with TLS 1.3. Strict multi-tenant isolation ensures your data is only accessible to authorized team members. We enforce rate-limiting, audit logs, and security defenses.

7. User Rights (GDPR/LGPD), Unlinking, & Deletion

You maintain complete ownership of your data. You can disconnect GA4 properties with 1 click, unlink sites, revoke permissions on your Google Account App Permissions page, or request permanent deletion of your account and all associated records.

8. Data Protection Officer & Contact

For inquiries regarding privacy, data protection, or exercising your rights, contact us at: adrianoliv.contato@gmail.com.