1. Scope and operator

This Privacy Policy explains how Christopher Grant Rumler, doing business as SEO Shift Log (“SEO Shift Log,” “we,” “us,” or “our”), collects, uses, stores, and shares information when you visit or use SEO Shift Log.

This policy applies to the website, authenticated application, Google Search Console connection, billing features, and shared reports operated under the SEO Shift Log name.

2. Information we collect

Account and workspace information

We collect the email address used to sign in, account and profile identifiers, optional display information, workspace name, workspace membership, roles, and related account timestamps.

Content you provide

We store information you enter into the service, including selected sites, page URLs, change dates and categories, change descriptions, hypotheses, report titles, introductions, closing notes, and sharing choices.

Google Search Console data

When you connect Google Search Console, we receive the properties available to your Google account, the properties you select, permission information, and read-only Search performance data. Imported data can include page URLs, dates, search type, clicks, impressions, click-through rate, and average position.

We also receive OAuth authorization information needed to maintain the connection, including granted scopes and a refresh credential. Refresh credentials are encrypted at rest and are not exposed through the user-facing application.

Billing information

Stripe processes payments and receives the billing and payment information you submit at checkout. SEO Shift Log stores limited billing records such as Stripe customer and subscription identifiers, plan, subscription status, billing-period dates, and cancellation state. We do not store complete payment-card numbers.

Technical and security information

We and our infrastructure providers may process IP address, browser or device information, request timestamps, authentication events, error information, synchronization status, request identifiers, and audit or security records needed to operate and protect the service.

3. How we use information

We use information to:

• authenticate users and maintain accounts and workspaces;
• connect selected Search Console properties and synchronize read-only performance data;
• record SEO changes and calculate equal before-and-after comparisons;
• create, publish, expire, and revoke reports;
• process subscriptions and enforce plan capacity;
• provide support and respond to privacy or legal requests;
• detect misuse, debug failures, secure the service, and maintain reliability;
• comply with law and enforce our Terms and Conditions; and
• understand and improve product operation without using Google user data for advertising.

4. Google user data

Google data is used to display stored performance history, calculate equal-period comparisons, and include user-selected evidence in reports. We do not sell Google user data, use it for advertising, or transfer it to data brokers. We share it only as needed to operate the features you request, with service providers acting for us, when you direct us to publish a report, or when legally required.

SEO Shift Log’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Google’s own handling of information is described in the Google Privacy Policy.

You can revoke the connection from your Google Account’s third-party connections. Revocation prevents future API access but does not automatically delete data already imported into SEO Shift Log. To request deletion of previously imported data, email privacy@seoshiftlog.com.

5. When information is shared

We may share information with:

• Workspace members. Authorized members can access workspace information according to their role.
• Supabase. Supabase provides account authentication, database, and related application infrastructure. See the Supabase Privacy Policy.
• Google. Google provides OAuth authorization and Search Console APIs. Requests to Google necessarily include information needed to authenticate and fulfill them.
• Stripe. Stripe processes checkout, subscriptions, payment methods, and the billing portal. See the Stripe Privacy Policy.
• Infrastructure and professional providers. Hosting, security, communications, support, or professional advisers may process information only as needed to provide their services or meet legal obligations.
• Authorities or affected parties. We may disclose information when reasonably necessary to comply with law, protect rights or safety, investigate misuse, or enforce agreements.
• A successor. Information may transfer as part of a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of the service, subject to applicable law.

We do not sell personal information or Google user data, and we do not share it for targeted advertising.

6. Published report links

A workspace member can publish a report containing a frozen snapshot of selected change records, notes, page URLs, and performance metrics. Anyone with the report link may be able to view and redistribute that information until the link expires or is revoked. Authentication credentials, workspace membership, and live Search Console access are not included in the public report.

Review a report carefully before publishing it. Contact the workspace that shared a report to request correction or removal, or email us if you cannot reach that workspace.

7. Cookies and similar storage

SEO Shift Log uses cookies and similar browser storage that are necessary for secure sign-in, session continuity, OAuth security, and application operation. We do not currently use advertising cookies or cross-site behavioral advertising trackers.

8. Retention and deletion

We retain account, workspace, imported metric, and user-provided content while the associated account or workspace remains active and as reasonably needed to provide the service. OAuth credentials are retained while a Google connection remains active. Billing, audit, security, backup, and transaction records may be retained longer where reasonably needed for fraud prevention, dispute resolution, accounting, security, or legal compliance.

You may request access, correction, export, disconnection, or deletion by emailing privacy@seoshiftlog.com. We may need to verify your identity and authority over the affected workspace. We will respond in accordance with applicable law and may retain limited information where legally permitted or required.

9. Security

We use safeguards intended to protect information, including encrypted network transport, encrypted Google refresh credentials, access controls, server-side secrets, and workspace-level database permissions. No internet service can guarantee absolute security. Please protect your email account and promptly report suspected unauthorized access.

10. International processing

SEO Shift Log and its service providers may process information in the United States and other countries. Those locations may have data-protection laws different from the laws where you live. Where required, we use appropriate measures for international transfers.

11. Children

SEO Shift Log is a business service and is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can investigate and delete it where appropriate.

12. Changes to this policy

We may update this Privacy Policy to reflect changes in the service, providers, or legal requirements. If a change materially affects how we use information, we will provide reasonable notice and request renewed consent where required before applying the new use. The effective date at the top identifies the current version.

13. Contact

Privacy questions and requests may be sent to privacy@seoshiftlog.com. SEO Shift Log is operated by Christopher Grant Rumler, doing business as SEO Shift Log, in Indiana, United States.