Privacy Policy

SEOMedic is operated by Andrew Murray (sole developer).

Contact: hey@getseomedic.com

Website: https://getseomedic.com

Data stored on your WordPress site (never sent to us)

• —Plugin settings (API keys you've entered, prompt templates)
• —Post metadata (focus keyphrases, redirect targets, noindex flags)
• —Cached results from third-party APIs (GSC pages/queries data, link audit results, Keywords Everywhere search volumes, backlink counts)
• —A baseline snapshot of impressions / clicks / inbound links you optionally save for delta tracking

All of this is stored in your site's MySQL database via standard WordPress options and post meta. Uninstalling the plugin deletes this data.

Data sent to third parties on your behalf

When you use the plugin's integrations, your WordPress server makes outbound requests directly to:

We do not see, receive, or have access to any of this traffic. It goes directly from your server to those providers.

To connect your site to Google Search Console, the plugin sends users through an OAuth proxy app we operate at seomedic-auth.vercel.app. The proxy exists for one reason: Google requires a confidential client_secret during OAuth token exchange, and we cannot ship that secret in every WordPress plugin install. The proxy holds the secret server-side.

What the proxy does:

• —Receives the OAuth authorization code from Google after a user grants consent
• —Exchanges it for an access token and refresh token by calling Google's token endpoint with our client_secret
• —Redirects back to your WordPress admin URL with the tokens in the redirect URL
• —Future refresh requests follow the same pattern

What the proxy does NOT do:

• —It does not store the tokens, the code, the user's email, the WordPress site URL, or any other request data
• —It has no database, no logging of request bodies, and no telemetry
• —It is open source and auditable: https://github.com/andrewmurraytv/siteiq-auth

The proxy is hosted on Vercel. Vercel may log standard HTTP metadata (IP, timestamp, response code) per its own platform policies; we do not retain or analyse those logs.

The plugin requests the following Google OAuth scope when you connect Google Search Console:

We use this scope only to:

• —List the Search Console properties you've verified, so you can pick one in the plugin settings
• —Pull aggregated search performance data (impressions, clicks, CTR, position) for pages on that property
• —Display that data alongside your posts inside the WordPress admin UI

We do not:

• —Share Google user data with any third party
• —Transfer Google user data outside of your own WordPress server and our stateless OAuth proxy
• —Use Google user data for advertising
• —Use Google user data to train AI/ML models

If you disconnect Google Search Console via the plugin settings, the stored tokens are deleted from your WordPress database immediately.

• —Data on your WordPress site is retained until you delete it (uninstalling the plugin removes plugin settings, cached results, and stored OAuth tokens)
• —The OAuth proxy retains nothing
• —Third-party providers retain data per their own policies (linked below)

Because we don't collect or store your data, there's nothing for us to delete or export on our side. Data subject requests should be directed at the relevant third party:

• —Google Search Console / Google account: https://myaccount.google.com/data-and-privacy
• —Keywords Everywhere: https://keywordseverywhere.com/privacy.html
• —Anthropic: https://www.anthropic.com/legal/privacy
• —Freemius: https://freemius.com/privacy/
• —Ahrefs Web Analytics: https://ahrefs.com/privacy

To delete plugin data from your WordPress site, deactivate and uninstall the plugin.

If you use the plugin's integrations, the following third-party policies also apply:

• —Google: https://policies.google.com/privacy
• —Bing / Microsoft: https://privacy.microsoft.com/privacystatement
• —Keywords Everywhere: https://keywordseverywhere.com/privacy.html
• —Anthropic: https://www.anthropic.com/legal/privacy
• —Freemius: https://freemius.com/privacy/
• —Vercel (proxy host): https://vercel.com/legal/privacy-policy

The plugin is not directed at children under 13 and we do not knowingly collect data from them.

We'll update the "Last updated" date at the top when we make changes. Material changes will be announced via the plugin update changelog.

Questions, requests, or complaints: hey@getseomedic.com