Privacy Policy

1. Who we are

Oh My Link ("Oh My Link", "we", "us" or "our") makes SEO Utils (the "App"), a desktop application for macOS, Windows and Linux, and runs the SEO Utils account service and our websites, including ohmylink.app and seoutils.app (together, the "Services"). Oh My Link is based at 420 W Smith St, Apt 323, Kent, WA 98032, USA, and is responsible for the personal information described in this policy.

This policy explains what information we collect, how the App handles the data it works with, and the choices you have. It works together with our Terms of Service.

2. Data that stays on your computer

The App keeps its database and settings in a folder on your computer. That includes your reports, keywords, rankings, crawled pages, data imported from connected services, and the API keys, passwords and sign-in tokens you save in the App. We do not receive a copy of this data, except in the cases described in sections 4 to 6.

The App does not encrypt this folder itself. It is protected by your computer's own security, so use a strong password for your computer account, turn on disk encryption, and encrypt any backups you make.

3. Information we collect

Account, purchase and licence information

• Account details: your name and email address, and the names and emails of team members you invite.
• Purchases and licences: purchases and licence keys are handled by our payment provider and reseller, Lemon Squeezy, which processes your payment details under its own privacy policy. We do not see or store your full card number.
• Licence checks: when you activate SEO Utils, the App sends your licence key and your computer's name to Lemon Squeezy. It then checks the licence again from time to time, using the licence key and an activation ID.
• Version checks: some checks with our servers send the App's version, your operating system and a one-way hash of your licence key. Examples are whether your licence covers a new version, and whether your licence includes MCP access.

Diagnostics

• Error reports: when something goes wrong in the App's own code, it sends an error report to Sentry, our error-monitoring provider. A report holds the error message, technical details of where it happened, and the App version. Before a report is sent, the App removes passwords, API keys, tokens, email addresses and the user name in file paths. A report can include the domain, keyword or web address the App was working on when the error happened. Error reports are always on, because we need them to fix bugs.
• Usage statistics: by default the App sends basic usage events to our servers, such as "app started", the days it is used and which tools are opened. Each event comes with a random installation ID, your operating system, processor type, App version and a one-way hash of your licence key. It never includes your report data. You can turn usage statistics off in the App under Settings → General.
• Update checks: the App downloads update information from Amazon Web Services and our servers. These requests include your IP address and your operating system type, but no data from the App.

Our websites

• ohmylink.app does not set cookies. It loads fonts from Google Fonts, which receives your IP address.
• seoutils.app uses Fathom Analytics, which counts visits without cookies, and the Meta Pixel, which helps us measure our advertising and uses cookies. You can block the Meta Pixel with your browser's tracking protection or an ad blocker.
• Our account site uses the cookies it needs to keep you signed in.
• Like most web servers, ours keep short-term logs of requests: IP address, browser type, pages and time.

When you contact us

If you email us or ask for support, we keep the messages and anything you choose to send, such as screenshots or files.

4. Features that send data through our servers

These features only run when you use them.

Remote Access

Remote Access lets you, and team members you invite, open your SEO Utils from a web browser. The connection runs through an encrypted tunnel provided by Cloudflare. The pages and data you view pass through that tunnel, and our servers do not keep a copy. To run Remote Access, our servers store:

• your computer's name;
• the names of your workspaces;
• the names and emails of team members, their invitations and access settings;
• the browsers and devices that signed in, and when they were last active;
• a security log of sign-ins and changes, including IP addresses.

Published reports

When you publish a report to share with a client, the App uploads a copy of that report's data to our servers, stored with Cloudflare. That way the people you share it with can view it even when your computer is off. The copy is updated after each new run and kept until you unpublish or delete the report.

We also store the report's name, its sharing settings and, if you set one, a scrambled (hashed) version of its link password. If the report shows a map using your Google Maps browser key, we store that key so the map can load. The App will not publish a report that contains your other API keys or passwords.

SEO Utils credits

If you use SEO Utils credits instead of your own DataForSEO account, requests for backlink, traffic, keyword and AI Visibility data go through our servers to DataForSEO and back. That includes the keywords, domains and prompts in the request, and the results. We use these requests to provide the data and to bill your credits.

5. Services you connect

The App can connect to other services with your own accounts or API keys, such as DataForSEO, OpenAI, Anthropic, Google Gemini, OpenRouter, RingTonic, Google Places and Maps, Google Drive and your own email (SMTP) server. When you use a feature that needs one of them, the App sends the request from your computer straight to that service, along with the content the feature needs (for example the keywords you look up or the text you ask an AI model to write). That service's own privacy policy applies to what it receives.

The App can also run a local MCP server, which lets an AI assistant you connect, such as Claude, read your SEO Utils data. It only listens on your own computer and cannot be reached from the internet. Whatever the assistant reads is sent to that assistant's provider under its own policy.

Backups go only where you choose: a file, a folder (which may be synced by a service such as Dropbox or iCloud), or your own cloud storage bucket. A backup holds your SEO Utils data, including saved sign-in tokens, so we recommend turning on backup encryption.

6. Google user data

SEO Utils can connect to Google Search Console, Google Analytics, the Google Indexing API and Google Business Profile. Depending on the service, you connect by signing in with your Google account or with a Google service account you create in your own Google Cloud project.

• When you sign in with Google, the sign-in happens in your web browser. Google returns the access tokens directly to the App on your computer. Your tokens and the data you load are saved in the App's database on your computer, and are never sent to our servers.
• For Google Search Console, the App asks for read-only access to your Search Console data and your email address. It uses them to show search performance and indexing data for the sites you choose, in your reports.
• Data from Google APIs is only used to provide and improve the features you see and use in SEO Utils.

Google Business Profile

You can link a Google Business Profile location to a report in SEO Utils, for example to a local rank tracker, to see how people find and contact that business.

What SEO Utils asks for. When you connect, Google asks you to allow SEO Utils to manage your Business Profile listings (Google's business.manage permission). This is the only permission Google offers for Business Profile data, even for read-only use. SEO Utils also asks for your email address, so it can show which Google account is connected.

What SEO Utils reads. SEO Utils only reads the following:

• the Business Profile accounts and locations you manage (each location's name, address and Google Place ID), so you can choose which location to link to a report;
• daily performance numbers for the locations you link:
  • how often the profile was viewed on Google Search and Google Maps, on desktop and mobile;
  • website clicks, call clicks, direction requests and messaging clicks;
  • bookings and menu clicks, where your business has them;
• the monthly search terms that showed your profile, with how often each one did.

What SEO Utils never does. SEO Utils does not create, edit or delete anything in your Business Profile. It does not change your business information, publish posts, reply to reviews or manage users. It also does not read your customers' messages, reviews or personal details through this connection.

How it is used. SEO Utils uses this data only to show it to you in the reports you create, such as charts, tables and exports you choose to make, and to keep those reports up to date.

Where it is stored. SEO Utils requests the data from Google directly from your computer. The data and your Google sign-in tokens are saved in the App's database on your computer. They do not pass through or get stored on our servers, except in these cases, which you choose:

• you publish a report that includes Business Profile data, which stores a copy on our servers as described in section 4;
• team members you invite view it through Remote Access;
• you export it, back it up or give an AI assistant access to it, as described in section 5.

What we never do with it. We do not sell Business Profile data. We do not use it for advertising, and we do not share it with data brokers or other third parties except when you send it yourself in the ways listed above. We do not use it to develop, improve or train artificial intelligence or machine-learning models. People at Oh My Link do not read it, unless you ask us to and send it to us for support, or the law requires it. SEO Utils' error reports do not include Business Profile data.

How long it is kept, and how to remove it. The data stays on your computer until you delete the report it is linked to, disconnect the Google account in SEO Utils, or delete SEO Utils' data folder. Disconnecting a Google account in SEO Utils deletes its saved tokens from your computer, and SEO Utils stops reading its data immediately. You can also remove SEO Utils' access at any time on your Google Account permissions page. A published copy is deleted when you unpublish or delete the report.

Google API Services User Data Policy

SEO Utils' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. How we use information

• To provide the Services: run your account, licence, Remote Access, published reports and credits.
• To find and fix bugs and keep the Services secure.
• To understand, with usage statistics, which tools are used, so we can improve them.
• To reply to you and send messages about your account, licence, billing and important changes.
• To send product news to customers. Every email has an unsubscribe link.
• To follow the law and enforce our Terms.

If you are in the European Economic Area or the UK, we rely on these legal grounds:

• to perform our contract with you (account, licence and the features you use);
• our legitimate interests (error reports, usage statistics, security and product news to customers);
• your consent (connecting a Google account, and cookies on seoutils.app where consent is needed);
• our legal obligations.

8. Who we share information with

We do not sell your personal information. We share it only with:

• Service providers that run parts of the Services for us, under contracts that limit their use of it:
  • Lemon Squeezy (payments and licences);
  • Cloudflare (Remote Access and published report storage);
  • Amazon Web Services (downloads and updates);
  • Sentry (error reports);
  • DataForSEO (when you use credits);
  • our web hosting and email delivery providers;
  • Fathom and Meta (website analytics and ad measurement on seoutils.app).
• People you choose: team members you invite, and anyone you share a published report with.
• Legal and safety reasons: when the law requires it, or to protect the rights, property or safety of our users, the public or Oh My Link.
• Business transfers: if Oh My Link is part of a merger, acquisition or sale of assets. This policy would continue to apply to your information.

9. How long we keep information

We keep account, purchase and licence information while your account is active and afterwards as long as needed for tax, accounting and legal reasons. Error reports and server logs are kept for a limited time and then deleted. Usage statistics are kept to understand how the App is used over time. Remote Access and published-report data is kept until you remove it, unpair the computer or delete the report. A published report stays online after you unpair a computer until you unpublish it.

10. Your choices and rights

• Turn off usage statistics in the App under Settings → General.
• Disconnect any connected account in the App, and remove SEO Utils' Google access on your Google Account permissions page.
• Unpublish reports and remove team members at any time.
• Unsubscribe from product emails with the link in any email.
• Depending on where you live, you can also ask us for a copy of your personal information, or ask us to correct or delete it, limit or object to how we use it, or move it to another service. Email us at the address below. We will reply within 30 days, and you can complain to your local data protection authority.

The data stored on your computer is fully in your control. You can delete it at any time by deleting the reports in the App or SEO Utils' data folder.

11. Security

We use encrypted connections (HTTPS) for all traffic between the App, our servers and the services it connects to. We limit who at Oh My Link can access our systems, and we hash link passwords. No method of storage or transfer is completely secure, so we cannot guarantee absolute security. Please protect your computer and your backups, since that is where most of your SEO Utils data lives.

12. International transfers

Oh My Link is based in the United States, and our service providers may process information in the United States and other countries. When we transfer personal information from the European Economic Area or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

13. Children

The Services are for businesses and professionals and are not directed to children under 16. We do not knowingly collect personal information from children.

14. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above, and if a change is material we will tell you in advance by email or in the App.

15. Contact us

Questions or requests about privacy? Email phuc@ohmylink.app or write to Oh My Link, 420 W Smith St, Apt 323, Kent, WA 98032, USA.