Privacy Policy
This policy explains how SEO-OS ("we", "us"), a tool operated by Lumaney, handles information. SEO-OS is an internal SEO research tool used for websites that Lumaney owns or manages.
Who is responsible
The data controller is Lumaney, operated by Sérgio Taborda Duarte, Portugal. Contact: contact@lumaney.com.
Information we process
Google account and Google Ads data
When the operator connects a Google account, SEO-OS requests access to the Google Ads API
(scope https://www.googleapis.com/auth/adwords). With this access SEO-OS retrieves:
- keyword ideas for seed keywords or website URLs;
- historical keyword metrics, such as average monthly searches, competition and bid ranges, for a chosen location and language;
- the identifier of the Google Ads account used to make these requests.
SEO-OS stores the OAuth tokens needed to make these requests. It does not read or change campaigns, ads, budgets, billing information or other account content.
Website data
SEO-OS reads publicly available pages of the websites being analysed (for example page titles, headings and text) to understand their topics and existing content.
Project data
Settings entered by the operator, such as target domain, market, location, language and approved topics, together with the reports SEO-OS generates.
This website
The public pages on lumaney.com do not use cookies, analytics or tracking. Our hosting provider keeps standard server logs (such as IP address and request time) for security and operation, for a limited period.
How we use information
Information is used only to provide SEO-OS's features: keyword research, clustering, opportunity scoring, page recommendations and reports for the websites being analysed. We do not sell information, use it for advertising, or use it to build profiles of individuals.
Google API Services User Data Policy
SEO-OS's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data received from Google APIs is not transferred to third parties except as necessary to provide SEO-OS's features, to comply with law, or as part of a merger or acquisition with the user's notice. Keyword data may be processed by an AI service solely to group and interpret keywords for the operator; it is not used to train general-purpose AI models.
Sharing and processors
We share information only with service providers that help us run SEO-OS, under appropriate agreements:
- Hetzner Online GmbH (Germany) — server hosting in the European Union;
- Google — the Google Ads API, as the source of keyword data;
- an AI model provider, when used, for interpreting and grouping keywords.
Retention and deletion
Project data and keyword reports are kept while the related project is active and deleted when the project is removed. OAuth tokens are deleted when the Google account is disconnected. You can revoke SEO-OS's access at any time from your Google Account permissions page.
Security
Data is stored on servers in the European Union, accessed over encrypted connections (HTTPS and SSH), and credentials are kept outside source code and restricted to the operator.
Your rights
Under the GDPR you may request access to, correction of, or deletion of personal data we hold about you, object to or restrict its processing, and request a copy of it. Contact us at contact@lumaney.com. You may also complain to the Portuguese data protection authority (CNPD).
Changes
We may update this policy as SEO-OS develops. The "Last updated" date above shows the latest version.