Security and compliance are part of how SEOverts is built. Here's what that means for you and your customers.
OAuth credentials for Google, Meta, and TikTok integrations are encrypted at rest (AES-256-GCM) and deleted the moment you disconnect. Google API data is used only to provide user-facing features, per the Google API Services User Data Policy Limited Use requirements.
A two-scope role model (organization + website) gates every action server-side. Nobody can grant access they do not already hold, and revocation takes effect immediately.
Data is scoped per organization and per website at the database layer, with row-level security as defense in depth, not the only check.
Budget recommendations are advisory. Nothing is applied to an ad account without your explicit approval, and never past the hard monthly cap you set per website. The cap is enforced in code.
Export or delete your personal data yourself at any time. Policy changes are versioned, and acceptance is recorded as immutable, audited evidence.
A Data Processing Agreement for your organization, a published sub-processor list, documented retention, and lawful-basis tracking for every personal-data field.
The vendors that help us run the service. This list is also referenced by our DPA.
| Sub-processor | Purpose | Region |
|---|---|---|
| Supabase | Database, auth, realtime & storage | United States |
| Cloudflare | Hosting, CDN, R2 storage & bot protection | Global |
| Stripe | Subscription billing & tax | US / EU |
| Resend | Email delivery: transactional notices and product announcements | US / EU |
| Upstash | Queues & rate-limiting (Redis) | United States |
| Sentry | Error monitoring | US / EU |
| DataForSEO | SEO data provider: SERP, keyword & backlink data | United States |
| Google APIs | Search Console, GA4, Business Profile, PageSpeed & Google Ads (user-connected) | Global |
| Meta APIs | Meta Ads data (user-connected) | Global |
| TikTok APIs | TikTok Ads data (user-connected) | Global |
| Plausible | Cookieless, aggregate analytics | European Union |
See our Data Processing Agreement, Privacy Policy, and Cookie Policy for full detail.
Get notified when early access opens and see how SEOverts keeps your websites, team, and data protected.