Privacy Policy

Introduction

Ooty ("we," "our," or "us") operates the ooty.io website and the Ooty desktop application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

Information We Collect

Account Information

When you create an account, we collect your email address and password (stored securely using industry-standard hashing). If you use magic link authentication, we collect only your email address.

License and Device Information

When you activate a license, we collect your device's hardware identifier, platform type (macOS, Windows, or Linux), and a user-friendly device name. This information is used solely for license validation and device management.

Usage Data

We collect anonymized usage data to improve our Service, including feature usage patterns, error reports, and performance metrics. We do not collect the content of your SEO projects or keyword research.

Payment Information

Payment processing is handled by Lemon Squeezy, our third-party payment processor. We do not directly collect or store your credit card information. Please refer to Lemon Squeezy's Privacy Policy for details on their data handling practices.

Google API Services User Data Policy

Ooty's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data We Access Through Google APIs

When you connect your Google account to Ooty, we may request access to the following data depending on the features you use:

• Google Search Console data , including search performance data, URL inspection results, and indexing status for websites you have verified ownership of in Search Console.
• Google Indexing API access , to submit URLs for indexing and check indexing status on your behalf.

How We Use Google API Data

We use the data accessed through Google APIs solely to provide and improve the SEO analysis features within the Ooty application. Specifically:

• Search Console data is displayed to you within the Ooty application to help you analyze your website's search performance.
• Indexing API access is used only to submit URLs you explicitly request to be indexed.
• We do not use Google API data for advertising purposes.
• We do not sell or share Google API data with third parties.

Google API Data Storage and Retention

Google API data is processed in real-time and is not permanently stored on our servers. Temporary caching may occur to improve performance, with cached data automatically expiring within 24 hours. You can revoke Ooty's access to your Google account at any time through your Google Account permissions page.

Server-Side API Keys

For certain Google APIs that do not require individual user authentication (such as PageSpeed Insights and Knowledge Graph Search), we use our own developer API keys on the server side. No personal user data is transmitted through these APIs. They provide publicly available data about websites and entities.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve the Service
• To manage your account and provide customer support
• To process transactions and manage your subscription
• To validate your license and manage device activations
• To send you service-related communications (account verification, security alerts, billing updates)
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations

Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service providers: We share data with third-party service providers who assist in operating our Service (e.g., Supabase for database and authentication, Lemon Squeezy for payment processing, Cloudflare for content delivery).
• Legal requirements: We may disclose your information if required by law, regulation, or legal process.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With your consent: We may share your information for any other purpose with your explicit consent.

Data Security

We implement industry-standard security measures to protect your information, including:

• HTTPS encryption for all data in transit
• Secure password hashing using bcrypt
• Row-Level Security (RLS) policies on our database to ensure users can only access their own data
• Encrypted storage of sensitive configuration data on user devices
• Regular security audits of our codebase and infrastructure

While we strive to use commercially acceptable means to protect your information, no method of electronic storage or transmission over the Internet is 100% secure.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or legitimate business purposes (such as resolving disputes or enforcing our agreements).

License activation and device event logs are retained for audit purposes and automatically purged after 12 months.

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: You can request a copy of the personal information we hold about you.
• Correction: You can update your account information at any time through your dashboard.
• Deletion: You can request deletion of your account and associated data.
• Data portability: You can request an export of your data in a machine-readable format.
• Revoke Google access: You can revoke Ooty's access to your Google account at any time through your Google Account settings.

To exercise any of these rights, please contact us at Click to reveal email.

Cookies and Tracking

We use essential cookies to manage authentication sessions and maintain your preferences. We do not use third-party advertising or tracking cookies. Analytics, if enabled, are privacy-respecting and do not track individual users across websites.

Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: Click to reveal email
• Support: Available for Pro subscribers in the dashboard
• Website: ooty.io