Privacy Policy

How we handle, secure, and protect your data with 100% on-device in-browser crawling and local storage.

Last updated: October 2026

1. Overview & Local-First Architecture

SEOFixi (distributed as "SEOFixi — Technical SEO Audit & Crawler" Chrome extension and desktop web app) is engineered with a strict, transparent separation between your crawled website audit data and your account identity. To eliminate any ambiguity: we do not upload, transmit, analyze, or store your crawled URLs, page HTML, audit reports, or SEO diagnostics on our servers. All crawling, DOM parsing, link extraction, and audit scoring execute 100% locally on your machine within your browser sandbox.

Local Audit Content
100% On-Device • Never Uploaded to External Cloud
  • Crawl URLs & Response Headers: Status codes, latency, content types, redirects
  • DOM & Metadata Analysis: Titles, descriptions, canonicals, robots meta tags, H1-H6 tags
  • Technical Diagnostics: Open Graph, Twitter Cards, Schema.org JSON-LD microdata, hreflang, broken links
  • Storage & Reports: Origin Private File System (OPFS) JSONL streaming store & CSV exports
Cloud & Account Data
Synchronized with Secure Backend • Minimal Footprint
  • Google User ID & Email: Account authentication and Pro license assignment
  • Name & avatar: Profile information retrieved via Google Identity Services
  • License status: Plan tier (Free / Pro Pass), cryptographic offline token, expiration
  • Transaction metadata: Order reference and status from Merchant of Record (Creem)

2. Data Controller

The data controller responsible for the processing of your minimal personal account metadata under the General Data Protection Regulation (GDPR), UK GDPR, and applicable privacy legislation is:

  • Data Controller: Individual Entrepreneur Alexsandr Lazarev, operating as SEOFixi.
  • Jurisdiction & Tax Residency: Registered Individual Entrepreneur and Tax Resident of Georgia.
  • Contact & Privacy Inquiries: support@seofixi.com

3. What Stays Strictly on Your Device (Local Crawl & Audit Data)

All SEO crawling, website fetching, robots.txt and sitemap parsing, and audit diagnostics execute entirely on your machine using browser-native fetch, stream readers, and the Origin Private File System (OPFS). Page HTML, headers, status codes, link graphs, and audit reports are processed solely by your device's CPU and stored within your local browser sandbox. We do not upload, copy, transmit, or store your crawl results or audit reports on external servers.

Local Storage Notice: Because crawl data and project sessions reside strictly within your browser's local sandbox (OPFS) and are never uploaded to remote cloud servers, clearing browser site storage or uninstalling the extension will remove unexported local crawl sessions. You can export complete reports to CSV or JSON anytime via the SEOFixi dashboard.

4. What Is Synchronized with Our Cloud (Account & Licensing Data)

To deliver authentication, license activation, and Pro pass entitlements, we synchronize a minimal set of non-SEO account metadata with our secure backend:

  • Google Account Identity: When you sign in with Google, we receive your Google User ID (sub), primary email address, full name, and avatar URL via standard Google Identity Services. We use this minimal information strictly and solely to authenticate your session and link your purchased Pro access pass. We never sell, rent, monetize, share, or disclose this data to any third party, marketing network, or data broker.
  • License & Entitlement State: Your active tier (Free or Pro Pass), cryptographically signed digital license tokens, and pass expiration timestamps so Pro features work reliably across browser sessions without continuous online checks.
  • Transaction & Order Metadata: When you purchase an access pass, our authorized Merchant of Record provides us with your order reference ID, customer ID, purchased pass tier, expiration timestamp, and transaction status. Payment card details (card number, CVV, expiration date) are handled exclusively by our PCI-DSS Level 1 compliant Merchant of Record (Creem) and are never received, transmitted, or stored on our servers.

5. Browser Extension Permissions

The SEOFixi Chrome extension requests only the minimum permissions necessary to function, declared in its manifest.json under Google's principle of least privilege:

Least Privilege Architecture — Zero Browsing Tracking: SEOFixi does not track or log your general browsing history, search queries, or background web activity. Crawling is initiated strictly by your explicit user action when you click “Start Crawl” on an active tab or enter a target URL.
  • activeTab: Grants temporary, scoped permission to the currently focused tab solely when you interact with the extension popup or side panel to initiate an audit.
  • storage: Used solely to store lightweight extension settings, theme preferences, and your cryptographically signed license token in chrome.storage.local. (Large crawl databases and streamed JSONL records reside in the browser's Origin Private File System, not in extension storage).
  • offscreen: Creates an isolated background worker where crawling HTTP fetch pipelines and OPFS streaming writes execute smoothly without stalling your browser tabs or UI.
  • identity: Initiates the browser-native Google OAuth sign-in flow via Google Identity Services (chrome.identity) strictly to authenticate your account, verify your SEOFixi Pro pass, and issue an offline signed digital license token.
  • alarms: Schedules lightweight background heartbeats to safeguard active crawl sessions and manage automatic garbage collection.
  • declarativeNetRequest / Host permissions: Used strictly to perform direct HTTP probe requests (fetching robots.txt, sitemaps, llms.txt, and status codes) directly from your browser to target domains, bypassing third-party proxy bottlenecks.

6. Information We Never Collect & Limited Use Compliance

  • Your crawled website data, internal URLs, staging environments, or localhost endpoints.
  • Credentials, cookies, session tokens, or private form data found on audited pages.
  • Keystrokes, passwords, or personal credentials.
  • Background telemetry, diagnostic trackers, or behavioral analytics.

Google API Limited Use Disclosure: SEOFixi's use and transfer to any other app of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We only use Google account data for authentication and license validation, and never use or transfer user data for advertising.

7. Third-Party Sub-Processors & Hosting

To operate our authentication and licensing service securely, we engage vetted third-party sub-processors adhering to GDPR Chapter V standards:

  • Google Identity Services (Google LLC, USA): Secure OAuth authentication. Complies with the EU-U.S. Data Privacy Framework (DPF).
  • Creem (Creem, Inc. — creem.io): Serves as our authorized Merchant of Record for global checkout transactions, PCI-DSS Level 1 payment processing, sales tax/VAT compliance, and automated invoicing. Payment card details are handled exclusively by Creem.
  • Cloud Infrastructure: Dedicated secure cloud server infrastructure hosting our backend authentication API, database, and license validation endpoints under strict encryption and access controls.

8. Data Retention & Deletion Rights (GDPR & CCPA/CPRA)

You may request deletion of your account and associated license records at any time by contacting support@seofixi.com. We will process verified requests within 30 days. All local crawl records stored in your browser's OPFS sandbox can be cleared instantly by you via the SEOFixi dashboard or browser site settings.

9. Policy Updates & Contact

We may update this Privacy Policy periodically. Any updates will be published on this page at https://seofixi.com/privacy with a revised date.