SEO Tools by David Breder

개인정보 보호 정책

Last updated: 2026-09-04

This Privacy Policy explains what data we collect through SEO Tools ("the Service"), operated by David Breder, why we collect it, and how we handle it. We designed the Service to collect the minimum data required to operate it.

1. What we collect

From all visitors: anonymous request logs (IP address, user agent, requested URL, timestamp) retained for a short period for abuse prevention and debugging.

When you sign in with Google: your email address, name, avatar URL, Google user ID (sub), preferred locale. We do not receive your Google password.

When you purchase a wallet top-up: a Stripe customer ID linked to your account, purchase amount and timestamp, purchase status. We never see or store your full card number, CVC, or bank details — Stripe handles that.

When you run an extraction: the input channel URLs, selected time range, cost, extraction status, and the resulting dataset (public YouTube data). We keep extractions so you can re-download them later.

2. Why we collect it

To operate the Service: authenticate you, credit/debit your wallet, process extractions, deliver results.
To prevent abuse: rate limiting, orphan-job cleanup, security investigations.
To communicate essential service messages (extraction results, payment receipts, policy changes).
To improve the Service using aggregated, non-identifiable metrics (feature usage counts, error rates).

3. What we do NOT do

We do not sell your data to third parties.
We do not use your data to train machine-learning models.
We do not send marketing emails without your explicit opt-in.
We do not run behavioral advertising, retargeting pixels, or track you across the web.

4. Third-party processors

We rely on the following processors to run the Service:

Google (OAuth, YouTube Data API) — authentication and access to public YouTube data. Their handling is governed by the Google Privacy Policy.
Stripe — payment processing. Their handling is governed by the Stripe Privacy Policy.
Hosting provider — server infrastructure. We use standard commercial hosting whose privacy policy is available on request.

5. Cookies and local storage

We use only strictly necessary cookies and browser storage: session cookies for authentication and short-term preferences (theme, language). We do not use analytics or advertising cookies.

6. Data retention

Account data: kept while your account exists. You can request deletion at any time.
Wallet ledger: kept for as long as legally required (typically 5 years in Brazil under fiscal law), even after account deletion, in anonymized form when possible.
Extraction datasets: kept indefinitely so you can re-download them. Deleted upon your request or when you delete your account.
Anonymous access logs: rotated after 30 days.

7. Your rights

Depending on your jurisdiction (LGPD in Brazil, GDPR in the EU, CCPA in California, etc.) you have rights to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion ("right to be forgotten"), subject to legal retention requirements.
Export your data in a portable format.
Withdraw consent for optional processing.

To exercise any of these rights, email [email protected]. We respond within 15 days.

8. International transfers

Your data may be processed in countries other than yours, since our infrastructure providers and payment processors may operate globally (e.g., Stripe processes payments in the United States). All processors we use commit to appropriate safeguards for cross-border transfers.

9. Security

We use industry-standard measures (encrypted transport via HTTPS, hashed session tokens, access controls, backups). No system is 100% secure; if you become aware of a vulnerability, please email [email protected] so we can address it responsibly.

10. Changes to this policy

We may update this Policy occasionally. Material changes will be announced via the Service or by email at least 15 days before they take effect.

11. Contact

For privacy questions or requests: [email protected]