ActionSEO Privacy Policy

Data controller: Franco & Yamakawa Consultoria LTDA

CNPJ: 18.079.282/0001-20

Registered office: Rua Venezuela, 187, Jardim do Trevo, Campinas, State of São Paulo, Brazil

Privacy and legal contact: contact@yourseoebook.com

Effective date: 20 July 2026

Version: 1.13.52

This Privacy Policy explains how ActionSEO, a hosted SEO workflow platform operated by Franco & Yamakawa Consultoria LTDA, accesses, uses, stores, protects, shares and deletes personal data. It applies specifically to the ActionSEO application, its website pages, account area and connected services.

1. Scope and roles

“ActionSEO”, “we”, “us” and “our” mean Franco & Yamakawa Consultoria LTDA. “User”, “customer”, “you” and “your” mean the individual or organisation using ActionSEO.

For account, billing, security, support and direct service administration, ActionSEO generally acts as data controller. When an agency or business customer submits or connects data relating to its clients, staff or end users, that customer may act as controller and ActionSEO may act as processor or operator under the customer’s lawful instructions.

2. Personal data we process

Depending on how you use ActionSEO, we may process:

• Account data: name, email address, username, account identifiers, authentication records and language preferences.
• Billing and order data: company name, country, tax identifier, purchase, currency, payment and invoice status. Payment-card details are handled by payment providers and are not intentionally stored by ActionSEO.
• Project data: domains, URLs, target countries, devices, content language, business goals, keywords, competitors, notes, saved reports and project settings.
• Website audit data: publicly available page content, technical signals, page titles, metadata, structured data, link information, affected URLs, crawl results and issue evidence.
• Connected Google data: authorised Google Search Console and Google Analytics 4 properties and read-only reporting data, as described in Section 4.
• Support data: support messages, troubleshooting information and files you choose to provide.
• Usage and security data: timestamps, logs, user agent, IP-derived security records, consent evidence, feature usage and error information.
• Marketing preferences: only where you separately choose to receive optional product or educational communications.

3. Why we process data

We process personal data to:

• create, authenticate and administer ActionSEO accounts;
• provide the functions requested by the user, including audits, projects, keyword tracking, competitor analysis, reports and Google data dashboards;
• process orders, access periods, renewals, taxes and fiscal documents;
• connect authorised third-party services;
• provide support and communicate essential service, billing and security information;
• protect the service, prevent abuse, investigate incidents and maintain reliability;
• comply with legal, tax, accounting, consumer, judicial and regulatory obligations;
• establish, exercise or defend legal claims;
• improve user-facing features using appropriately minimised information; and
• send optional marketing only where a valid legal basis exists and the user has not opted out.

Under the Brazilian General Data Protection Law (LGPD), processing may rely on performance of a contract or preliminary procedures, compliance with legal obligations, legitimate interests subject to appropriate balancing, exercise of rights, fraud prevention and consent where consent is the appropriate basis.

4. Google API data accessed by ActionSEO

Connecting Google services is optional. ActionSEO requests access only after the user selects the relevant connection function and completes Google’s OAuth authorisation process.

4.1 Google OAuth scopes

ActionSEO requests the following read-only scopes:

• https://www.googleapis.com/auth/webmasters.readonly for Google Search Console;
• https://www.googleapis.com/auth/analytics.readonly for Google Analytics 4.

ActionSEO does not request permission to modify Search Console or Google Analytics properties.

4.2 Google Search Console data

When authorised by the user, ActionSEO may access:

• verified or authorised Search Console properties;
• property, sitemap and related metadata;
• URL inspection or indexing information where made available by Google;
• search-performance data, including queries, pages, dates, countries, devices, search appearance, clicks, impressions, click-through rate and average position.

4.3 Google Analytics 4 data

When authorised by the user, ActionSEO may access:

• authorised Analytics accounts and properties;
• property metadata;
• aggregate organic-performance reports, including dates, landing pages, sessions, active users, engaged sessions, engagement rate, events or key events, purchases, revenue, countries, devices and traffic-channel information selected for the ActionSEO report.

4.4 How ActionSEO uses Google data

ActionSEO uses Google user data only to provide or improve the user-facing functions requested by the authorised user. These functions may include displaying dashboards, matching keywords to pages, identifying SEO opportunities, creating missions, comparing stored periods and generating reports inside ActionSEO.

ActionSEO does not use Google user data for:

• targeted, personalised, interest-based or retargeted advertising;
• creating advertising profiles or remarketing audiences;
• selling data or providing it to data brokers or information resellers;
• credit-worthiness, lending or insurance decisions;
• unrelated databases, surveillance or profiling;
• training artificial-intelligence or machine-learning models.

ActionSEO’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4.5 Storage and protection of Google data

Google OAuth tokens and imported reports are transmitted over HTTPS. ActionSEO uses access controls, authentication, protected storage, application-level security controls, logging, backups, input validation, rate limiting and security updates to protect connected data. OAuth credentials are stored using protected application storage and encryption where configured and technically supported.

Imported Search Console and GA4 reports may be stored in the ActionSEO database so that the authorised user can view historical dashboards, comparisons, missions and reports. Access is restricted to the relevant ActionSEO account and authorised project users.

4.6 Sharing and human access to Google data

We do not sell Google user data.

Google user data is not shared with advertising platforms, data brokers, information resellers, email-marketing providers, payment processors, SEO or SERP-data providers, or AI-model providers.

Infrastructure providers may process protected data only to the extent necessary to host, store, back up, maintain or secure ActionSEO. They may not use that data for their own advertising, profiling or independent purposes.

ActionSEO personnel or contractors do not manually access Google user data except where:

• the user has requested support and authorised the necessary review;
• access is necessary to investigate a security incident, abuse or service failure; or
• access or disclosure is legally required.

4.7 Disconnecting and deleting Google data

You may disconnect Google Search Console or Google Analytics 4 from inside ActionSEO at any time. The ActionSEO disconnect control removes the stored authorisation for the selected provider and deletes the imported provider snapshots associated with the selected project.

You may also revoke ActionSEO’s access through your Google Account permissions. Revoking access through Google stops future access but may not by itself delete information already stored in ActionSEO. To delete stored ActionSEO data, use the ActionSEO deletion controls or contact us.

5. Agency and client data

Agency and business customers must connect only properties and data that they are lawfully authorised to access. They are responsible for providing appropriate privacy notices and obtaining any required authority from their clients, employees or other data subjects.

Where ActionSEO processes personal data on behalf of a business customer, the parties may enter into a Data Processing Addendum.

6. Recipients and service providers

We may use service providers where necessary for:

• cloud hosting, storage, databases, backups and security;
• payment processing and fraud prevention;
• transactional email and customer support;
• Google OAuth and authorised Google integrations;
• fiscal-document generation, accounting and legal compliance;
• professional advice or lawful requests by authorities.

These providers may process only the information necessary for their assigned purpose and are subject to contractual, technical or organisational safeguards appropriate to their role.

A current list of material infrastructure subprocessors is available on request at contact@yourseoebook.com.

We do not sell personal data.

7. International transfers

ActionSEO serves international customers and may use providers located outside Brazil. International transfers are made using legally permitted mechanisms and appropriate contractual, technical and organisational safeguards. Where applicable law requires additional transfer terms, the parties may enter into an appropriate addendum.

8. Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including:

• active account and project data: for the active service relationship;
• read-only grace period: up to 30 days after expiry where enabled;
• archived project data: up to 12 months after expiry, unless renewed or deleted earlier;
• Google OAuth tokens: only while needed for an authorised connection, unless removed earlier by disconnection or revocation;
• Google report snapshots: while needed for the active project or until deleted through disconnection, project deletion, account-level ActionSEO data deletion or a valid deletion request;
• order, tax and fiscal records: for the period required by applicable law;
• contract and consent evidence: for applicable limitation and legal-retention periods;
• security logs: for a proportionate period based on risk and investigation needs;
• support records: while needed for service, quality control, security and legal claims;
• optional marketing data: until opt-out or another applicable deletion event.

Information may be retained longer where required for tax, accounting, fraud prevention, security, legal claims or other legal obligations. Data no longer needed will be deleted, anonymised or isolated.

9. Export, deletion and account controls

Where available, ActionSEO provides an export of project and account-related ActionSEO data in a structured format. Exports exclude passwords, payment-card information, Google access or refresh tokens, encryption keys and other security credentials.

The “Delete my ActionSEO data” control deletes stored ActionSEO projects, audits, keywords, reports, connected Google data and Google authorisation records associated with the user’s ActionSEO workspace. It does not automatically delete the separate WordPress or store account.

You may also request access, export or deletion by contacting contact@yourseoebook.com. We may need to verify your identity before completing a request.

10. Security

We use proportionate technical and organisational safeguards, including access restrictions, authentication, HTTPS, protected storage, encryption where supported, logging, backups, input validation, rate limiting, software updates and incident-response procedures.

No internet service is completely risk-free. Users must protect their credentials and promptly report suspected compromise.

11. Your rights

Subject to applicable law, including the LGPD, you may request:

• confirmation of processing and access to personal data;
• correction of incomplete, inaccurate or outdated data;
• anonymisation, blocking or deletion of unnecessary, excessive or unlawfully processed data;
• information about sharing and recipients;
• data portability where legally applicable and technically feasible;
• withdrawal of consent where processing relies on consent;
• opposition where legally available;
• review of certain automated decisions where applicable;
• information about the consequences of refusing consent.

To exercise a right, contact contact@yourseoebook.com. You may also have the right to complain to the Brazilian National Data Protection Authority or another competent supervisory authority.

12. Website cookies and separation from Google API data

The yourseoebook.com website may use necessary, analytics or marketing cookies as described in the website’s general cookie and privacy notices.

Website analytics and advertising cookies relate only to visits to yourseoebook.com. Data obtained through the Google Search Console and Google Analytics APIs is not combined with advertising profiles, remarketing audiences, Google Ads data or marketing-cookie identifiers.

13. Children

ActionSEO is a business and professional SEO service and is not directed to children. We do not knowingly request children’s personal data through Google integrations.

14. Changes to this Policy

We may update this Policy to reflect legal, security, technical or product changes. The current version and effective date will remain available on this page. Where a material change affects how Google user data is used, we will provide appropriate notice and obtain additional consent where required.

15. Contact

Questions, privacy requests and Google data requests may be sent to:

Franco & Yamakawa Consultoria LTDA
Rua Venezuela, 187, Jardim do Trevo
Campinas, State of São Paulo, Brazil
Email: contact@yourseoebook.com

Related pages: ActionSEO home · ActionSEO Terms of Service and SaaS Licence