Data Processing Information

This page explains how SEO Pine processes personal and website data, where that data is stored, and which third parties (subprocessors) are involved. It complements our Privacy Policy.

What we process

• Account data: when you sign in (with Google, or a one-time link emailed to you) to run an audit, we store your name, email, and profile image, your plan status, and the list of reports you generate. Sign-in links are single-use, expire in 15 minutes, and are stored only as a hash.
• Report data: publicly accessible HTML and metadata of the domain you submit.
• Operational data: a hashed (SHA-256) account id or IP address used solely for rate limiting.
• Developer Platform data: if you use MCP or the API, a hashed (SHA-256) version of each API key (never the plaintext) and a short log of recent requests (timestamp, tool, status, duration, and AI client).
• Product analytics: pseudonymous usage events (pages, tools and reports used) processed by Mixpanel to improve the product. Tied to your account id when you are signed in.
• Billing data: if you subscribe to Pro, Dodo Payments collects and stores your payment details and processes the charge as our merchant of record. We store only your subscription status, billing interval, renewal date, and Dodo identifiers, never your full card number.

Where analysis happens

The SEO and AEO analysis runs in your browser. Our servers act as a thin proxy to fetch the target page (to bypass cross-origin restrictions) and to store the final report. We do not run the analysis on our servers, and we do not retain the raw HTML beyond what is needed to produce the report.

Where data is stored

Reports, leads, contact messages, rate-limit records, hashed API keys, and MCP request logs are stored in Cloudflare R2 object storage. IP addresses and API keys are hashed before they are ever written. Lead records never contain an IP address.

Subprocessors

• Cloudflare (Workers, R2, Email): application hosting and serverless functions, object storage for reports, leads, and operational records, and delivery of transactional email (sign-in links, welcome, and billing notices).
• Google PageSpeed Insights API: Core Web Vitals measurement for the domain you submit.
• Ahrefs (Domain Rating): we send only the domain (no personal data) to fetch its Domain Rating, and cache the result. Domain Rating by Ahrefs.
• Mixpanel: product analytics for pseudonymous usage events. No advertising use.
• Dodo Payments: merchant of record and payment processor for Pro subscriptions (card details, billing data, tax, and transaction history). Used only if you subscribe.

These providers process data on our behalf under their respective data processing terms. We do not sell personal data or share it with advertisers.

Retention

• Reports persist at their permanent URL until removal is requested.
• Rate-limit records roll off automatically after 24 hours.
• API keys are kept until you revoke them; MCP request logs keep only your most recent requests.
• Lead and contact records are kept until you ask us to delete them.
• Billing records (subscription status and payment history) are kept while your account exists and as required for tax and accounting.

Your rights

You can request access to, correction of, or deletion of any personal data we hold about you by emailing hello@seopine.com. Because reports are generated from publicly accessible pages and may be shared by link, ask us to remove a specific report URL if you need it taken down.

International transfers

Our subprocessors operate globally. Data may be processed in regions outside your own under the standard safeguards offered by each provider.