Privacy Policy
This policy explains what Aghrba SEO collects, why, who it is shared with, and how you can inspect, export or delete it. Section 4 covers data accessed through your Google account in full detail.
Aghrba SEO (the "Service") is operated by AGHRBA TECHNOLOGICAL SOLUTIONS ("we", "our", "us"). The Service is an autonomous search-growth platform: it finds search demand for a website you own, plans and writes content, publishes it to your content management system, and measures whether that content produced search visibility, traffic and leads.
By creating an account or connecting a service to Aghrba SEO, you agree to this policy. If you do not agree, please do not use the Service.
1. Information You Give Us
- Account details: your name, email address, a hashed password, and the organisation or workspace name you choose.
- Sites you manage: the domain names of websites you own or are authorised to manage, plus their language and market settings.
- Integration credentials: credentials for the systems you connect — your CMS (for example a WordPress application password), and OAuth tokens for Google services. These are encrypted at rest.
- Content and instructions: topics, keywords, brand guidance, and any drafts or edits you make in the editor.
- Correspondence: support requests and anything else you send us.
2. Information We Collect Automatically
- Usage data: pages viewed in the app, features used, actions taken and their timestamps.
- Technical data: IP address, browser and device type, and server logs including API errors.
- Data about your website: we fetch and parse pages of the websites you add, in the same way a search engine crawler does, to audit their technical SEO.
- Leads captured on your site: if you use our conversion features, contact details submitted through forms on your website are stored in your workspace so you can act on them. These belong to you; we process them on your behalf.
3. How We Use Information
- To operate, secure and support the Service.
- To identify search opportunities, generate content, publish it to your CMS, and report on what it achieved.
- To authenticate you and protect accounts from abuse.
- To send service and alert emails you have not opted out of.
- To meet legal, tax and accounting obligations.
We do not sell personal information, and we do not use your data or your Google account data to serve advertising.
4. Google API Services — What We Access and Why
Aghrba SEO connects to Google Search Console and Google Analytics 4 using Google OAuth. You authorise each connection yourself on Google's consent screen, per website, and you can withdraw it at any time (see section 4.5).
4.1 The exact scopes we request
| Google product | OAuth scope | Why Aghrba SEO needs it |
|---|---|---|
| Google Search Console See and edit the Search Console properties you own | https://www.googleapis.com/auth/webmasters | To read the search queries, pages, clicks, impressions, click-through rate and average position for your own verified property, to check the index status of your own URLs, and to submit your sitemap so Google discovers new pages. Sitemap submission is a write operation, so the read-only variant of this scope is not sufficient. |
| Google Analytics 4 View your Google Analytics data | https://www.googleapis.com/auth/analytics.readonly | To list the GA4 properties you can access so you can choose one, and then to read aggregate traffic figures for that property — sessions, users, page views, bounce rate, average session duration and conversions by date and page path — so the platform can tell whether published content actually produced traffic. This scope is read-only; we never modify your Analytics configuration. |
We do not request access to your Google identity, Gmail, Drive, Contacts, Calendar or any other Google service. The scopes above are the only ones our consent screen asks for. Because we never request an identity scope, we never receive your Google account name, email address or profile photo.
4.2 The Google data we store
From Google Search Console, for properties you have connected:
- The list of properties your Google account can access, so you can choose which one belongs to the site you added.
- Search performance rows: search query, page URL, clicks, impressions, click-through rate, average position, and date.
- Index status for your URLs, retrieved through the URL Inspection API.
- Confirmation that a sitemap submission succeeded. Submitting your sitemap is the only write we ever perform against Search Console.
From Google Analytics 4, for the property you select:
- The list of GA4 properties your account can access.
- Aggregate metrics by date and page path: sessions, total users, page views, bounce rate, average session duration and conversions.
This is aggregate, site-level measurement data. We do not request or store user-level identifiers, Google Analytics user IDs, client IDs, or any audience or remarketing data.
4.3 Limited Use disclosure
Aghrba SEO's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4.4 Artificial intelligence and Google data
Aghrba SEO uses third-party AI models to write content. So that you know exactly what leaves our servers: the search query strings and aggregate performance figures we read from your Search Console property are included in the prompts we send to those models, because the topic of an article is chosen from what people actually search for on your site. Google OAuth tokens are never sent to any AI provider.
We use these providers under commercial API terms which do not permit them to train their models on our inputs or outputs. Consistent with the Limited Use requirements:
- We do not use Google user data to develop, improve or train generalised or general-purpose AI or machine-learning models.
- We do not transfer Google user data to any AI model provider for that provider's own model-training purposes.
- Human beings do not read your Google data except where you ask our support team to investigate a problem, or where we are legally required to.
4.5 Withdrawing access
You can disconnect at any time, in either direction:
- Inside Aghrba SEO: open the site, go to its integrations, and choose Disconnect for Search Console or Analytics. We ask Google to revoke the token and then delete it from our database.
- From your Google account: visit Google Account permissions and remove Aghrba SEO. Access stops immediately.
Disconnecting stops all future access. To also erase the performance data already retrieved, delete the site or your account — see Data & Account Deletion.
Your use of Google services through Aghrba SEO remains subject to the Google Privacy Policy.
5. Who We Share Information With
We share data only with service providers that make the product work, and only to the extent each one needs. The table states plainly whether a provider can receive data derived from your Google account.
| Provider | Purpose | Google-derived data received |
|---|---|---|
| Anthropic (Claude) | Generating article drafts, briefs and SEO recommendations | Search query strings and aggregate performance figures drawn from your Search Console property, used as the topic and context for generation |
| OpenAI | Generating and refining content when it is the selected model | The same search query strings and aggregate performance figures as above |
| DataForSEO | Looking up search volume, keyword difficulty and SERP data for keywords | Keyword strings only, including keywords first observed in your Search Console data. No metrics, URLs or account identifiers are sent |
| fal.ai | Generating illustrations for articles | None — image prompts only |
We also send content you have approved to your own content management system, and we send transactional email through an email delivery provider. We may disclose information where legally compelled, or to a successor entity in a merger or acquisition — in which case this policy continues to apply until you are notified otherwise.
We never sell your data, and we never share Google user data for advertising, credit assessment, lending, or any purpose unrelated to providing features you have asked for.
6. Storage, Security and Location
- Data is stored in a PostgreSQL database on dedicated servers we control in the European Union (Germany).
- All traffic to and from the Service is encrypted in transit with TLS.
- Credential material is encrypted at rest with authenticated envelope encryption. This covers Google OAuth access and refresh tokens and CMS credentials.
- Access is limited to the members of your organisation, according to the role you assign them, and to a small number of our staff who need it to operate the Service.
- Credentials and tokens are stripped from application logs and error reports automatically.
Our AI and data providers may process data outside the EU. Where that happens, transfers rely on the providers' Standard Contractual Clauses or an equivalent lawful mechanism.
No system is perfectly secure. If a breach affects your personal data, we will notify you and any competent supervisory authority as required by law.
7. How Long We Keep Data
- Google OAuth tokens: until you disconnect or delete the site, at which point they are revoked with Google and deleted.
- Search Console and Analytics performance data: for as long as the site exists in your workspace, because measuring change over time is the point of the product. Deleting the site deletes these records.
- Account and workspace data: for the life of your account, then deleted as described in the deletion page.
- Billing and tax records: retained for as long as applicable law requires, even after account deletion.
8. Your Rights
If you are in the European Economic Area, the United Kingdom or Switzerland, the GDPR gives you the right to access, correct, delete, restrict and object to processing of your personal data, and to receive it in a portable format. California residents have comparable rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. We do not sell personal information under either law.
Our lawful bases for processing are performance of our contract with you, our legitimate interest in operating and securing the Service, your consent where you have given it (for example when authorising a Google connection), and compliance with legal obligations.
To exercise any right, email [email protected]. We respond within 30 days. You also have the right to complain to your local data protection authority.
9. Cookies
We use cookies and equivalent browser storage that are strictly necessary to run the Service: keeping you signed in, protecting against cross-site request forgery, and remembering interface preferences such as light or dark theme. We do not use advertising or cross-site tracking cookies. Blocking essential cookies will prevent you from signing in.
10. Children
The Service is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
11. Changes to This Policy
We may update this policy as the product changes. The effective date at the top always reflects the current version. If a change materially affects how we handle your data — in particular how we handle Google user data — we will notify you by email or in the application before it takes effect.
12. Contact
AGHRBA TECHNOLOGICAL SOLUTIONS
Email: [email protected]
Web: https://seo.aghrba.com
See also our Terms of Service and Data & Account Deletion pages.