How We Protect Your Data & Privacy

1. Introduction

AuthoritySpecialist SEO Solutions OÜ ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

The data controller is AuthoritySpecialist SEO Solutions OÜ, a company registered in Estonia (registry code 17165573), Sepapaja tn 6, 15551 Tallinn, Estonia. Because we are established in the European Union, we apply the EU General Data Protection Regulation (GDPR) to all personal data we process, wherever you are located.

2. Information We Collect

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our services
• Improve and personalize your experience
• Process your transactions and manage your account
• Send you technical notices, updates, and support messages
• Respond to your comments and questions
• Send you marketing and promotional communications (with your consent)
• Analyze usage patterns and improve our services
• Detect, prevent, and address technical issues and security threats

4. Legal Bases for Processing

Under the GDPR, we rely on the following legal bases:

• Performance of a contract — providing the services you signed up for, managing your account, and processing payments
• Legitimate interests — securing our services, preventing fraud and abuse, and understanding aggregated usage so we can improve the product
• Consent — marketing communications and non-essential cookies; you can withdraw consent at any time
• Legal obligation — accounting, tax, and other records we are required to keep under Estonian and EU law

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party vendors who perform services on our behalf
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. International Data Transfers

Some of our service providers (for example payment, hosting, analytics, and AI infrastructure providers) are located outside the European Economic Area, primarily in the United States. Where personal data is transferred outside the EEA, we rely on safeguards recognized by the GDPR: an adequacy decision of the European Commission (including the EU–U.S. Data Privacy Framework for certified providers) or the European Commission's Standard Contractual Clauses.

You can request more information about the safeguards applied to a specific transfer by contacting us.

7. Data Retention

We keep personal data only as long as needed for the purposes described in this policy: account data for the life of your account and up to 30 days after deletion; billing and invoicing records for 7 years as required by Estonian accounting law; support correspondence for up to 3 years; and analytics data in aggregated or anonymized form. Specific retention periods for Google user data are described below.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure.

9. Google User Data — Access, Retention & Deletion

When you connect Google Search Console or Google Analytics to your account, we access your Google user data through Google OAuth, limited to the scopes you authorize (read-only search performance and analytics data for websites you own or manage). Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use it: solely to display your search and analytics performance in your dashboard, generate your reports, and provide the agreed services. We never sell Google user data, never use it for advertising, and never transfer it except as needed to provide or improve the service in line with Google's Limited Use requirements.

Data retention: we retain Google user data only as long as necessary to provide the service. Cached Search Console / Analytics data is refreshed periodically and retained for up to 90 days; report outputs you generate are kept for the life of your account so you can access your history.

Data deletion: you can revoke our access at any time by disconnecting Google from your dashboard (Settings → Data connections) or via your Google Account permissions page. When you disconnect, delete your account, or submit a verified deletion request, we delete the associated Google user data (including cached tokens and data) within 30 days. You can also request an export or deletion of your data at any time from your dashboard (Privacy & data) or by contacting us.

10. Your Rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights:

• Access: Request access to your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Restriction: Request restriction of processing
• Portability: Request transfer of your data
• Objection: Object to processing of your data
• Withdraw Consent: Withdraw consent at any time

You can exercise these rights from your dashboard (Privacy & data) or by contacting us. You also have the right to lodge a complaint with your supervisory authority — in our case the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, AKI), aki.ee/en.

California residents (CCPA / CPRA)

We do not sell or share your personal information. If you are a California resident, you have the right to know what personal information we hold, to request access or deletion, and to non-discrimination for exercising these rights. Submit a request via your dashboard (Privacy & data) or by contacting us.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites.

13. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

15. Contact Us

If you have any questions about this Privacy Policy or want to exercise your rights, contact us at contact@authorityspecialist.com or by mail: