Last updated 23 October 2026

Privacy Policy

This policy explains what personal data Organic Search collects, what we do with it and the choices you have. The operator named on the contact page is the data controller.

Operator
TODO, sole trader, trading as Organic Search
Contact
TODO
Country
TODO

01What we collect

Account data: your email address, and a password hash if you sign in with a password. We never store a readable password.

Usage data: the website addresses you submit, the checks run against them, the results, and basic logs such as IP address, browser type and timestamps.

Billing data: the fact that you have a plan, and the order and invoice records Dodo Payments shares with us. Card numbers are entered on Dodo's checkout and never reach our servers.

Support data: anything you write to us by email.

02Why we use it

To run the checks you ask for and show you the results.

To create and maintain your account, and to take payment and send receipts.

To answer support messages.

To keep the service working and secure, including rate limiting and abuse prevention.

To send service messages such as billing notices. Marketing email only goes out if you opt in, and every one of those has an unsubscribe link.

03Legal basis

Where the GDPR applies, we rely on performance of a contract for running your account and the service, legitimate interests for security and improving the product, consent for marketing email, and legal obligation for tax and accounting records.

04Who we share it with

Dodo Payments, to take payment, calculate tax and issue invoices as merchant of record.

Our hosting and infrastructure providers, to run the site and the database.

The search and AI providers we query on your behalf. When we check how a site shows up, we send the question and the site address to those services. We do not send them your account details.

Analytics, to count visits and understand which features get used.

Authorities, where the law requires it.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

05How long we keep it

Account and scan data stay while your account is open, and for up to twelve months after you close it in case you come back or a dispute comes up.

Invoices and tax records are kept for as long as tax law requires.

Logs are kept for up to ninety days.

06International transfers

Our providers may process data outside your country. Where that happens from the EEA or the UK, the transfer relies on standard contractual clauses or another approved safeguard.

07Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to or restrict a use, withdraw consent, or ask for your data in a portable form. Write to the contact address and we will answer within the time the law allows.

If you are in California, you can ask what we collect and ask us to delete it, and we will not treat you differently for asking.

If you think we have handled your data badly you can complain to your local data protection authority.

08Cookies

We use cookies and similar storage to keep you signed in, remember your theme, and count visits. You can clear or block them in your browser, though signing in will stop working if you block the essential ones.

09Children

The service is not for children, and we do not knowingly collect data from them.

10Changes

We may update this policy. The date at the top shows the last change, and we will tell account holders before a material change takes effect.

11Contact

Privacy questions and requests go to the contact address on the contact page.