Effective 2026-09-01

Privacy notice

Doved Studio operates SEO for My App. This notice explains what SEO for My App collects, why we use it, how long we keep it, and the choices available to you.

What we collect

Your account and workspace

We store your name, email address, account security records, app profiles, verified product and brand context, research evidence, drafts, images, publishing settings, automation choices, and API key metadata. We store only API key hashes after showing a new key once.

Billing and connected providers

Stripe handles checkout and payment details. SEO for My App stores the provider identifiers, entitlement state, plan, and webhook records needed to operate billing. When you connect Apple reporting or another supported provider, SEO for My App encrypts the credentials with the deployment key and does not return them through the API.

Consented website measurement

After a visitor agrees to analytics, SEO for My App can record the published page path, recognized referral source, tool interaction, and App Store link click. The tracker rejects personal contact fields, passwords, tokens, cookies, and raw IP addresses. Apple campaign reports remain aggregate and separate from website events.

Operational records

SEO for My App keeps bounded job, health, migration, email-delivery, publication, and security records needed to run and protect the service. Safe operational logs exclude page drafts, private prompts, credentials, reset links, and raw provider error bodies.

How we use this information

  • Authenticate you and protect account requests.
  • Research topics, create drafts, review pages, publish approved content, and operate your connected tools.
  • Show consented website activity and separate aggregate Apple campaign reports.
  • Process billing, recover accounts, enforce plan limits, prevent abuse, and respond to support requests.
  • Maintain backups, investigate failures, and restore the service.

SEO for My App does not sell workspace data or use private drafts, provider credentials, or visitor events for advertising.

Service providers

SEO for My App sends data only when a feature needs it. Depending on the configured deployment and the features you choose, providers can include Stripe for billing, Resend for account email, Cloudflare for edge delivery and customer domains, Apple for App Store information and aggregate reporting, OpenAI or DeepSeek for text generation, Brave for web research, and search or assistant sources represented in your imported evidence.

Each provider processes data under its own terms. SEO for My App keeps optional integrations disabled until the operator configures and verifies them.

Cookies and browser storage

SEO for My App uses essential session and CSRF cookies when you sign in. They keep you signed in and protect account requests. This browser stores your consent choice in local storage. If you allow the public demo preference, the browser also stores the selected demo category for up to 180 days.

Open Cookie settings from the footer to change the optional choice. Turning it off removes the stored demo category. If your browser blocks local storage, the choice lasts only for the current page.

Retention

  • Active account and workspace content: until you close the account or we must remove it under these terms.
  • Consented raw website events: 30 days.
  • Minimal completed account-closure records: 365 days.
  • Minimal billing and reconciliation records: 2555 days.
  • Encrypted backup sets: 30 days.

Active workspace content remains available while you keep the account, subject to the service terms. Provider records can follow a separate legally required retention period. Account closure removes customer content through the durable cleanup worker while keeping only the configured minimal reconciliation records.

Your controls

Open Account & exports to download your app profiles, research, editable content, available reviewed images, publication metadata, and reporting records. You can export after paid access expires. The archive excludes passwords, session and API credentials, provider credentials, raw visitor metadata, and internal security records.

You can revoke an API key, disconnect Apple reporting, change analytics consent, pause automation, cancel billing through the billing portal, or close your account from the same account area. Closing the account immediately revokes access and starts durable provider and data cleanup.

Security and contact

SEO for My App uses tenant-scoped access checks, hashed passwords and API keys, encrypted provider credentials, bounded requests, immutable publication revisions, and private origin controls. No online service can promise absolute security. Keep your account credentials and exported archives private.

For a privacy question or request, contact [email protected]. The production release gate requires a real monitored address and explicit notice approval before paid launch.