Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data under Article 4(7) GDPR is the operator of SEOBOOSTER, reachable at seobooster@3-tech.eu.

2. Personal Data We Collect

• Account data: email address, name (optional), authentication identifiers.
• Billing data: subscription status, plan, payment provider identifiers (processed by Stripe/PayPal — we never store card numbers).
• Site data you provide: URLs, niche, connected properties, generated articles and backlinks.
• Usage data: pageviews, device type, approximate country (aggregated, no cross-site tracking).
• Support data: the content of contact-form messages you send us.

3. Legal Bases for Processing (Art. 6 GDPR)

• Contract (Art. 6(1)(b)): to provide the Service you subscribe to.
• Legal obligation (Art. 6(1)(c)): tax, accounting, and record-keeping duties.
• Legitimate interest (Art. 6(1)(f)): security, fraud prevention, product improvement — balanced against your rights.
• Consent (Art. 6(1)(a)): where required, e.g. non-essential cookies or marketing emails.

4. Your Rights Under the GDPR

As an EU/EEA data subject you have the right to:

• Access your personal data (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure — the "right to be forgotten" (Art. 17)
• Restriction of processing (Art. 18)
• Data portability in a machine-readable format (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time, without affecting prior lawful processing (Art. 7(3))
• Lodge a complaint with your local supervisory authority (Art. 77) — a list is available at edpb.europa.eu

To exercise any right, contact seobooster@3-tech.eu. We respond within one month (Art. 12(3)).

5. Data Retention

Account and site data are retained for the duration of your subscription plus 30 days after cancellation, then deleted or anonymised. Invoices are kept for 7 years to comply with EU tax law. Support messages are kept up to 24 months. Suppressed-email records are retained to honour opt-outs.

6. International Transfers

Some processors (e.g. Google, Stripe) may transfer data outside the EU/EEA. Such transfers are protected by the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where applicable, the EU-US Data Privacy Framework.

7. Sub-Processors

We rely on the following categories of processors, each bound by a Data Processing Agreement under Art. 28 GDPR:

• Cloud hosting and database (Lovable Cloud / Supabase)
• Payment processing (Stripe, PayPal)
• Email delivery (own domain via Lovable Emails infrastructure)
• Authentication (Supabase Auth, Google Sign-In)
• Analytics (privacy-friendly, aggregated pageview counters)

8. Cookies & Similar Technologies

We use strictly necessary cookies for authentication and session security (no consent required under Art. 5(3) ePrivacy Directive). We do not use advertising or cross-site tracking cookies.

9. Security Measures (Art. 32 GDPR)

We apply appropriate technical and organisational safeguards: encryption in transit (TLS 1.2+) and at rest, Row-Level Security on all user tables, principle of least privilege for staff access, and regular security scans.

10. Data Breach Notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours (Art. 33) and, where required, inform affected users without undue delay (Art. 34).

11. Children

The Service is not directed to children under 16. We do not knowingly collect their data. Parents or guardians may contact us for removal.

12. Automated Decision-Making

We do not carry out solely-automated decisions producing legal effects on you (Art. 22 GDPR). AI content suggestions are advisory and reviewed by you before publication.

13. Changes to this Policy

Material updates will be posted here with a new "Last updated" date and, where required, notified by email.

14. Contact

For any privacy question or to exercise your rights, use our contact page or email seobooster@3-tech.eu.