Privacy Policy

Last Updated: December 21, 2025

Introduction

KeywordKick ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SEO analytics platform and services (the "Service").

Please read this Privacy Policy carefully. By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, do not use our Service.

1. Information We Collect

1.1 Information You Provide Directly

  • Account Information: Name, email address, password, company name, and profile information
  • Billing Information: Payment card details (processed securely by our payment processors), billing address, and transaction history
  • Organization Information: Organization name, member details, and team structure
  • Project Data: SEO project names, website URLs, domains, and project configurations
  • Communications: Messages, support requests, and feedback you send to us

1.2 Information We Collect Automatically

  • Usage Data: Pages visited, features used, time spent, click data, and interaction patterns
  • Device Information: IP address, browser type and version, device type, operating system, and unique device identifiers
  • Cookies and Tracking Technologies: See our Cookie Policy for detailed information
  • Log Data: Server logs, error reports, and diagnostic information

1.3 Information from Third-Party Services

  • Google Search Console Data: When you connect your Google Search Console account, we access and process:
    • Search analytics data (queries, URLs, impressions, clicks, CTR, positions)
    • Sitemap information
    • URL inspection results
    • Property and domain information
    • Mobile usability data
    • Rich results data
  • OAuth Information: Authentication tokens and permissions you grant through Google OAuth
  • Analytics Services: Data from analytics providers we use to improve our Service

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Service Delivery

  • Provide, operate, and maintain our SEO analytics platform
  • Process and analyze Google Search Console data to detect keyword cannibalization
  • Generate insights, recommendations, and reports
  • Manage sitemaps and perform URL inspections
  • Enable collaboration within organizations

2.2 AI-Powered Features

  • Use AI models (OpenAI GPT, Google Gemini) to:
    • Classify search query intent
    • Detect keyword cannibalization conflicts
    • Generate actionable recommendations
    • Analyze SEO performance patterns

2.3 Account and Billing Management

  • Create and manage your account
  • Process payments and subscriptions
  • Send transaction confirmations and invoices
  • Prevent fraud and unauthorized access

2.4 Communication

  • Send service updates, security alerts, and administrative messages
  • Respond to your inquiries and support requests
  • Send marketing communications (with your consent)
  • Notify you about new features and improvements

2.5 Service Improvement

  • Analyze usage patterns to improve functionality
  • Conduct research and development
  • Monitor and analyze trends and usage
  • Troubleshoot technical issues

2.6 Legal Compliance

  • Comply with legal obligations and regulations
  • Enforce our Terms of Service
  • Protect our rights, privacy, safety, and property
  • Resolve disputes and enforce agreements

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to provide our Service under our Terms of Service
  • Legitimate Interests: Improving our Service, fraud prevention, and security
  • Consent: Marketing communications, cookies, and optional features (you may withdraw consent at any time)
  • Legal Obligations: Compliance with applicable laws and regulations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share data with trusted third-party service providers who assist us in operating our Service:

  • Cloud Hosting: AWS, Vercel, or other infrastructure providers
  • Database Services: PostgreSQL hosting providers
  • Payment Processors: Stripe, Lemonsqueezy, Chargebee, or other payment providers
  • AI Services: OpenAI (GPT models), Google (Gemini models)
  • Analytics: Google Analytics, Vercel Analytics, or similar services
  • Email Services: Transactional and marketing email providers
  • Customer Support: Support ticket and helpdesk platforms

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.2 Google API Services

When you connect Google Search Console, we access your Google data through Google APIs in accordance with Google's API Services User Data Policy. We:

  • Only request the minimum necessary permissions
  • Use your Google data solely to provide SEO analytics features
  • Do not share your Google data with third parties (except as required to provide the Service)
  • Allow you to disconnect your Google account at any time

4.3 Organization Members

If you're part of an organization on our platform, organization administrators and members with appropriate permissions may access shared project data and analytics.

4.4 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or to:

  • Comply with legal processes
  • Enforce our Terms of Service
  • Protect our rights, property, or safety
  • Investigate fraud or security issues
  • Protect the rights and safety of others

4.5 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

5. Data Retention

We retain your information for as long as necessary to:

  • Provide the Service and maintain your account
  • Comply with legal obligations (e.g., tax and accounting requirements)
  • Resolve disputes and enforce agreements
  • Improve and develop our Service

Specific Retention Periods:

  • Account Data: Retained while your account is active and for up to 90 days after account deletion
  • SEO Project Data: Retained while the project exists and for up to 30 days after deletion
  • Google Search Console Data: Retained while your GSC connection is active and deleted within 30 days of disconnection
  • Billing Records: Retained for 7 years to comply with tax and accounting regulations
  • Usage Logs: Retained for up to 2 years for security and analytics purposes

You can request deletion of your data at any time by contacting us or deleting your account.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

  • Encryption: Data encrypted in transit (TLS/SSL) and at rest
  • Access Controls: Role-based access controls and authentication
  • Secure Storage: Data stored in secure, access-controlled facilities
  • Regular Audits: Security assessments and vulnerability testing
  • Employee Training: Security awareness and data protection training
  • Incident Response: Procedures to detect, respond to, and report security incidents

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights and Choices

7.1 Data Access and Portability

You can access, review, and export your data through your account settings or by contacting us.

7.2 Data Correction

You can update your account information and project data at any time through the platform.

7.3 Data Deletion

You can delete projects, disconnect Google Search Console, or delete your account entirely. Contact us if you need assistance.

7.4 Withdraw Consent

You can withdraw consent for marketing communications, cookies, or data processing at any time.

7.5 Object to Processing

You can object to certain data processing activities, particularly for direct marketing purposes.

7.6 Restrict Processing

You can request restriction of processing in certain circumstances.

7.7 Lodge a Complaint

If you're in the EEA, UK, or Switzerland, you have the right to lodge a complaint with your local data protection authority.

7.8 Google Search Console Disconnect

You can disconnect your Google Search Console integration at any time through your project settings. This will revoke our access to your Google data and delete your GSC data from our systems within 30 days.

To Exercise Your Rights: Email us at privacy@keywordkick.com or use the controls in your account settings.

8. International Data Transfers

Our Service is operated in the United States. If you're located outside the United States, your information may be transferred to, stored in, and processed in the United States and other countries.

For EEA, UK, and Swiss users, we ensure appropriate safeguards are in place for international data transfers through:

  • Standard Contractual Clauses approved by the European Commission
  • Data Processing Agreements with service providers
  • Adherence to applicable data protection frameworks

9. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

10. Third-Party Links and Services

Our Service may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on our website
  • Updating the "Last Updated" date
  • Sending you an email notification (for significant changes)

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

12. California Privacy Rights (CCPA)

If you're a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: Request details about the personal information we collect, use, and disclose
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at privacy@keywordkick.com.

13. Cookie Policy

We use cookies and similar tracking technologies. For detailed information, please see our Cookie Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@keywordkick.com Support: support@keywordkick.com Address: KeywordKick, [Your Business Address]

For GDPR-related inquiries, you may contact our Data Protection Officer at dpo@keywordkick.com.

Google API Services Disclosure

KeywordKick's use and transfer of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements.

We only use your Google Search Console data to:

  • Display your search analytics data
  • Detect keyword cannibalization
  • Manage sitemaps
  • Perform URL inspections
  • Generate SEO insights and recommendations

We do not use your Google data for advertising, tracking, or any purposes unrelated to the core SEO analytics functionality of KeywordKick.