Privacy Policy

Last updated: 2026-06-02

This policy explains what personal data the Kassit SEO platform processes and the rights you have over it. We act as the data controller for account data and as a processor for the website/analytics data you bring into your organizations.

What we store

Account: email, display name, hashed password, and your consent timestamp.
Organizations & teams: workspace names, memberships, roles, invitations.
SEO data: the projects, crawl results, keywords and reports you create.
Integrations: Google Search Console / Analytics tokens you connect, stored encrypted.
Security & audit logs: sign-in events, API-key actions, and membership/billing changes.

Lawful basis & consent

We process account data to provide the Service under our contract with you. You accept these terms at registration and we record the timestamp of that consent.

Your rights

Access / portability: download all data tied to your account and organizations at /account/data-export (machine-readable JSON).
Erasure: close your account from account settings. This deletes your owned workspaces and all their data, removes your memberships, and revokes pending invitations to your email — before the account record itself is deleted.
Rectification: update your profile details from account settings.

Retention

Operational time-series metrics are retained for a bounded window and then swept automatically. Data you delete (a project, an organization, or your account) is removed along with its dependent records.

Sub-processors

We use a payment processor for billing and Google's official APIs for the search data you choose to connect. We do not sell personal data.