Privacy Policy
Last updated: March 17, 2026
1. Introduction
SEO Layers ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome extension and associated web services.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, and profile picture when you sign in with Google, email/password, or create a guest account.
- Payment Information: Billing details processed via Razorpay (we do not store card numbers directly).
- Activation Keys: Keys you redeem are linked to your account.
- Page Notes: Notes and annotations you create within the extension are stored locally on your device.
- Support Communications: Any messages you send to our support team.
2.2 Information Collected Automatically
- SEO Audit Data: When you analyze a webpage, the extension processes page content (meta tags, headings, links, images, scripts) locally in your browser. Audit results are stored in your browser's local IndexedDB.
- Usage Statistics: Aggregate counts of audits performed and issues found (stored locally).
- Browser Extension Permissions Data: We access the active tab's content for analysis purposes only.
- Device Information: A unique user ID for subscription management and device slot tracking.
2.3 Google API Data
If you authorize Google Search Console access, we request webmasters.readonly scope to fetch your search performance data. This data is processed in real-time and is not stored on our servers.
3. Chrome Extension Permissions
Our extension requests the following permissions and uses them as described:
| Permission | Purpose |
|---|---|
| activeTab | Access the current tab's content for SEO analysis when you activate the extension. |
| tabs | Read tab URLs to display them in the extension UI and open checkout pages. |
| scripting | Inject content scripts to extract SEO data from webpages. |
| storage | Save your settings, preferences, subscription status, and cached data locally. |
| unlimitedStorage | Store audit history and page notes in local IndexedDB without size limits. |
| identity | Authenticate with Google for sign-in and optional Search Console access. |
| cookies | Analyze third-party cookies on audited pages for privacy/compliance reporting. |
| webNavigation | Detect page navigation events to trigger automatic re-analysis. |
| contextMenus | Add right-click menu options for quick SEO actions. |
| sidePanel | Display the extension in Chrome's side panel for persistent access. |
| downloads | Enable PDF report downloads and image metadata exports. |
| alarms | Schedule periodic subscription status checks. |
| Optional Host Permission (<all_urls>) | Requested only when you enable advanced features like deep 3rd-party cookie audits. Not required for basic SEO analysis. |
4. How We Use Your Information
- Provide and improve the SEO analysis service
- Authenticate your identity and manage your subscription
- Process payments and manage activation keys
- Track device slots for key sharing
- Send transactional emails (e.g., payment receipts)
- Detect and prevent fraud or abuse
- Comply with legal obligations
5. Data Storage and Security
5.1 Where Data is Stored
- Locally (your browser): Audit results, page notes, settings, cached subscription status — stored in Chrome's local storage and IndexedDB.
- Cloud (Firebase/Firestore): Account profile, subscription plan, activation keys, referral data, and transaction history.
- Payment Processor (Razorpay): Payment card details are handled entirely by Razorpay and never touch our servers.
5.2 Security Measures
We use Firebase Authentication with encrypted ID tokens, HTTPS for all API communications, HMAC-based integrity verification for subscription data, and server-side token validation for all protected API endpoints.
6. Data Sharing
We do not sell your personal data. We share data only with:
- Google Firebase: Authentication and database services.
- Razorpay: Payment processing for subscriptions.
- Google AI (Gemini): Pro AI insights feature — only the extracted SEO data of the page you're analyzing is sent (no personal information).
- Law Enforcement: When required by law or to protect our legal rights.
7. Data Retention
- Local data (audits, notes): Retained until you clear your browser data or uninstall the extension.
- Account data: Retained as long as your account is active. Deleted upon account deletion request.
- Transaction history: Retained for 7 years for legal/tax compliance.
- Server logs: Retained for 30 days for debugging purposes.
8. Your Rights
You have the right to:
- Access your personal data stored in our systems
- Correct inaccurate personal information
- Delete your account and associated data
- Export your data in a portable format
- Withdraw consent for data processing at any time
- Object to processing of your data
To exercise these rights, contact us at [email protected].
9. Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us for immediate removal.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.
11. Contact Us
For privacy-related questions or data requests, contact us at: [email protected]