Privacy Policy

This Privacy Policy explains how Design & Desktop, LLC (“we”, “us”, “our”), a Delaware limited liability company based in the United States, processes personal data when you use Fix SEO Today.

Fix SEO Today is a subsidiary brand of Design & Desktop, LLC and is operated as a SaaS SEO product at https://fixseotoday.com (and related app domains we operate). We are the data controller for personal data processed through the Service. Contact: hello@fixseotoday.com.

Privacy laws can differ by country. Where the GDPR / UK GDPR or similar laws apply to you (for example if you are in the EEA, UK, or Switzerland), the sections below describe those rights and our corresponding practices. Other customers receive the protections described in this Policy and any rights available under their local law (including applicable US state privacy laws).

This Policy applies to the Fix SEO Today website and app, related subdomains we operate, customer accounts (including Google Sign-In / Google OAuth), billing, support communications, cookies and similar technologies on our site, SEO scans and site maps you ask us to run, and optional integrations (for example Google Analytics 4 and Google Search Console). regardless of where you access the Service from.

It does not cover third-party websites or apps that we do not control, including sites you submit for crawling, or analytics / advertising platforms you connect under your own accounts. Those providers process data under their own policies.

Depending on how you use the Service, we may process:

• Account data . email address, name, password (hashed by our auth provider), and profile preferences. If you use Google Sign-In / Google OAuth, we receive basic profile identifiers (such as email, name, and a Google account subject identifier) from Google as allowed by your Google account settings and the scopes you approve. We use this only to create and authenticate your Fix SEO Today account.
• Project and crawl data . URLs and domains you submit, crawl/scan results, site maps, HTML/metadata snapshots needed for analysis, reports, keyword research outputs, competitor comparisons, speed checks, SEO improvement lists, and related analysis stored in your account.
• Integration credentials and metrics . OAuth tokens, API keys, or similar credentials you provide to connect third-party tools (including Google Analytics / GA4, Google Search Console, PostHog, and other providers in our integrations catalog), plus metrics and property lists we retrieve on your behalf to show dashboards. Credentials are stored encrypted where applicable and used only to provide the features you request. Connecting an integration is separate from signing in to Fix SEO Today.
• Payment data . payment is processed by Stripe. We do not store full card numbers on our servers. Stripe may process card details, billing name/address, email, and fraud-prevention signals under its own terms and privacy notice. We receive payment status, subscription identifiers, and limited billing metadata needed to unlock paid features.
• Usage and device data . IP address, approximate location derived from IP, browser/device type, pages viewed, referrer, and timestamps (including security and abuse-prevention logs).
• Support communications . messages you send via email or in-product support, and related metadata (timestamps, ticket status).
• Cookie / analytics data . Google Tag Manager (GTM) and Google Analytics (GA4) (and similar measurement tools we may enable) as described in section 8, including interaction events and cookie identifiers.
• AI / coaching inputs . prompts and context you send to the in-product AI coach, which may include project metadata you already stored with us, so we can generate guidance. Do not paste secrets or unrelated personal data into chat.

• Directly from you (account signup, Google Sign-In, project setup, billing, support, AI chat).
• Automatically from your device when you browse (necessary technical logs; marketing analytics via cookies/GTM/GA as configured on our site).
• From sites and URLs you ask us to crawl. publicly reachable HTML and related assets needed to run SEO/GEO analysis and site mapping.
• From payment and infrastructure providers (e.g. Stripe payment status, Supabase auth/database, hosting) as needed to run the Service.
• From third-party analytics or marketing APIs you connect (including Google Analytics and Google Search Console), when you authorize the integration via OAuth or API keys.

We process personal data for the purposes below. Where the GDPR applies, we rely on these lawful bases:

• Contract (Art. 6(1)(b)) . create/manage your account; authenticate you (including via Google OAuth); run crawls, maps, keyword research, and reports you request; power integrations you connect; process subscriptions via Stripe; provide customer support and AI coaching features.
• Legal obligation (Art. 6(1)(c)) . keep tax, accounting, and fraud-related records where required by law; respond to lawful requests from authorities.
• Legitimate interests (Art. 6(1)(f)) . secure the Service, prevent abuse and spam crawls, diagnose outages, improve product reliability and UX, and defend legal claims. We balance these interests against your rights.
• Consent (Art. 6(1)(a)) . where required for non-essential cookies and analytics, or for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Fix SEO Today offers optional Google Sign-In so you can create or access an account with your Google credentials. When you choose Google Sign-In, Google authenticates you and shares limited profile data with us under Google’s policies and the scopes shown on the consent screen (typically identity scopes such as email and profile).

Separately, you may connect Google Analytics or Google Search Console (and similar Google APIs) inside the product. Those connections use additional OAuth consent screens and tokens scoped to the integration. We use those tokens only to fetch the metrics and properties you ask to see. You can revoke access in your Google Account permissions and by disconnecting the integration in Fix SEO Today.

Google’s privacy notice: https://policies.google.com/privacy.

Payments are processed by Stripe, Inc. When you pay, you also interact with Stripe’s systems. See Stripe’s privacy notice: https://stripe.com/privacy.

We receive confirmation of payment status, limited billing metadata (such as customer and subscription IDs, plan, and payment outcome), and identifiers needed to match a payment to your account. Card data is handled by Stripe; we do not receive or store full PAN/CVC on our servers. Stripe may use fraud-prevention tooling as part of payment processing.

We use cookies and similar technologies that are necessary to run the Service (for example session and authentication cookies via our auth provider). Without these, you cannot stay signed in.

We also use Google Tag Manager and Google Analytics (GA4) to understand site usage, measure performance, and improve the product. These tools may set cookies or use similar identifiers and process IP address, device/browser data, and interaction events (page views, clicks, conversions).

Typical categories:

• Strictly necessary . auth/session, security, load balancing.
• Analytics / measurement . GTM/GA and similar, to understand how the marketing site and app are used.
• Preference . remembering dismissals such as our soft cookie notice.

Provider notices: Google Privacy Policy. You can control cookies through your browser settings and, where offered, through any consent banner we display. Our on-site cookie notice is informational and does not replace browser controls where consent is required by law.

Separately, when you connect Google Analytics, Google Search Console, PostHog, or other analytics tools inside Fix SEO Today, those connections are under your accounts with those providers. We process data from them only to show you metrics and features you request.

When you submit a URL or domain, our crawlers fetch publicly reachable pages and assets to map the site, detect technologies/trackers, extract SEO signals, and generate recommendations. You must only submit sites you are authorized to analyse.

Crawl output (including detected trackers such as GA/GTM/PostHog on your site, page titles, headings, and structural maps) is stored in your project for you. We do not sell crawled page content as a marketing list. Crawling is rate-limited and subject to our acceptable-use rules in the Terms.

We share personal data only with providers that help us operate the Service, under contracts (including data processing terms) where required. We do not sell your personal data.

• Stripe, Inc. payments and subscription billing.
• Supabase (Supabase, Inc.). authentication, database, and related backend hosting for account and project data.
• Hosting / infrastructure providers (including edge and cloud hosts) for the website and APIs.
• Google. Google Sign-In (when you choose it); GTM/GA on our site; and Google APIs (Analytics, Search Console, and related) for integrations you connect.
• AI model providers used to power coaching / analysis features, which may process prompts and necessary project context you submit.
• Other integration providers you choose to connect (e.g. PostHog).
• Professional advisers (legal, accounting) or authorities where required by law or to protect rights, safety, and integrity of the Service.

We and some providers are based in the United States or other countries outside the EEA/UK. Where we transfer personal data from the EEA/UK/Switzerland to a country without an adequacy decision, we use appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) (and UK equivalents where applicable), plus supplementary measures where needed.

You may request more information about transfer safeguards by contacting us at hello@fixseotoday.com.

We keep personal data only as long as needed for the purposes described in this Policy, unless a longer period is required or permitted by law:

• Account and project data (including crawl maps, reports, keywords, and integration metadata) . while your account is active; then deleted or anonymised within a reasonable period after closure (typically within 90 days) unless we must keep it longer for disputes, security, or legal compliance.
• OAuth / integration tokens . until you disconnect the integration, revoke access at the provider, or close your account; expired tokens may be removed sooner.
• Billing / invoices . typically kept for the period required by tax and commercial law (often several years).
• Support tickets . for as long as needed to resolve your request and for a limited follow-up period.
• Security logs . short retention for security and abuse prevention (typically up to 12 months unless an investigation requires longer).
• Analytics (GTM/GA) . according to the retention settings of Google Analytics / GTM and applicable consent rules.

Subject to applicable law, you may have the right to:

• Access your personal data and receive a copy.
• Rectify inaccurate or incomplete data.
• Erase data (“right to be forgotten”) in certain cases.
• Restrict or object to certain processing (including processing based on legitimate interests).
• Data portability for data you provided where processing is based on contract or consent and is automated.
• Withdraw consent at any time for consent-based processing (e.g. analytics cookies).
• Lodge a complaint with a supervisory authority. in particular in your EU/EEA Member State of residence, place of work, or place of the alleged infringement.

Depending on where you live (for example California, Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws), you may have rights to know/access, delete, correct, and opt out of certain data practices (such as “sale” or “sharing” for cross-context behavioural advertising, where those concepts apply).

Fix SEO Today does not sell personal data for money. We use analytics cookies as described above; if your state law treats certain analytics or advertising disclosures as a “sale” or “share,” you may exercise opt-out rights by contacting us and by using browser controls / Global Privacy Control signals where we can honour them.

Email hello@fixseotoday.com with the subject “Data rights request”. We may need to verify your identity. We respond within the time limits required by law (generally one month under the GDPR, extendable where permitted; similar statutory windows under applicable US state laws).

You can also delete many project records from within the product, and revoke Google OAuth access from your Google Account settings.

We implement appropriate technical and organisational measures (access controls, encryption in transit, least-privilege access, encrypted storage of integration secrets where applicable, and provider security reviews) to protect personal data stored in Supabase and related systems. No method of internet transmission or storage is completely secure. Please use a strong unique password and protect your Google account if you use Google Sign-In.

The Service is intended for users aged 18+. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will delete it.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects about you within the meaning of GDPR Art. 22. Payment fraud checks may be performed by Stripe as part of payment processing. SEO scoring, site maps, keyword suggestions, and AI coaching are product features, not decisions with legal effects about you as an individual.

We may update this Policy from time to time. We will post the new version on this page and update the “Last updated” date. For material changes, we may also notify you by email or a prominent site notice where required.

Data controller / operator: Design & Desktop, LLC (Delaware limited liability company). Fix SEO Today is a subsidiary brand of Design & Desktop, LLC.

Privacy contact: hello@fixseotoday.com.

Website: https://fixseotoday.com. Related: Terms and Conditions.