Privacy Policy

Last updated: 1 November 2026

This Privacy Policy explains how Webhike Ltd ("we", "us"), operator of SEO Portal at https://seo-rankbot.com (the "Service"), collects, uses, stores and shares information, including data we receive from Google APIs. Webhike Ltd is the data controller for account data and acts as data processor for the website data you choose to connect.

1. Information we collect

• Account information: your company name, email address and a hashed (never plain-text) password when you register.
• Google account information: when you click "Connect Google", we receive your Google account email address and OAuth tokens that let us access Google Search Console on your behalf.
• Google Search Console data: the list of Search Console properties you have access to and, for the properties you choose to add, search performance data: search queries, page URLs, clicks, impressions, average position and dates.
• Technical data: a session cookie needed to keep you logged in, and standard web server logs (IP address, browser type, pages requested) kept for security.

2. Google API scopes we request

• openid and email: to identify which Google account you connected.
• https://www.googleapis.com/auth/webmasters.readonly: read-only access to Google Search Console so we can list your properties and read their search analytics. We cannot add, change or delete anything in your Search Console or Google account.

3. How we use your information

• To show your keyword rankings, position changes, clicks, impressions, pages and "quick win" keyword opportunities in your dashboard.
• To refresh this data automatically once a day.
• To generate SEO reports and recommendations for your own websites, only when you ask for them.
• To operate, secure and support the Service and to contact you about your account.

We use Google user data only to provide and improve user-facing features that are visible in your account. We do not use it for any other purpose.

4. Google API Services User Data Policy — Limited Use

SEO Portal's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We do not sell Google user data.
• We do not use or transfer Google user data for advertising, including retargeting or interest-based advertising.
• We do not use Google user data to determine creditworthiness or for lending purposes.
• We do not use Google user data to develop, improve or train generalised or non-personalised AI or machine-learning models.
• No person at Webhike Ltd reads your Google data unless you give us explicit permission (for example, for a support request), it is needed for security purposes or to comply with the law, or the data has been aggregated and anonymised for internal operations.

5. How we share information

We do not sell or rent your information. We share it only with:

• Hosting provider: our servers and database are hosted by a UK web hosting provider that stores the data on our behalf.
• AI analysis provider (optional features): when you request an AI-generated SEO report, the relevant search data for that website is sent to Anthropic's Claude API to produce the report. Anthropic does not use API data to train its models.
• Keyword data provider (optional features): to look up search volume and keyword difficulty, keyword phrases (not your Google account details) may be sent to DataForSEO.
• Legal requirements: if required by law, court order or to protect our rights and users.

6. How we store and protect data

• All traffic uses HTTPS encryption.
• Google OAuth tokens are encrypted at rest using AES-256-GCM.
• Passwords are stored only as secure one-way hashes.
• Each customer account is isolated, so users can only see data for sites in their own account.

7. Data retention and deletion

• Search Console data is kept while your account is active so you can see ranking history.
• You can revoke our access at any time at myaccount.google.com/permissions. After that, we can no longer read new data.
• To delete your account and all associated data (including Google tokens and Search Console data), email support@seo-rankbot.com. We will delete it within 30 days, and confirm when done.
• Server logs are deleted automatically within 90 days.

8. Your rights (UK GDPR)

You have the right to access, correct, export or delete your personal data, and to object to or restrict processing. To exercise these rights, email support@seo-rankbot.com. You can also complain to the UK Information Commissioner's Office at ico.org.uk. Our lawful bases are performance of a contract (providing the Service) and legitimate interests (security and support).

9. Cookies

We use one essential session cookie to keep you logged in and protect forms. We do not use advertising or tracking cookies.

10. Children

The Service is for businesses and is not directed at anyone under 18.

11. Changes to this policy

We may update this policy. We will change the "Last updated" date and, for significant changes, notify account holders by email.

12. Contact

Webhike Ltd
Edmonton, London, United Kingdom
Email: support@seo-rankbot.com