Privacy Policy

GenieSeo (at seo.geniedial.in) is operated by Peakenza Software Services ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect information about you when you use our Service. Contact us at support@geniedial.in with any privacy questions.

Account information. When you register, we collect your email address and a hashed password. We do not collect your name, phone number, or billing address — payment details are handled entirely by Paddle (see Section 6).

Google OAuth tokens. When you connect your Google account, we receive and store an OAuth access token and refresh token. These tokens grant read-only access to:

• Google Search Console (webmasters scope)
• Google Analytics 4 (analytics.readonly scope)

We do not access any Google data beyond these two scopes.

Usage data. We log tool calls made through your MCP URL (timestamp, tool name, property ID) to provide your activity history and for abuse prevention. We do not log the content of Google API responses.

Technical data. We collect standard web server logs including IP address, browser type, and referring URL. This data is used for security monitoring and is not linked to your account profile.

• To provide the Service — authenticating your account, retrieving your Google data on demand, and serving it to your AI client via your personal MCP URL.
• To communicate with you — transactional emails (account creation, password reset, subscription receipts). We do not send marketing emails without your explicit opt-in.
• To secure the Service — detecting abuse, rate-limiting, and investigating unauthorized access.
• To improve the Service — aggregate, anonymized usage analytics (e.g., which tools are called most often). Individual usage is not shared or sold.

Our use of data obtained from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google data only to provide the Service you requested — relaying your Search Console and GA4 data to your AI client.
• We do not transfer Google user data to third parties except as necessary to provide the Service or as required by law.
• We do not use Google user data for advertising or for training AI/ML models.
• You may revoke our access at any time via Google Account Permissions or from your GenieSeo dashboard. Upon disconnection, stored OAuth tokens are deleted immediately.

OAuth tokens are encrypted at rest using AES-256. Your personal MCP URL is a unique, opaque identifier — it does not contain your email or account ID. You can rotate or revoke it at any time from your dashboard.

Data is stored on servers within the EU/EEA or the United States depending on your deployment region. We use industry-standard transport security (TLS 1.2+) for all data in transit.

We retain account data for as long as your account is active. Upon account deletion, we delete your OAuth tokens and usage logs within 30 days. Aggregated, anonymized analytics are retained indefinitely.

Payments are processed by Paddle.com Market Limited ("Paddle"), our Merchant of Record. Paddle collects and stores your payment card details, billing address, and related transaction data. We never see or store your card number or CVV.

Paddle's handling of your data is governed by Paddle's Privacy Policy. For billing disputes or refund requests, contact us at support@geniedial.in.

We use a minimal set of cookies strictly necessary to operate the Service:

• Session cookie — keeps you logged in during your browser session.
• CSRF token — protects form submissions.

We do not use third-party advertising cookies, tracking pixels, or fingerprinting. We may use privacy-respecting, cookieless analytics (e.g., aggregated page-view counts) with no personal identifiers.

We do not sell your personal data. We share data only in the following limited circumstances:

• Service providers — Paddle (payments), hosting providers (infrastructure), and email delivery services, all bound by data processing agreements.
• Legal obligations — if required by law, court order, or to protect the rights and safety of Peakenza Software Services or others.
• Business transfer — in the event of a merger, acquisition, or asset sale, your data may be transferred. We will notify you via email before your data becomes subject to a different privacy policy.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data.
• Port your data in a machine-readable format.
• Object to or restrict certain processing.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email support@geniedial.in. We will respond within 30 days. If you are in the EU/EEA and are unsatisfied with our response, you may lodge a complaint with your local Data Protection Authority.

The Service is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or dashboard notice at least 14 days before taking effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

For privacy-related questions or data requests, contact Peakenza Software Services at: