Privacy Policy

Your privacy matters to us. This Privacy Policy explains how OffPageSEOHub ("we", "us", "our") collects, uses, stores, and shares your personal information when you use our website and services.

1. Who We Are

OffPageSEOHub is a live SEO and backlink intelligence SaaS platform. For any privacy-related inquiries, contact us at contact@offpageseohub.com.

2. Information We Collect

a) Account Information

• Name and email address (from registration or Google Sign-In)
• Password (stored as a one-way bcrypt hash, never in plain text)
• Google Account ID (only if you sign in with Google)
• Profile picture (optional, only from Google)

b) SEO Audits, Tracked Projects & Queries

• Domain names, URLs, and keywords you submit for analysis across our 24+ SEO tools
• Tracked websites saved in your Project Hub (up to 10 projects per account)
• Cached audit metrics (Domain Authority, backlinks, organic search traffic, and keyword rankings)
• Article submissions, titles, descriptions, and category selections in our public link directory

c) Payment & Credit Ledger Information

• Transaction ID, credit pack purchased, payment gateway order ID, amount, and date
• Credit transaction ledger (credit grants, tool deductions, zero-result refunds, balance history)
• We do NOT store your credit card, debit card, UPI PIN, or bank passwords. All payments are processed directly by authorized payment gateways (Razorpay and PayPal) over secure TLS encrypted connections.

d) Usage & Technical Data

• IP address (for security, rate-limiting, and fraud prevention)
• Browser type, device information, and operating system
• Pages visited, timestamps, and tool interaction metrics
• Session cookies (to keep you securely authenticated)

e) Communications

• Contact form messages (name, email, subject, message text)
• Customer support correspondence

3. How We Use Your Information

We use your data to:

• Create, authenticate, and maintain your user account
• Deliver live SEO audits, backlink reports, and Google keyword rank data
• Manage your Universal SEO Credits ledger and process pack top-ups
• Send essential transactional emails (welcome notifications, password resets, payment receipts)
• Provide dedicated customer support and respond to inquiries
• Detect and prevent automated bot abuse, rate-limit violations, and malicious exploits
• Comply with applicable legal, accounting, and tax obligations

We do not sell your data to third parties, advertising networks, or data brokers.

4. Legal Basis for Processing

We process your personal data based on:

• Contractual Necessity — to provide the SEO tools, credits, and services you request
• Explicit Consent — when you opt into Google SSO or submit contact requests
• Legitimate Interests — to maintain platform security, prevent abuse, and optimize tool performance
• Legal Compliance — to maintain mandatory financial and tax transaction records under Indian law

5. Third-Party Services & Data Processors

We work with trusted third-party providers to deliver our platform. Each provider operates under strict privacy and security standards:

6. Cookies

We use only essential cookies necessary for the Service to function:

• Session cookies — to keep you logged in
• CSRF tokens — to prevent security attacks

We do not use tracking cookies, third-party analytics cookies, or advertising cookies. You can disable cookies in your browser settings, but the Service may not function correctly without them.

7. Data Retention

• Account data — kept while your account is active
• Submissions — kept indefinitely as they form part of our public directory (unless you request removal)
• Payment records — kept for 7 years (Indian tax law requirement)
• Contact form messages — kept for 2 years
• Server logs — kept for 90 days

8. Your Rights

You have the right to:

• Access — request a copy of the data we hold about you
• Correction — update inaccurate data (via your profile page)
• Deletion — request deletion of your account and personal data
• Portability — request your data in a machine-readable format
• Withdraw consent — where processing is based on consent
• Object — to certain types of processing
• Complain — to a data protection authority

To exercise any of these rights, email contact@offpageseohub.com. We'll respond within 30 days.

9. Data Security

We take security seriously and use industry-standard practices:

• HTTPS/TLS encryption for all data in transit
• Password hashing using bcrypt (passwords never stored in plain text)
• Prepared SQL statements to prevent injection attacks
• CSRF tokens on all forms
• ModSecurity WAF at the server level
• Regular backups and monitoring

Despite these measures, no method of transmission over the internet is 100% secure. In the unlikely event of a data breach, we will notify affected users within 72 hours.

10. Children's Privacy

Our Service is not directed to children under 18. We do not knowingly collect data from anyone under 18. If you believe a child has provided us data, please contact us and we'll delete it.

11. International Data Transfers

Our servers are located in India. If you access the Service from outside India, your data will be transferred to and processed in India, which may have different privacy laws than your country. By using the Service, you consent to this transfer.

12. Compliance with Indian Law

We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 along with rules made thereunder, as applicable to us as an Indian data fiduciary.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on our website. The "Last updated" date at the top will always reflect the latest revision.

14. Contact Us

For privacy-related questions, requests, or concerns: