Privacy Policy

1. Who is responsible

Rúben Ferreira is the controller responsible for processing the data described in this policy. Contact: ruferreira92@gmail.com. This policy applies to the rubenferreira.net website and to the personal tool “SEO Agent OS”, available at seo.rubenferreira.net (private and restricted access).

2. SEO Agent OS and Google data

SEO Agent OS is an SEO analysis tool for personal and professional use. When a user authorises access to their Google account, the tool requests read-only permissions solely for:

• Google Search Console: search queries, pages, clicks, impressions, CTR and average position for properties the user can access.
• Google Analytics 4: aggregated traffic and conversion metrics for properties the user can access.
• The tool does not read, send or delete emails, files, contacts or any other Google account data, and it does not change anything in the properties.

3. How we use this data

Exclusively to produce SEO analyses, reports and recommendations for the holder of the Google account that granted authorisation and for the client to whom that property belongs. The data is not used for advertising, is not sold, is not disclosed to third parties and is not used to train third-party artificial intelligence models.

4. How data is stored and protected

The data is stored on a server under the controller’s control. Google access tokens (refresh tokens) are stored using AES-256-GCM encryption. Access to the tool is protected by authentication and a Zero Trust access service. AI-assisted analysis is performed by a locally run model, without sending data to external AI services.

5. Limited Use disclosure (Google API Services)

The use and transfer to any other application of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements. Link: https://developers.google.com/terms/api-services-user-data-policy

6. Retention and deletion

Google data is retained while the authorisation remains active and while it is needed for the service provided to the client. You may revoke access at any time at https://myaccount.google.com/permissions and request deletion of stored data by emailing ruferreira92@gmail.com; the data will be deleted within a maximum of 30 days.

7. The rubenferreira.net website

The website uses Google Tag Manager and Google Analytics only after consent is given through the cookie notice; without consent, no analytics data is collected. You may change or withdraw your consent at any time. If you contact me by email or through the contact form, I will use the data you provide (for example, your name, email address and message) only to reply to you, and I will retain it only for as long as necessary.

8. Your rights (GDPR)

You have the right to access, rectify, erase, restrict, object to the processing of, and receive a portable copy of your data, and to withdraw consent at any time. To exercise these rights, contact ruferreira92@gmail.com. You may also lodge a complaint with Portugal’s National Data Protection Commission (CNPD), www.cnpd.pt.

9. Changes

This policy may be updated. The date of the latest update appears at the top of this page.