Sign up $1 free

Privacy Policy

Effective Date: September 23, 2026
Last Updated: September 23, 2026

SEOPacket Tool Powered by Soft Learn Hub (softlearnhub.com)

1. Introduction

This Privacy Policy explains how Soft Learn Hub (“we,” “us,” “our,” “Company”) collects, uses, discloses, and safeguards information when you use SEOPacket Tool (the “Service,” “Platform,” or “SEOPacket”), a Software-as-a-Service (SaaS) product for search engine optimization analysis, keyword research, site auditing, and related digital marketing functions.

By creating an account, accessing, or using SEOPacket, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the Service.

This Privacy Policy applies to all users of SEOPacket, whether you’re using the app directly or through the MCP/API integration with your own generated API key.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: Display name (optional), email address, password — stored as a salted PBKDF2-SHA256 hash; we never store or can see your plaintext password.
  • Wallet Top-Ups: SEOPacket has no subscription plans. You prepay into an account wallet (minimum $10 per top-up) via Lemon Squeezy, our payment processor and merchant of record. Lemon Squeezy handles your card details directly — we never see or store your full card number, only the top-up amount and a transaction reference.
  • Support Communications: Information submitted via support tickets, chat, email, or feedback forms.
  • Website/Domain Data: URLs, domains, or projects you submit to SEOPacket for analysis, tracking, or auditing.
  • Keywords and Campaign Data: Keyword lists, target markets, competitor URLs, and other SEO campaign inputs you enter.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, click patterns, session duration, referring/exit pages, timestamps.
  • Device and Log Data: IP address, browser type and version, operating system, device identifiers, ISP, time zone settings, error logs.
  • Cookies and Tracking Technologies: Session cookies, persistent cookies, local storage, pixel tags, and similar technologies for authentication, preferences, analytics, and (where applicable) advertising. See Section 9 (Cookies).

2.3 Information from Third Parties

  • Search Engine and SEO Data Providers: Rank tracking, backlink, keyword-volume, and SERP data retrieved from DataForSEO’s APIs in connection with the domains/keywords you submit.
  • AI Search Visibility: When you run an AI/GEO visibility check, the prompt and target domain are sent to Perplexity AI’s Agent API, which returns whether and how your site appears in its AI-generated answers.
  • Sign-In Providers: If you sign in with Google or GitHub, we receive your name, email address, and a unique account identifier from that provider — no other data from your Google or GitHub account is accessed as part of sign-in.
  • Google Search Console: If you choose to connect a property, we receive and store a read-only access token to fetch performance data (clicks, impressions, queries, pages) for that property on your behalf. See Section 5 for how this Google user data is specifically handled.
  • Payment Processor: Confirmation of payment status and a transaction identifier from Lemon Squeezy for each wallet top-up.

2.4 Data on Domains You Do Not Own

If you submit a domain or URL you do not own (e.g., a competitor’s site) for analysis, SEOPacket only processes publicly available SEO metadata (rankings, backlinks, on-page structure) and does not access non-public systems.

3. How We Use Your Information

We use collected information to:

  • Provide, operate, and maintain the SEOPacket Service;
  • Create and manage your account and authenticate access;
  • Process wallet top-up payments and show you your own usage/spend;
  • Generate SEO reports, audits, rank-tracking data, and analytics dashboards;
  • Personalize your experience and remember preferences;
  • Communicate with you regarding updates, security alerts, billing notices, and support;
  • Send marketing communications where you have opted in (with an opt-out available at any time);
  • Monitor, analyze, and improve Service performance, features, and reliability;
  • Detect, investigate, and prevent fraud, abuse, and security incidents;
  • Comply with legal obligations and enforce our Terms and Conditions.

We do not sell your personal information to third parties for their own marketing purposes.

4. Legal Basis for Processing (GDPR / UK GDPR)

Where applicable (e.g., for users in the European Economic Area or United Kingdom), we process personal data under the following legal bases:

  • Contractual necessity — to deliver the Service you signed up for;
  • Legitimate interests — to improve, secure, and market the Service;
  • Consent — for optional cookies, marketing emails, and specific integrations (including connecting Google Search Console);
  • Legal obligation — for tax, accounting, and regulatory compliance.

5. Google API Services User Data Policy Disclosure

SEOPacket’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

This section applies specifically to data obtained through Google Search Console, which you may optionally connect from the Sites page. It does not apply to basic Google Sign-In (which only ever receives your name, email address, and account identifier for authentication).

  • What we access: With your explicit, opt-in consent, SEOPacket requests read-only access (webmasters.readonly scope) to the Search Console properties you choose to connect. We cannot modify, delete, or take any action on your Search Console property — we can only read performance data (clicks, impressions, queries, pages, and position history).
  • How we use it: This data is used solely to power the Search Console features you see directly in the app — charts, tables, and reports on your own site’s search performance. We do not use it for any other purpose.
  • Human access: We do not allow employees, contractors, or anyone else to read your Search Console data, except: (a) with your explicit consent; (b) where necessary for security purposes, such as investigating abuse; (c) to comply with applicable law; or (d) where the data has been aggregated and anonymized, for internal operations.
  • No advertising use: We do not use Search Console data, or any information derived from it, to serve advertisements of any kind — to you or anyone else.
  • No transfer: We do not transfer Search Console data to any third party, except as necessary to provide or improve the Service (e.g., our hosting provider, strictly to run the app you’re using), to comply with applicable law, or as part of a merger, acquisition, or sale of assets as described in Section 6.
  • Storage and security: Your Search Console access token is encrypted at rest and never displayed in plain text anywhere in the app.
  • Revoking access: You can disconnect Search Console at any time with one click, from the Sites page in SEOPacket (this deletes the stored token from our database), or independently at any time via your Google Account’s third-party access page. Disconnecting never affects any other part of the Service.

6. How We Share Information

We share the minimum data each of the following actually needs to do its job — never for their own marketing purposes:

Sub-processor What it receives Why
Fly.io Your account/project data, in the course of hosting the app Application hosting
DataForSEO Keywords and domains you submit Rank tracking, keyword, backlink, and competitor data
Perplexity AI Prompts and target domains for AI/GEO checks AI search-visibility checking
Anthropic (Claude) PageSpeed audit results (not your full site content) AI-generated recommendations on the PageSpeed page
Google OAuth sign-in request; Search Console API calls, if connected Sign-in, and Search Console data (see Section 5)
GitHub OAuth sign-in request Sign-in
Lemon Squeezy Your email, wallet top-up amount and transaction reference Payment processing (merchant of record)
Brevo Your email address Sending verification links and password-reset codes

Every provider above is used only to deliver the specific feature you’re using — the cost of calling these providers’ APIs is paid by SEOPacket as part of operating the Service, not billed to you as a pass-through line item; what you pay for (see our Terms and Conditions) is access to the finished feature itself.

Beyond these:

  • Business Transfers: In connection with a merger, acquisition, restructuring, or sale of assets, subject to standard confidentiality protections.
  • Legal Compliance: Where required by law, court order, or governmental request, or to protect the rights, property, or safety of Soft Learn Hub, our users, or the public.
  • With Your Consent: Any other sharing will only occur with your explicit consent.

A current list of sub-processors is available upon request at the contact details in Section 14.

7. Data Retention

We retain personal data for as long as your account remains active or as needed to provide the Service. Specific retention periods:

  • Account data: Retained until account deletion, plus a limited grace period for recovery (typically 30 days).
  • Billing records: Retained as required by applicable tax and accounting laws (typically 6–7 years).
  • Project/SEO data: Retained until you delete the project or your account, unless you request earlier deletion.
  • Google Search Console tokens: Retained until you disconnect the property or delete your account, whichever comes first — deletion is immediate, not just at the end of a retention window.
  • Log/security data: Typically retained for 90–365 days for security and troubleshooting purposes.

8. Data Security

We implement industry-standard technical and organizational measures, including:

  • Encryption of data in transit (TLS/SSL) and, where applicable, at rest — including your Google Search Console access token, which is encrypted at rest;
  • Role-based access controls and least-privilege principles for internal staff;
  • Regular security reviews, monitoring, and vulnerability management;
  • Secure password hashing (PBKDF2-SHA256, salted per account) — we never store plaintext passwords;
  • Email verification via a signed, single-use, expiring link sent to the address on file.

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Cookies and Tracking Technologies

SEOPacket uses cookies and similar technologies for:

  • Strictly Necessary Cookies: Session management, login authentication, security.
  • Functional Cookies: Remembering preferences and settings.
  • Analytics Cookies: Understanding usage patterns (e.g., via Google Analytics or similar).
  • Marketing Cookies (optional): Only used where you have provided consent, for retargeting or campaign measurement.

You can control cookies through your browser settings or our cookie consent banner. Disabling certain cookies may limit Service functionality.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate or incomplete data;
  • Erase your data (“right to be forgotten”), subject to legal retention requirements;
  • Restrict or object to certain processing;
  • Data portability — receive your data in a structured, machine-readable format;
  • Withdraw consent at any time where processing is based on consent — including revoking Google Search Console access at any time, as described in Section 5;
  • Lodge a complaint with a supervisory data protection authority.

California Residents (CCPA/CPRA): You have the right to know what personal information is collected, request deletion, opt out of the “sale” or “sharing” of personal information (we do not sell personal information), and not be discriminated against for exercising these rights.

To exercise any of these rights, contact us using the details in Section 14. We will respond within the timeframe required by applicable law.

11. International Data Transfers

SEOPacket may process and store data on servers located outside your country of residence, including in jurisdictions that may not provide the same level of data protection. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms for cross-border transfers.

12. Children’s Privacy

SEOPacket is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

13. Third-Party Links and Integrations

SEOPacket may contain links to third-party websites or allow integrations with third-party services (e.g., Google Search Console, analytics platforms). We are not responsible for the privacy practices of those third parties. We encourage you to review their respective privacy policies, including the Google Privacy Policy.

14. Contact Us

For questions, requests, or complaints regarding this Privacy Policy or your personal data, contact:

Soft Learn Hub
Website: softlearnhub.com
Email: privacy@seopacket.com
Address: Islamabad, Pakistan
Data Protection Contact: Not currently designated — direct all privacy requests to the email above.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify users of material changes via email or a prominent notice on the Service prior to the change taking effect. The “Last Updated” date at the top of this policy indicates the most recent revision.