Privacy Policy
Last updated: April 2, 2026
Who we are
TrackSEO is a product of PostReach AI Limited, a company registered in Hong Kong. We build tools that make SEO accessible to everyone. This policy explains how we handle your data when you use TrackSEO at trackseo.pro and app.trackseo.pro.
What we collect
- Account information: name, email address, and profile picture when you sign up (via email or Google OAuth)
- Payment information: processed entirely by Stripe. We never see, store, or have access to your full card numbers. We store only the Stripe customer ID and last 4 digits of your card for receipt display.
- Usage data: domains you analyse, reports generated, credit purchases, and feature interactions
- Technical data: IP address, browser type, device type, and general location (country level) for analytics and fraud prevention
What we do NOT collect
- We do not track you across other websites
- We do not use advertising cookies or trackers
- We do not sell, rent, or share your personal data with any third parties
- We do not use your data to train AI models
- We do not share the websites you analyse or your report data with anyone
How we use your data
- To provide the service: generating reports, managing credits, sending receipts
- To improve the product: understanding which features are used to make them better
- To prevent fraud: monitoring for suspicious payment activity
- To communicate with you: sending payment receipts via Stripe and responding to support requests
That's it. No marketing emails unless you explicitly opt in. No data sharing. No hidden uses.
Third-party services
- Supabase: hosts our database and authentication
- Stripe: processes payments. Stripe's privacy policy applies to payment data.
- Vercel: hosts our website
- DataForSEO: provides SEO data for reports. We send only the domain name you want analysed — no personal data.
- Google OAuth: if you sign in with Google, we receive your name, email, and profile picture. We don't access any other Google data.
We do not use Google Analytics, Facebook Pixel, or any advertising trackers.
Data storage and security
- Your data is stored securely in Supabase's cloud infrastructure
- All data is encrypted in transit (HTTPS/TLS) and at rest
- We use row-level security to ensure users can only access their own data
- Payment processing is PCI-DSS compliant via Stripe
- We retain your data only as long as your account is active
Your rights — delete your data
- You can delete your account at any time from Settings in the app
- When you delete your account, ALL your data is permanently removed: your profile, reports, purchase history, progress data, and achievements
- This action is irreversible and takes effect immediately
If you need help, email support@postreach.ai.
Cookies
We use only essential cookies required for authentication (keeping you logged in). We do not use analytics cookies, advertising cookies, or tracking cookies. No cookie banner is needed because we don't use optional cookies.
Children
TrackSEO is not intended for users under 16. We do not knowingly collect data from children.
Changes to this policy
If we update this policy, we'll post the changes here with a new "Last updated" date. For significant changes, we'll notify users via email.
Contact
For any privacy questions or data requests, email support@postreach.ai.