Privacy Policy

Last updated: 18 October 2026

Who we are

SEO Sauna (seosauna.com, app.seosauna.com) is provided by Seopal Oy, Eerolankuja 10, 40270 Palokka, Finland, which is the data controller. Contact: support@seosauna.com.

Data we collect

• Account data: your name and email address, used to sign you in and to send account emails such as confirmations, password resets and team invitations. If you sign in with Google, we receive your Google name and email address.
• Billing data: your plan, credit usage, invoices and the billing details you enter at checkout, such as company name, VAT ID and address. Card details are handled by Stripe and never reach us.
• Project data: the websites, keywords and competitors you add to the app.
• Google user data: if you choose to connect Google, we access the Google Search Console and Google Analytics 4 properties you select, with read-only permissions.

How we use Google user data

We use Google Search Console data (search clicks, impressions, positions, URL inspection results) and Google Analytics data (traffic and engagement reports) only to display reports about your own properties to you inside SEO Sauna. We do not use Google user data for advertising, we do not sell it, and we do not use it to train artificial intelligence or machine learning models.

SEO Sauna's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and security

Data is stored on Cloudflare infrastructure. Google OAuth access and refresh tokens are encrypted at rest. Access to your workspace requires signing in, and only members of your workspace can see its data.

Sharing

We do not share your data with third parties, except with the service providers needed to run the app: Cloudflare (hosting), DataForSEO (search, ranking, backlink and AI visibility data, which receives the keywords, domains and prompts you query, not your Google data), OpenRouter (AI assistant features, which receives the messages you send, not your Google data), Stripe and Autumn (payments, subscriptions and credit balances) and Loops (account emails). We use these services to provide SEO Sauna to you under our agreement with you.

Retention and deletion

You can disconnect a Google property from a project at any time in the app's settings. To revoke SEO Sauna's access to your Google account entirely, which invalidates the stored tokens, use myaccount.google.com/permissions. To delete your account and all associated data, including stored tokens, email us and we will do so within 30 days. Invoices and billing records are kept for as long as Finnish accounting law requires.

Your rights

Under the GDPR you have the right to access, correct, export and delete your personal data, and to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

Changes

We will post any changes to this policy on this page and update the date above.