Privacy Policy
& GDPR

1. Data controller

The controller for personal data collected in connection with the use of the site and the GoMySeo platform is:

• Identity: Hugo Souliard Lehuby — The Ovena
• SIRET: 989 737 614 00010
• Address: 3 Rue des Noyers, 14740 Saint-Manvieu-Norrey, France
• GDPR contact email: contact@gomyseo.com

For any question relating to the protection of your data, send your request by email to contact@gomyseo.com with the subject "GDPR Rights Request". A response will be provided within a maximum of 30 calendar days in accordance with article 12 of the GDPR.

2. Legal basis for processing

3. Data collected & purposes

• Email address — identification, login, transactional communications
• Password (bcrypt-hashed, never stored in plain text) — authentication
• First / last name (optional, if provided) — interface personalization
• Signup date and subscribed plan — subscription management

• Bank details are processed and stored exclusively by Stripe Inc. — GoMySeo has no direct access to them.
• GoMySeo retains only: the Stripe customer ID, the active plan, the renewal date, and invoice references.

• URLs analyzed, keywords entered, queries run, analysis results — necessary to provide the service
• Google Search Console connections (encrypted OAuth tokens) — providing the GSC feature
• Email addresses and business names entered for the GBP Heatmap

• IP address, browser type, connection date and time — security, fraud detection, debugging
• This data is stored in access logs kept for 12 months, then automatically deleted

• Email address + consent date/time + IP address — legal proof of consent (GDPR art. 7)
• Collected only with explicit consent via a separate, non-pre-checked checkbox

4. Retention periods

5. Subprocessors & transfers outside the EU

GoMySeo uses the following subprocessors, with appropriate contractual safeguards in place (Standard Contractual Clauses — SCC — for transfers outside the EU):

GoMySeo does not sell or rent any personal data to third parties. Data collected by audience measurement and advertising cookies is only shared with Google and Meta if you have consented to it via the cookie banner (see section 7).

6. Your GDPR rights

In accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act, you have the following rights:

You have the right to lodge a complaint with the CNIL (French data protection authority) if you believe the processing of your data infringes your rights:
Commission Nationale de l'Informatique et des Libertés — 3 Place de Fontenoy, 75007 Paris, France — cnil.fr/fr/plaintes

7. Cookie policy

A cookie is a small text file stored on your device when you visit a website. gomyseo.com uses two categories of cookies: cookies strictly necessary for the service to function, and optional cookies used for audience measurement (Google Analytics 4) and for advertising and social media (Google Ads, Meta Pixel). Optional cookies are never set before you have given your consent through the cookie banner displayed on your first visit.

7.1 Cookies used

7.2 Legal basis

Optional cookies (audience measurement, advertising and social media) are set on the basis of your consent (article 82 of the French Data Protection Act, "loi Informatique et Libertés", and article 6.1.a GDPR), in accordance with the CNIL guidelines and recommendation on cookies and other trackers. Strictly necessary cookies are exempt from consent because they are essential to provide the service you request (login, form security, secure payment, remembering your cookie choices).

7.3 Your choices

• Banner: on your first visit, a banner lets you accept all, reject all or customise your choices by purpose. Refusing is as easy as accepting, and no optional cookie is set until you have made a choice.
• Validity of your choice: your choice (acceptance or refusal) is kept for 6 months in the gms_cc cookie. After that period you will be asked again.
• Withdrawal: you can change or withdraw your consent at any time, as easily as you gave it, via the "Manage cookies" link at the bottom of every page. Withdrawing consent stops the trackers concerned and deletes the related cookies; it does not affect the lawfulness of processing carried out before withdrawal.
• Browser: you can also delete or block cookies in your browser settings. Blocking strictly necessary cookies will prevent you from logging in to your account.

8. Newsletter & communications

By subscribing to the GoMySeo newsletter, you agree to receive emails containing SEO and GEO tips, platform news, and information about new features.

• Frequency: up to 2 emails per week
• Consent: separate, non-pre-checked checkbox, recorded with a timestamp and IP (GDPR art. 7 legal proof)
• Unsubscribe: unsubscribe link present in every email, or by email to contact@gomyseo.com — effective immediately
• Data retained: email address + consent date/time + IP — only until unsubscribe
• Sharing: your email address is never sold, rented or shared with third parties for commercial purposes

Transactional emails (order confirmation, invoices, quota alerts) are sent regardless of newsletter consent, as they are necessary for contract performance.

9. Data security

The publisher implements the following technical and organizational measures to protect your data:

• Encrypted communications: HTTPS (TLS 1.2/1.3) across the entire site and platform
• Passwords: bcrypt hashing — never stored in plain text
• GSC OAuth tokens: stored encrypted in the database
• Access control: each user can only access their own data
• Access logging: logins and sensitive actions are logged to detect abnormal activity
• Backups: regular backups of data hosted at IONOS SE (EU)

In the event of a personal data breach likely to result in a high risk to your rights and freedoms, you will be notified as soon as possible, in accordance with article 34 of the GDPR.

10. Contact

Additional legal documents:

• Legal Notice
• Terms of Use
• Terms of Sale