Privacy Policy

Overview

SEO Roast ("we," "us," or "our") operates seoroast.com and related services, including video SEO audits, tools, and account features. This policy describes how we handle personal information when you use our website and services.

Information we collect

We may collect:

• Account data — such as name, email address, and authentication identifiers when you create an account or sign in (including via Google or email).
• Usage and technical data — such as IP address, browser type, device information, pages viewed, and timestamps, including through analytics and error monitoring where enabled.
• Content you submit — such as domains, URLs, or materials you provide for audits, tools, or support requests.
• Payment information — processed by our payment providers; we do not store full card numbers on our servers.

How we use information

We use personal information to:

• Provide, operate, and improve SEO Roast products and support.
• Authenticate users, secure accounts, and prevent abuse.
• Process orders and subscriptions.
• Communicate about your account, service updates, and (where permitted) marketing.
• Analyze usage in aggregate to improve the product experience.
• Comply with legal obligations and enforce our terms.

Legal bases for processing (EEA/UK)

Where GDPR or similar laws apply, we rely on the following legal bases:

• Contract — to provide the service you signed up for, process orders, and manage your account.
• Legitimate interests — to secure our platform, prevent fraud, and improve our products, balanced against your rights.
• Consent — where required, such as for certain marketing communications.
• Legal obligation — where we must retain or disclose data to comply with law.

Service providers (subprocessors)

We use trusted third parties to operate SEO Roast. They process data on our behalf under appropriate agreements:

• Hosting & infrastructure — to run the application and store data.
• Better Auth — authentication and session management (self-hosted in our stack).
• Stripe — payment processing and subscription billing.
• Resend — transactional and service emails (sign-in, order confirmations).
• Google — optional OAuth sign-in.
• PostHog (EU) — product analytics and error monitoring.
• DataFast — website analytics and attribution.
• Tolt — affiliate referral tracking.
• OpenRouter — optional AI features when you connect your own API key.

We may update this list as our stack changes. Contact us if you need the current list for your records.

Cookies and similar technologies

We use cookies and similar technologies for session management, preferences, security, and analytics. You can control cookies through your browser settings; disabling some cookies may limit certain features.

Examples of cookies we use:

• Session cookies (essential) — keep you signed in via Better Auth.
• Analytics cookies — PostHog, DataFast, and similar tools to understand product usage.
• Affiliate cookies — Tolt referral tracking for partner attribution.
• UI preference cookies — such as sidebar state for logged-in users.

International transfers

We and our service providers may process data in countries outside your own, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms offered by our vendors.

Sharing

We may share information with service providers who assist us (for example hosting, email, analytics, payments, and customer support), subject to appropriate safeguards. We may also disclose information if required by law or to protect our rights and users.

Retention

We retain personal information only as long as needed for the purposes described in this policy, unless a longer period is required or permitted by law. When you delete your account, we remove your profile and associated data from our systems; some records (such as anonymized order history or data held by payment processors) may be retained as required for legal, accounting, or fraud-prevention purposes.

Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing.

In your account: signed-in users can export a JSON copy of their data or request account deletion from Account Settings. Deletion requires email confirmation via a link we send to your registered address.

By email: you can also contact us at [email protected] to exercise your rights. We respond within the timeframes required by applicable law.

Children

SEO Roast is not directed at children under 16, and we do not knowingly collect personal information from children.

Changes

We may update this Privacy Policy from time to time. We will post the updated version on this page and adjust the "Last updated" date.

Contact

Questions about this policy: [email protected]