Privacy policy

1. Who operates AccurateSEO

AccurateSEO is operated by Ad Accurate Digital Service. This policy explains our handling of account, business and connected Google data. Contact seo@adaccurate.in with privacy questions.

2. Information we collect and why

We store registration details, hashed passwords, agency membership, customer-entered business records, keywords, descriptions, citation records, approval decisions and operational audit records. We use these to provide account access, local SEO workflows, support and security. When a business sends a review request, the customer’s name and phone number or email are stored encrypted and deleted after 90 days; reviews from other sites (such as Tripadvisor or Trustpilot) that a business imports or monitors are stored to help it reply. Read-only API tokens are stored hashed. Session cookies keep you signed in and protect forms against unauthorized requests.

3. Google account access

Connecting Google is optional. With your authorization we obtain access and refresh tokens, discover accounts and locations you can manage, display reviews, publish an exact reply only after approval and an explicit publish action, read the profile’s business details to compare them with your approved details, and update those details only when a permitted user clicks Push. The business.manage scope is used for these functions. We do not request Gmail, Drive or contacts access. Connecting does not grant AccurateSEO ownership of your business. Signing in with Google is also optional and separate: we receive your Google account identifier and email address, use them only to match and sign in to your existing account, and keep the identifier so we recognise you next time. Sign-in does not give us access to your Business Profile, Gmail, Drive or contacts.

4. Storage and retention

Google tokens are encrypted at rest. Cached reviews are access-limited to the configured retention period, capped at 30 days. Expired reviews are hidden immediately and removed by scheduled cleanup together with associated reply text and decision comments. Disconnect disables local access immediately and removes cached review content. Failed token revocations are retried while encrypted credentials remain inaccessible for normal use. Short-lived account and location selection data expires after 10 minutes. Minimal content-free audit references may remain for security.

5. Other account records and deletion

Customer-entered records remain while needed to provide your workspace. To request account deletion or access to your information, email seo@adaccurate.in from your registered address and identify the workspace. We verify authority before deleting shared agency data and will explain any legally required retention. Never email passwords or access tokens. Backup handling and any applicable legal retention are reviewed as part of the request.

6. Linked Google login accounts

If you link Google accounts for login, we store each account's Google identifier and email address so it can log you in. You can remove them at any time on your Account page.

7. Lead forms

If an agency adds our lead form to its website, the agency is responsible for the contact details and website address submitted there. We store them for that agency, and it can delete them. The website address is fetched once to produce the check.

8. Payments, invoices and messaging

Razorpay processes live payments, and we never receive your full card or UPI details. We keep billing details and invoices as tax law requires. If WhatsApp sending is switched on, the customer's mobile number, name, business name and review link are sent to Meta to deliver that message.

9. Google Analytics and Search Console

Connecting these is optional. With your authorization we read traffic totals for the Analytics property you choose, and clicks, impressions and top search queries for the Search Console site you choose. We keep the latest figures, refresh them at most every 6 hours, and encrypt the access token. We do not send this data to AI providers, and you can disconnect at any time, which deletes the saved figures.

10. Cookies and website analytics

Session cookies keep you signed in. A referral cookie, kept for 30 days, records which referral link you opened. Our public website uses Google Analytics only if you choose Allow, and that choice is saved in your browser.

11. Finding clients

When an agency searches for local businesses to contact, the business type and city are sent to DataForSEO. Publicly listed business details that the agency chooses to save are stored for that agency, which can remove them at any time, and is responsible for how it contacts those businesses.

12. Webhooks

If you add a webhook, new leads and reviews from sites other than Google are sent to the address you choose, and that service's own terms apply. Google review data is not sent. You can remove a webhook at any time.

13. Google Sheets export

If you export leads, rankings or reviews to Google Sheets, you sign in with Google and allow the drive.file permission. It only lets AccurateSEO create spreadsheets in your Google Drive and open the ones it created; it cannot see your other files. We store the sign-in, encrypted, until you disconnect it or delete your account, and the spreadsheets stay in your Drive under your control.

14. Bot protection

Our free tools and lead forms use Google reCAPTCHA v3 to tell people from automated bots, so nobody can misuse them. When you use one of these forms, Google receives information such as your IP address and how you use the page, under Google’s Privacy Policy (policies.google.com/privacy) and Terms of Service (policies.google.com/terms). We only receive a score, and we do not use it for anything else.

15. Chrome extension

The AccurateSEO Chrome extension runs only on Google Maps pages (google.com/maps and google.co.in/maps). It reads the business details Google Maps already shows on your screen, such as name, category, rating, review count, address, phone, website and opening hours, to show a profile score and map rank numbers. This happens only in your browser: the extension has no account, sends nothing to us in the background, and stores one setting on your device (whether you minimised its panel). When you click its "Get review link" or "Full audit" button, it opens accurateseo.in in a new tab with that business’s public name, area or Google Place ID in the link, which our website then uses like any other visit. It does not read other websites, your browsing history, personal messages, passwords or payment details.

16. WordPress plugin

The AccurateSEO Local WordPress plugin stores the business details you enter in your own WordPress site and sends nothing to us. A map shortcode loads a map from Google, and the review and WhatsApp buttons open Google or WhatsApp only when a visitor clicks them. The lead form shortcode, used by AccurateSEO customers, loads your form from app.accurateseo.in, and what visitors submit goes to your AccurateSEO account under this policy.

17. AI assistant connector

If you connect an AI assistant such as Claude or ChatGPT, you sign in to AccurateSEO and choose one workspace. We register the app, then issue it a read-only token for that workspace that lasts one hour and renews for up to 30 days; we store only a scrambled (hashed) copy of the renewal code. The app can read your locations, rankings, AI visibility, reviews and citations to answer your questions; what it does with those answers is covered by that app’s own privacy policy. You can disconnect it any time from Settings, API and AI assistants, which ends its access straight away.

18. Referral program

If you join the referral program, we store your referral code and encrypted UPI ID, and the people you referred, so that we can calculate and pay commission. We show you totals and do not show you who they are.

19. Sharing and AI

Google receives authorized API requests and approved replies. If an operator enables an AI provider (Anthropic or OpenAI), business description analysis that you explicitly request after the on-screen disclosure is sent to that provider, including saved business details, description, keywords, audience and writing settings. If an operator enables live rank tracking or AI visibility tracking, the keywords and questions you track, together with the business name, city and map coordinates, are sent to DataForSEO (search results) and OpenAI (ChatGPT answers) to retrieve results; customer, contact and Google review data are not included. Live Google review text is not sent to external AI. When a user asks for an AI draft, reviews from sites other than Google and post briefs are also sent to that provider. When a user asks for listing suggestions, the location's approved details, keywords, services, service areas, target audience and any extra guidance are sent to that provider, and the suggested keywords are sent to DataForSEO to look up search volumes. When a user asks for AI insights or asks a question, the question, the location's name, category and city, scorecard results and live rankings are sent to that provider. AI output may be inaccurate and requires human review. Service infrastructure providers may process data to operate hosting and communications. We do not sell Google user data, use it for advertising, or use it to train general-purpose AI models.

20. Google Limited Use

AccurateSEO’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Authorized staff access is limited to support, security, legal obligations and operation of the requested service.

21. Security and changes

We use tenant access controls, encrypted Google credentials, password hashing and approval checks. No system can promise absolute security. Production access requires HTTPS and properly secured hosting. Material changes will be reflected on this page with an updated date.

Google API Services User Data Policy · Manage Google account connections