Privacy Policy

ProgSEO (also referred to as PSEO, available at pseo.dev) (the "Service") is operated by Barmonteley INC, a company registered in the United States ("we", "us", "our"). We are the controller of the personal data described in this Privacy Policy.

Barmonteley INC
1521 Concord Pike, Ste 301 #279
Wilmington, DE 19803, United States
Phone: +1 (505) 581-6209
Email: [email protected]

This policy explains what personal data we collect when you visit our website or use the Service, why we collect it, who we share it with, and the choices and rights you have.

Please do not submit sensitive personal data (such as health, financial account, government ID or biometric data) or personal data of other people into the Service unless you have the right to do so.

We use personal data for the purposes below. If you are in the European Economic Area (EEA), the United Kingdom or Switzerland, we rely on the legal bases shown in brackets.

• To create and manage your account and provide the Service, including generating and publishing content (performance of a contract).
• To process payments, subscriptions and trials, and prevent trial abuse (performance of a contract; legitimate interests).
• To provide support and send service, security and billing messages (performance of a contract; legitimate interests).
• To analyze how the website is used and improve it (legitimate interests).
• To maintain security, prevent fraud and abuse, and enforce our Terms (legitimate interests).
• To comply with legal, tax and accounting obligations (legal obligation).
• To send marketing emails, where permitted, which you can unsubscribe from at any time (consent or legitimate interests).

We do not use personal data for automated decision-making that produces legal or similarly significant effects on you.

If you choose to connect Google Search Console, we request read-only access (webmasters.readonly) to your Search Console data. Through this access we receive the list of your Search Console properties and search performance data for them, such as queries, pages, clicks, impressions, click-through rate and average position. If you sign in with Google, we also receive your basic profile information (name, email address and profile picture).

How we use it. We use Search Console data only to show you your website's search performance inside the Service and to suggest and prioritize topics and keywords for your website. We may process it with our infrastructure and AI providers listed in Section 6 solely to provide those features to you.

How we store and share it. OAuth tokens and synced data are stored in our access-controlled database. We do not sell Google user data, do not use or transfer it for advertising, do not use it to determine creditworthiness, and do not use it to develop, improve or train generalized AI or machine learning models. We do not allow humans to read it unless you give us permission, it is necessary for security purposes or to comply with law, or it is aggregated and anonymized for internal operations.

Limited Use. ProgSEO's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting. You can disconnect Search Console in the Service at any time, which deletes the stored access credentials for that website. You can also revoke our access at myaccount.google.com/permissions. To have previously synced Search Console data deleted, contact us at [email protected].

The Service uses third-party AI models (currently Google Gemini through the paid Gemini API) to generate text, images and diagrams. The information you provide for generation, such as business details, keywords and source content, is sent to the AI provider to produce the output. Under the provider's terms for paid API services, this data is not used to train its models. We do not use your content to train AI models.

AI-generated content may be inaccurate. You are responsible for reviewing content before publishing it.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising.

We share personal data only with:

• Service providers who process data on our behalf under contract, listed below.
• Services you choose to connect, such as your WordPress site or webhook endpoint, to publish content where you direct.
• Authorities or other parties when required by law, or to protect our rights, users or the public.
• A successor entity in a merger, acquisition, financing or sale of assets, subject to this policy.
• Others with your consent.

We may update this list as our providers change.

We are based in the United States, and our providers may process data in the United States and other countries. Where we transfer personal data from the EEA, the UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or the recipient's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.

• Account, website and content data: while your account is active. After you delete your account or ask us to, we delete it within 30 days, except as described below.
• Backups: deleted data may remain in backups for up to 90 days before it is overwritten.
• Billing and transaction records: as long as required by tax and accounting laws (generally up to 7 years).
• Support conversations: up to 24 months after the last message.
• Analytics data: according to the retention settings of Google Analytics and Microsoft Clarity, no longer than 14 months.
• Data needed for legal claims or to prevent fraud and abuse: as long as necessary for that purpose.

We use reasonable technical and organizational measures to protect personal data, including encryption in transit (HTTPS), access controls and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal data, we will notify you and the relevant authorities where required by law.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy of it.
• Correct inaccurate personal data.
• Delete your personal data.
• Receive your data in a portable format.
• Object to or restrict certain processing, including processing based on legitimate interests.
• Withdraw consent at any time, without affecting processing done before withdrawal.
• Opt out of marketing emails using the unsubscribe link or by contacting us.

To exercise these rights, email [email protected] from the email address linked to your account. We will respond within 30 days (or within the period required by applicable law) and may need to verify your identity. We will not discriminate against you for exercising your rights.

If you are in the EEA, the UK or Switzerland, you also have the right to lodge a complaint with your local data protection authority. We would appreciate the chance to address your concern first.

Residents of California and other U.S. states with privacy laws have the rights to know, access, correct and delete their personal information, and to opt out of its sale, sharing for cross-context behavioral advertising, and use for targeted advertising or profiling. We do not sell or share personal information for those purposes, and we do not knowingly collect personal information of consumers under 16.

In the past 12 months we have collected the following categories of personal information:

• Identifiers (name, email address, IP address, account ID).
• Commercial information (subscription and payment history).
• Internet or network activity (usage and interaction data).
• Approximate geolocation derived from IP address.
• Inferences drawn from usage, used only to improve the Service.

We collect them from you, your devices and the services you connect, for the purposes in Section 3, and disclose them only to the categories of recipients in Section 6. We do not use or disclose sensitive personal information for purposes that would give you a right to limit it. You may use an authorized agent to submit a request on your behalf; we may ask the agent for proof of authorization. If we deny your request, you may appeal by replying to our response.

We honor the Global Privacy Control (GPC) signal: if your browser sends it, Google Analytics stores no cookies and Microsoft Clarity is not loaded. Because there is no common standard for Do Not Track signals, we do not respond to them separately.

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

If you upload or publish content containing personal data about other people, you are responsible for having a lawful basis to do so and for providing any required notices. For that content we process data on your instructions.

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the effective date above. If we make material changes, we will notify you by email or through the Service before they take effect.

Barmonteley INC
1521 Concord Pike, Ste 301 #279, Wilmington, DE 19803, United States
Phone: +1 (505) 581-6209
Email: [email protected]