Privacy Policy

1. Data Controller

The controller of your personal data is BuyReadySite (hereinafter "we", "us", "our"), the owner and operator of the PromoPilot platform.

Contact us:

• Telegram: @buyreadysite
• Contact form: Contact page

2. What data we collect

2.1. Account data

• Email address
• Full name
• Password (stored encrypted with bcrypt)
• Phone number (when verified via Telegram, optional)

2.2. Technical data

• IP address
• Browser User-Agent
• Session cookies
• Date and time of access

2.3. Project and promotion data

• URLs of promoted sites
• Keywords and anchors
• Link placement results on platforms
• Cascade campaign reports

2.4. Payment data

• Transaction and balance history
• We do NOT store card data — all payments are processed through secure payment providers

2.5. Google API data (when integrated)

When connecting Google Search Console / Google Analytics we receive:

• Search Console (read-only): your list of sites, search statistics — queries, pages, clicks, impressions, CTR, positions, countries and devices; page indexing status and sitemaps
• Google Analytics (read-only): your list of properties and aggregated reports — sessions by source and page, engagement, conversions and revenue. We do not receive personal data of your site's visitors
• Email, name and Google account photo (for identification)
• OAuth tokens (stored encrypted)

2.6. SEO Radar: reviews and their history

When you connect Google, SEO Radar analyses your sites' data and builds a review: pages near the top, a traffic forecast, a promotion plan and visibility in AI answers. We store review results with a date to show you the trend — traffic growth, ranking changes and the effect of promotion — and to make forecasts more accurate over time.

For the analysis we also use publicly available data: the content of your sites' public pages, search results and domain rating (Domain Rating by Ahrefs).

3. How we use data

• Providing cascade link building services
• Processing payments and managing balance
• Campaign and publication status notifications
• Personal SEO Radar reviews, forecasts and recommendations for your sites
• Emails and notifications with data about your sites: traffic changes, new growth opportunities, budget forecasts. You can unsubscribe via the link in any email
• Anonymised aggregated statistics (for example, averages by site topic) to improve our algorithms — without disclosing data of any specific site or user
• Improving platform functionality and user experience
• Fraud and abuse prevention
• Fulfillment of legal obligations

4. Legal basis for processing (GDPR)

We process your data on the following grounds:

• Performance of contract — processing is necessary for providing our services (Art. 6(1)(b) GDPR)
• Legitimate interest — ensuring security and fraud prevention (Art. 6(1)(f) GDPR)
• Consent — for marketing communications and analytics (Art. 6(1)(a) GDPR)
• Legal obligation — storage of financial records (Art. 6(1)(c) GDPR)

5. Cookies and analytics

We use the following types of cookies:

You can disable cookies in your browser settings, but some platform features may become unavailable.

6. Data sharing with third parties

We do NOT sell your personal data. We may share data with:

• Payment providers — for processing transactions
• Google (Analytics, Search Console) — within connected integrations
• Search results data providers and AI services — individual search queries and page URLs, only to run the features you use (search results and competitor analysis, AI visibility checks), without your personal data
• Hosting providers — for storage and processing (EU servers)
• Law enforcement — only when required by law

7. Data storage and security

• Servers are located in the European Union
• All connections are protected with SSL/TLS encryption (HSTS)
• Passwords are hashed with bcrypt algorithm
• CSRF protection is applied to all forms
• Content Security Policy (CSP) prevents XSS attacks
• Two-factor authentication (2FA) is available for accounts

8. Data retention periods

• Account data — while account is active + 30 days after deletion
• Financial records — 3 years (legal requirement)
• Security logs — 90 days
• Campaign reports — while account is active
• SEO Radar reviews and their history — while the account is active; deleted with the account or on your request. Once you revoke Google access, no new data comes in

9. Your rights (GDPR)

If you are in the EU/EEA, you have the following rights:

To exercise your rights, contact us via contact form or Telegram.

10. California Residents' Rights (CCPA)

If you reside in California, you have additional rights:

• Right to know what data is collected about you
• Right to delete your data
• Right to opt out of data selling (we do NOT sell data)
• Right to non-discrimination for exercising your rights

11. Children

PromoPilot is not intended for persons under 16 years of age. We do not knowingly collect children's data. If you believe a child has provided us with data, contact us for its deletion.

12. Policy changes

We may update this policy. All changes are published on this page with the update date. Material changes will be accompanied by a notification upon login.