PromoPilot Terms of Use and Privacy Policy

Privacy Policy

1. User Data Collection

PromoPilot collects and processes the following types of data:

1.1. Basic User Data

• Email address
• Full name
• Password (encrypted)
• IP address and browser data
• Payment and balance information

1.2. Google API Data (when using Google integration)

When connecting Google Search Console and Google Analytics, we access the following data:

• Google Search Console List of domains verified in your Search Console (read-only)
• Google Analytics List of Google Analytics properties associated with your account (read-only)
• Profile data: Google account email, profile name, profile picture (for connected account identification)
• OAuth tokens: Access token and refresh token for API access (stored encrypted)

We request the following OAuth scopes:

• openid, email, profile - for user identification
• https://www.googleapis.com/auth/webmasters.readonly - to read the list of sites from Search Console
• https://www.googleapis.com/auth/analytics.readonly - to read the list of Google Analytics properties

1.3. Project Data

• URLs of promoted sites
• Keywords for promotion
• Promotion launch history
• Publication statistics

1.4. SEO Tools Data

• URLs of analyzed websites
• Audit results, indexation checks and competitor analyses
• Generated reports and their export
• Tool usage statistics (daily counters)

1.5. White-label Data

• Company name, logo, contact information
• Brand color and text for reports
• White-label data is used exclusively for formatting user reports

2. Data Usage

We use collected data exclusively for the following purposes:

2.1. Primary Usage

• Providing and improving PromoPilot platform services
• Managing your account
• Processing payments and managing balance
• Sending notifications about promotion status
• User technical support

2.2. Google API Data Usage

• Import domains from Google Search Console to create promotion projects
• Import data from Google Analytics to create promotion projects
• Display list of your verified domains in the platform interface
• Automatic project information filling during import

IMPORTANT: Google API data is used ONLY to import projects into your PromoPilot account. We DO NOT use this data for AI/ML model training, do not share it with third parties, and do not use it for other purposes.

3. Data Storage and Protection

3.1. Storage Security

• All data is stored on secure servers using encryption
• User passwords are stored encrypted (bcrypt)
• Google OAuth tokens are stored in a secure database with restricted access
• Only authorized staff have data access for technical support
• SSL/TLS encryption is used for data transmission

3.2. Data Location

Data is stored on servers located in the European Union, complying with GDPR requirements.

4. Third-Party Data Sharing

We DO NOT sell, rent, or share your personal data with third parties, except in the following cases:

• Payment systems: To process payments, we transfer minimal necessary information (email, amount) to payment providers
• Network platforms: URLs of your projects and keywords are transferred to third-party platforms for publication placement (as part of the promotion service)
• Legal requirements: Upon request from law enforcement agencies in accordance with legislation

Google API data: Information obtained through Google Search Console and Google Analytics API is NOT shared with third parties under any circumstances and is used ONLY within the platform for your projects.

5. Data Retention and Deletion

5.1. Retention Period

• Account data is stored until deletion
• Google OAuth tokens are stored until access is revoked or account is deleted
• Project and transaction history is stored for 3 years for accounting purposes
• Access logs are stored for 90 days

5.2. Data Deletion

You can request deletion of your data at any time:

• Account deletion: In profile settings or by contacting support
• Revoke Google access: In Google account settings (myaccount.google.com/permissions) or in PromoPilot settings
• Partial deletion: You can delete individual projects in the platform interface

After account deletion, all personal data, including Google OAuth tokens, will be deleted within 30 days, except data that must be retained by law (transaction history).

6. User Rights (GDPR)

In accordance with GDPR, you have the following rights:

• Right of access: You can request a copy of all your data
• Right to rectification: You can correct inaccurate data in profile settings
• Right to erasure: You can delete your account and all data
• Right to data portability: You can export your data
• Right to object: You can withdraw consent for data processing

To exercise these rights, contact BuyReadySite.com support

7. Google API Services Usage

PromoPilot uses Google API Services and complies with Google API Services User Data Policy, including Limited Use requirements.

Limited Use:

• Google API data is used ONLY for project import functionality
• We DO NOT use data for advertising
• We DO NOT share data with third parties (except Google)
• We DO NOT use data for AI/ML model training
• Data is not used for credit scoring purposes

8. Cookies and Analytics

We use cookies for:

• Maintaining user session
• Remembering language settings
• Technical analytics of platform usage

You can disable cookies in browser settings, but this may limit platform functionality.

9. Privacy Policy Changes

We reserve the right to make changes to this privacy policy. We will notify you by email of significant changes. The last update date is indicated at the beginning of the document.

10. Contacts

For all questions regarding personal data processing and privacy policy, contact:

• Email address: support@buyreadysite.com
• Company: BuyReadySite.com
• Platform: promopilot.link