Snapshot 44810
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Privacy Policy Last updated: 4 June 2026 This privacy policy covers the Built by SEO website (builtbyseo.com) and all apps published by Paul Lovell, including IndexNow Sync, Google Indexing, Google Search Console Plus, and Google Algo Alerts. 1. Who we are Built by SEO is operated by Paul Lovell. We build HubSpot apps and SEO tooling. Questions about this policy should be directed to our contact page. 2. What data we collect This website When you use the contact form on this site, we collect your email address and the message you submit, solely to respond to your enquiry. We do not use cookies, analytics scripts, or tracking pixels. Contact form submissions are sent via Resend and are not stored in a database. IndexNow Sync When you install IndexNow Sync we collect and store: Your HubSpot portal ID and domain OAuth tokens required to read your HubSpot content (stored encrypted) Your installer email address, used for the welcome message and to pre-fill checkout Your Bing IndexNow API key (stored encrypted) A log of URLs submitted to Bing, including submission status codes and timestamps Stripe customer and subscription IDs — no card details are stored by us Google Indexing When you install Google Indexing we collect and store: Your HubSpot portal ID and domain OAuth tokens required to read your HubSpot content (stored encrypted) Your Google service account JSON key (stored encrypted), used solely to authenticate requests to the Google Indexing API A log of URLs submitted to Google, including submission status codes and timestamps Stripe customer and subscription IDs — no card details are stored by us Google Search Console Plus When you install Google Search Console Plus we collect and store: Your HubSpot portal ID and domain OAuth tokens required to read your HubSpot content (stored encrypted) OAuth tokens to access your Google Search Console data on your behalf (stored encrypted) Search Console performance data (impressions, clicks, positions) is retrieved in real time and displayed within HubSpot. We do not store Search Console data on our servers. Google Algo Alerts When you install Google Algo Alerts we collect and store: Your HubSpot portal ID and domain OAuth tokens issued at install (stored securely), used only to identify your portal Your installer email address, used as the default alert recipient Any additional email addresses you choose to add as alert recipients Google Search status and algorithm-update data is public information retrieved from Google's official status feed. It is shared across all installs and is not specific to your portal. Google Algo Alerts does not read or store any of your HubSpot CRM data. 3. How we use your data We use the data we collect to: Provide and operate the service you installed Process payments and manage your subscription via Stripe Send an initial welcome email via Resend (IndexNow Sync and Google Indexing) Send Google Search incident and algorithm-update alert emails via Resend, to you and any recipients you add (Google Algo Alerts) Power in-app dashboards and submission logs Debug issues and improve reliability We do not use your data for advertising or sell it to third parties. 4. Data sharing We do not sell your data. We share data only with the following processors, where necessary to deliver the service: Stripe — payment processing and subscription management Resend — transactional email delivery Bing / Microsoft — URL submission via IndexNow (IndexNow Sync only) Google — URL submission via the Indexing API and retrieval of Search Console data Vercel — hosting and serverless function execution Supabase — database storage for installation and submission data 5. Data retention Installation data (portal ID, OAuth tokens, API keys) is retained for as long as your account is active Submission logs are retained for 90 days, then deleted automatically On uninstalling an app you may request full deletion of your data via our contact page 6. Security Sensitive credentials — including OAuth tokens and API keys — are encrypted at rest. All data is transmitted over HTTPS. We follow industry-standard practices to protect your data, but no system is completely secure and we cannot guarantee absolute security. 7. Your rights You have the right to access, correct, or request deletion of your personal data at any time. To exercise these rights, contact us via our contact page. We will respond within 30 days. 8. HubSpot data All apps access HubSpot only with the permissions explicitly required for their function. We do not access contact records, deal data, or CRM data beyond what is necessary to operate the app. 9. Changes to this policy We may update this policy from time to time. The “Last updated” date at the top of this page reflects when changes were last made. Continued use of the site or apps after changes constitutes acceptance of the updated policy. 10. Contact Questions about this policy? Get in touch via our contact page.