Privacy policy

Operated by CodingMarble SEO · Last updated 9 August 2026

1. What we collect

Account information

Your name, business name, email address and a securely hashed password. We never store your password in a readable form.

Website information

The public pages of the websites you add: their content, headings, links, images, structured data and performance measurements. This is the same information any search engine can read.

Connected data sources

If you connect Google Search Console or Google Analytics, we read the search and traffic measurements for your own property — queries, impressions, clicks, positions and conversions you have configured. We use this only to work on your website.

Access credentials

Where you choose to connect a CMS or hosting provider, the access token you supply is encrypted with AES-256-GCM before storage. Our team cannot read it, and it never appears in reports, logs or prompts sent to AI providers.

Technical records

Standard security and reliability records: request identifiers, timestamps, and one-way hashed values of IP address and browser agent for authentication auditing.

2. What we do with it

• Run keyword research, competitor analysis and improvement plans for your website.
• Apply changes you have approved, and keep a rollback of the previous value.
• Monitor your search positions and report measured outcomes.
• Answer your support messages.
• Take payment and keep billing records required by law.

3. What we never do

• We do not sell or rent your data.
• We do not use your website data to work on another customer's website.
• We do not send credentials, tokens or private customer data to AI providers.
• We do not publish anything on your website without your approval.

4. Service providers we use

To deliver the service we rely on: an AI provider for content and strategy generation (which receives page content, never credentials); search-data providers for keyword and search-results information; Google, where you have authorised Search Console or Analytics access; payment gateways, which handle card details entirely on their own systems — we never see or store card numbers; and our hosting provider, where data is stored on encrypted infrastructure.

5. Where data is stored

Data is stored on our servers and in the databases attached to them. Access is restricted, credentials are encrypted at rest, and connections use TLS.

6. How long we keep it

• Account and website data: for as long as your account is active.
• After cancellation: removed on request, and otherwise deleted within 90 days, except records we must keep for tax or legal reasons.
• Billing records: retained as required by law.

7. Your rights

You can ask us to show you the data we hold about you, correct it, delete your account and its data, or export your reports. Email ranjeetmishra0112@gmail.com from the address on your account and we will act within 30 days.

8. Disconnecting

You can revoke Google access from your Google account at any time, remove a CMS token from your provider, or deactivate our connector on your website. Any of these immediately stops the corresponding access.

9. Cookies

We use a single secure session cookie to keep you signed in, and a short-lived cookie during Google sign-in to protect against request forgery. We do not use advertising or third-party tracking cookies.

10. Children

The service is for businesses and is not directed at anyone under 18.

11. Changes

If this policy changes materially, we will tell you by email or inside your account before the change takes effect.

12. Contact

Privacy questions: ranjeetmishra0112@gmail.com. See our contact page.