Legal
Privacy, without the legal fog.
How OptionSEO handles account data, provider credentials, sessions, third-party services and deletion.
Effective September 2026
01
Account and application data
Authentication is handled through Supabase Auth. Project data, saved research, usage context, and other application records may be stored in the OptionSEO Supabase database and protected by row-level security policies.
02
Provider credentials
DataForSEO and OpenRouter credentials are submitted through authenticated server endpoints and stored server-side through Supabase Vault. The browser receives credential status rather than secret values.
03
Third-party services
When you use a feature that depends on an upstream provider, OptionSEO may send the required request to services such as DataForSEO or OpenRouter. Those providers process information according to their own policies and contractual terms.
04
Sessions and browser storage
Supabase authentication may use browser-managed session mechanisms required to keep you signed in. Persistent account, project, keyword, ranking, and credential data is not intended to depend on browser storage.
05
Cookies and analytics
OptionSEO does not intentionally add advertising or behavioral tracking cookies. Authentication-related cookies or storage may be used as required by the sign-in flow. Any analytics or telemetry introduced later will be documented in an updated policy.
06
Security
The application uses authenticated routes, validation, database access controls, server-side provider integrations, and protected secret storage. No internet-connected system can guarantee absolute security.
07
Retention and deletion
Account and application records are retained while needed to provide the workspace. Authenticated users may request deletion through available account controls; deletion can be subject to backups, legal obligations, and connected-service retention policies.
08
Policy changes
Material changes will be published on this page with an updated effective date.
Questions about privacy or deletion?
Read the terms