How AmySEO handles your data

AmySEO is a technical SEO consulting practice operated by Amy Branstetter. This policy explains what information AmySEO collects through amyseo.com and the client workspace at amyseo.com/portal, and how that information is used.

When you become a client, AmySEO collects:

• Contact and account details - name, company, email address, and a securely hashed password.
• Kickoff questionnaire responses - business details, website URL, and goals you provide.
• Files and data you upload for an audit (e.g. Screaming Frog crawl exports, Search Console exports).
• Payment information - processed directly by Stripe. AmySEO never receives or stores full card numbers.
• Messages sent through the client workspace.

With your explicit permission (granting access to your Google Search Console and/or Google Analytics properties), AmySEO's Reporting dashboard displays your own site's data back to you: search queries, impressions, clicks, rankings, and site traffic/engagement metrics. This data is fetched live from Google's APIs each time the dashboard is viewed or refreshed, and a snapshot is cached temporarily to keep the dashboard responsive.

Separately, Amy's own Google Calendar is connected to check availability and create events when a Strategy Session is booked.

This data is used solely to provide and improve the reporting and scheduling features described above. It is never sold, never shared with third parties, and never used for advertising or to train AI/ML models.

AmySEO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Client and account data is stored in a Postgres database and file uploads in Cloudflare R2 storage, both accessed only over encrypted connections. Access tokens used to connect to Google APIs are encrypted at rest. Access to this data is limited to Amy and to the systems required to operate the service (see "Third-party services" below).

AmySEO relies on a small number of service providers, each only for what's necessary to run the practice:

• Google APIs - Search Console, Analytics, and Calendar, as described above.
• Stripe - payment processing.
• Cloudflare - website hosting, file storage, and security.
• Brevo - transactional email (e.g. account notifications).

Client account and audit data is retained for as long as the account is active, so past audits and reports remain available to you. If you'd like your data deleted or your Google account access revoked, contact Amy and it will be handled promptly.

You can revoke AmySEO's access to your Google account at any time from your Google Account permissions page. Doing so will stop the Reporting dashboard from being able to pull your Search Console or Analytics data until access is granted again.

If this policy changes in a meaningful way, the "last updated" date above will be revised and, for active clients, noted in the workspace.

Questions about this policy or your data? Reach out through the contact page.