Privacy policy

This policy explains what data Yes SEO collects, why, how long we keep it and the choices you have. Last updated Oct 13, 2026.

Who we are

Yes SEO is operated by Yes SEO. We are the controller of the personal data described here. Contact us through the contact form.

Data we collect

When you run a check without an account

  • The URL you submit and the audit results, so we can show and share your report.
  • A salted hash of your IP address (a one-way code we can’t turn back into your IP) and a random ID stored in a first-party cookie, used only to enforce the free daily limit and prevent abuse. We do not store your raw IP address in our database.

When you create an account

  • Your e-mail address, optional name and a securely hashed password.
  • Your audits, monitored sites and, if you use white-label reports, your company name, color, website and logo.
  • Security records such as hashed IP addresses of failed login attempts.

When you pay

Payments are processed by Paddle.com, our merchant of record and reseller. Paddle collects your payment details, billing address and tax information under its own privacy policy. We receive only what we need to run your subscription: a customer ID, subscription status, plan, amounts and invoice numbers. We never see or store your card number.

When you contact us

Your name, e-mail address and message, plus a hashed IP address to prevent spam.

Ads and analytics (only with consent)

If you accept cookies, we load Google AdSense to show ads to Free visitors. These services may set cookies and process your IP address and device information. If you decline, they are not loaded. Paying customers never see ads.

Why we use data (legal bases)

  • To provide the service you ask for — running audits, accounts, reports, monitoring (performance of a contract).
  • To prevent abuse and keep the service secure — rate limits, login protection, moderation (legitimate interests).
  • To send transactional e-mails — welcome, receipts, payment problems, limit notices, password resets and the weekly reports you set up (contract).
  • To show ads and measure usage — only with your consent, which you can withdraw at any time.
  • To meet legal obligations such as tax and accounting records (legal obligation).

How long we keep data

  • Reports from anonymous checks: deleted automatically after 30 days.
  • PDF report files: deleted automatically shortly after their 60-minute download link expires.
  • Usage counters and rate-limit records: up to 60 days.
  • Account data and saved audits: until you delete them or your account. You can delete your account at any time from the account page.
  • Payment records: as long as tax law requires.

What we check on other websites

Our crawler only reads publicly available web pages that a user asked us to check, and the robots.txt, sitemap and links of those pages. We don’t log in, submit forms or collect personal data from those pages beyond what appears in the public HTML and is needed to show the report. If a report contains personal data that shouldn’t be there, use the “Report this page” link or contact us and we’ll remove it.

Who we share data with

We share data only with providers that help us run the service: our hosting provider, Paddle (payments), our e-mail delivery service, and — with consent — Google (ads). We never sell personal data or the list of URLs people check.

International transfers

Some providers process data outside your country, including in the United States. Where required, transfers are protected by standard contractual clauses or equivalent safeguards.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal data, to object to processing and to withdraw consent. To use these rights, contact us. You can also complain to your local data protection authority.

Security

We use HTTPS everywhere, hash passwords and IP addresses, store files outside the public web folder, protect forms against cross-site request forgery and limit how often expensive actions can run.

Children

Yes SEO is not directed at children under 16 and we don’t knowingly collect their data.

Changes

We’ll update this page when our practices change and adjust the date at the top. Significant changes will be announced by e-mail to account holders.