Legal

Privacy Policy

Last updated: 16 June 2025

This Privacy Policy explains how SEO by 15MT ("we", "us", "our") collects, uses, stores, and protects your personal information and any third-party service data (including Google Analytics and Google Search Console data) when you use our platform.

1. Who We Are

SEO by 15MT is an AI-powered SEO content management platform. Our platform is accessible at https://seo.15metech.com. If you have questions about this policy, contact us at info@15metech.com.

2. Information We Collect

We collect the following types of information:

Account information: Name, email address, and password (stored as a one-way bcrypt hash — we never store your plaintext password).
Workspace / company profile data: Business name, website URL, target keywords, blog content, and SEO settings you enter into the platform.
API credentials: Third-party API keys you provide (OpenAI, Google, WordPress, SMTP) are stored encrypted at rest using AES-256-GCM encryption.
Google account data: When you connect a Google account, we store OAuth access tokens and refresh tokens, encrypted at rest. We retrieve read-only Analytics and Search Console data as described in Section 4.
Usage data: Log data including IP address, pages visited, and feature usage — used solely for security (rate limiting) and platform improvement.

3. How We Use Your Information

To provide and operate the platform services you signed up for.
To send transactional emails (login verification codes, password resets) — only when you request them.
To display your connected Google Analytics and Search Console performance data within your own account dashboard.
To enforce usage limits and platform security (rate limiting, fraud prevention).

We do not use your data to train AI models, build advertising profiles, or sell data to third parties.

4. Google API Data — Access, Use and Storage

Our use of Google API data complies with the Google API Services User Data Policy, including the Limited Use requirements.

When you choose to connect a Google account, we request the following read-only OAuth scopes:

https://www.googleapis.com/auth/analytics.readonly — Google Analytics 4 data
https://www.googleapis.com/auth/webmasters.readonly — Google Search Console data
https://www.googleapis.com/auth/analytics.manage.users.readonly — list of GA4 properties
openid, profile, email — to identify which Google account is connected

What we access: Traffic metrics (sessions, users, pageviews) from GA4, and search query performance data (clicks, impressions, average position) from Search Console — for the properties and date ranges you select.

How it is stored: OAuth tokens (access token and refresh token) are stored in our database encrypted with AES-256-GCM encryption. Synced performance metrics are stored in your account's isolated workspace and are never shared with other users or workspaces.

How it is used: Solely to display your own SEO performance data inside your dashboard. We do not share, sell, transfer, or use Google data for advertising, AI training, or any purpose other than displaying it back to you.

Retention: Google performance data is retained while your account is active. If you disconnect Google or delete your account, all stored tokens and synced metrics are permanently deleted.

5. Data Storage and Security

Data is stored on secured hosting infrastructure (Hostinger, EU/US data centres).
All sensitive credentials (API keys, OAuth tokens, SMTP passwords) are encrypted at rest using AES-256-GCM before being written to the database.
Passwords are hashed with bcrypt (never reversibly encrypted).
All data transmission occurs over HTTPS (TLS 1.2+).
Each client workspace is fully isolated — one company cannot access another company's data.

6. Who Can See Your Data

You — as the account holder, you have full access to your own workspace data.
Platform administrators — can access account information for support and billing purposes only, subject to the same security measures.
No third parties — we do not sell, license, or share your data with third parties except as required to operate the service (e.g. Stripe for payment processing), and only the minimum data necessary.

7. Third-Party Services

We integrate with the following third parties to provide the service:

Google APIs (Analytics, Search Console) — governed by Google's Privacy Policy.
Stripe — payment processing. We store only Stripe customer/subscription IDs, never card numbers. See Stripe's Privacy Policy.
OpenAI / Google Gemini / Anthropic — AI content generation. Only the content prompts you explicitly generate are sent; no personal account data is transmitted.
Your WordPress site — blog posts are published via the WordPress REST API using credentials you provide.

8. Your Rights

You have the right to:

Access the data we hold about you.
Correct inaccurate data via your account settings.
Delete your account and all associated data — see Section 9.
Disconnect Google at any time — this revokes our OAuth access and deletes all stored tokens and synced Google data. See the "Connect Google" page in your account settings.
Portability — request an export of your content (blog posts, keywords, schemas).

To exercise any of these rights, contact info@15metech.com.

9. Account and Data Deletion

To permanently delete your account and all associated data:

Contact us at info@15metech.com with the subject line "Account Deletion Request".
We will delete all personal data, workspace data, Google tokens, and synced metrics within 30 days.
Google-sourced data (Analytics/Search Console metrics) is also fully deleted at this time.

You can also visit our Data Deletion page for the specific Google data deletion process.

10. Cookies and Sessions

We use a single session cookie to keep you logged in. No advertising cookies, no tracking pixels. No third-party analytics scripts are loaded on this platform.

11. Children's Privacy

This platform is not directed at children under 13. We do not knowingly collect data from anyone under 13.

12. Changes to This Policy

We may update this policy from time to time. We will notify users by updating the "Last updated" date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.

13. Contact

For any privacy questions or requests, contact us at:
info@15metech.com
https://seo.15metech.com