Privacy Policy

1. Information We Collect

We collect information you provide directly and data needed to operate the service:

• ·Account information: name, email address, business/website name
• ·Google Search Console data: read-only access to your clicks, impressions, CTR and position data, used to generate your content opportunities
• ·Content you generate: opportunities, briefs and drafts created in the app
• ·Billing information: processed securely via PayFast (we never store card numbers)
• ·Usage & device data: features used, session information, browser type, IP address

2. How We Use Your Information

• ·To provide and operate the FindContentGaps service
• ·To analyse your Search Console data and generate content recommendations
• ·To process payments and manage your subscription
• ·To send service-related emails (receipts, expiry notices, support replies)
• ·To improve and develop new features
• ·To comply with legal obligations

We do not sell, rent or share your personal information with third parties for marketing purposes.

3. Google Search Console Data

We request read-only access to your Google Search Console data via Google OAuth. We never modify your GSC account or settings. Access tokens are encrypted at rest. We use this data solely to generate your content gaps, opportunities and briefs, and you can disconnect at any time. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Data Storage & Security

Your data is stored securely using Supabase (PostgreSQL). We use industry-standard encryption (TLS/HTTPS) for all data in transit and encrypt sensitive tokens at rest. Access to production data is restricted to authorised personnel only. We do not store payment card details — all payments are handled by PayFast, a PCI-DSS compliant payment processor.

5. Data Retention

We retain your account data for as long as your account is active. After cancellation, data is retained for 30 days to allow for export requests, then permanently deleted. You may request immediate deletion at any time by contacting us.

6. Third-Party Services

FindContentGaps uses the following third-party services:

• ·Google Search Console API — read-only performance data
• ·Supabase — database and authentication
• ·PayFast — payment processing (South Africa)
• ·Anthropic (Claude) and OpenAI — AI generation of briefs and drafts
• ·Resend — transactional email delivery
• ·Vercel — hosting and infrastructure
• ·Google Analytics — anonymised usage analytics

Each has its own privacy policy and we only share the minimum data required for them to operate.

7. Your Rights (POPIA / GDPR)

You have the right to:

• ·Access the personal information we hold about you
• ·Request correction of inaccurate information
• ·Request deletion of your personal information
• ·Object to the processing of your information
• ·Request a copy of your data in a portable format

To exercise any of these rights, contact ian@seopeaks.com. We will respond within 30 days.

8. Cookies

We use essential cookies to maintain your login session and remember preferences, and Google Analytics with anonymised IPs to understand usage. You can disable cookies in your browser, but some features may not work correctly without them.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

For any privacy-related questions or requests: