Privacy policy

This policy describes how seotudong.com collects, uses and protects your data when you use the service.

This is an English translation provided for convenience. If it differs from the Vietnamese version, the Vietnamese version prevails.

1. Data we store

Account: the email address you sign in with (one-time links, no password stored), and the workspace name and logo you set.

Websites: domain, platform, WordPress address or webhook endpoint, category list and the tone settings you configure.

Google Search Console: when you choose to connect, seotudong requests read-only access (webmasters.readonly) and your Google account email address. We read the list of properties so you can pick one, the search performance data (queries, pages, clicks, impressions, positions) of the selected property, and the index status of articles you publish through seotudong. If you also turn on Allow sitemap submission in Settings, seotudong requests the webmasters scope and uses it only to submit the sitemap URL you entered to Search Console (when you click submit and after each article is published); apart from that we never change anything in your Google account or Search Console. Your Google account email is used only to show which account is connected.

Content: keywords, plans, articles generated by the system and edited by you, cover images, publishing logs and emails.

Payments: order code, amount, time and the transaction ID reported by SePay. We never receive your bank account number or card details.

2. How the data is used

Only to run the features you ask for: keyword research, AI article writing, publishing, index and rank tracking, weekly report emails and member invitations. Article content and research facts are sent to AI model providers and web search services to create articles.

Data from Google: Search Console data is shown only to members of your workspace and used to build plans and articles for that same website. Keywords and page URLs from Search Console may be sent to our AI model provider solely to create titles and articles for you; this data is not used to train AI models. We do not sell it, use it for advertising, or share Google data with third parties other than the infrastructure providers needed to run these features. seotudong staff do not read this data unless you agree, to handle a security incident, or when required by law.

seotudong.com's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. Protecting connection credentials

WordPress Application Passwords, webhook secrets and Google access tokens are encrypted (AES-256-GCM) before storage, decrypted only on our servers when an action runs, and never displayed again. All data is permissioned per workspace at the database level; members only see websites in their own workspace.

4. Storage and deletion

Data is stored on Supabase and Vercel infrastructure. You can disconnect Google Search Console (seotudong revokes access on Google's side as soon as you disconnect, unless the same Google account is still connected to another of your websites; you can also remove access yourself at myaccount.google.com/permissions), delete a website (removing all of its keywords, articles, metrics and connections) in Settings at any time, and export metrics as CSV from the Reports page. When a plan expires, your data is kept on the free plan. To delete your whole account, send a request to hotro@seotudong.com; we process it within 7 business days.

5. Email

We send sign-in emails, workspace invitations, weekly reports (which you can turn off in Settings or with the unsubscribe link in the email) and notices about payments and plans. No marketing emails.

6. Contact

Any question about personal data: hotro@seotudong.com.

Support requests you send (name, email, conversation) are stored so the team can reply and look them up later. Live chat is provided by tawk.to: when you chat, your messages, IP address, browser and the page you are viewing are sent to tawk.to; if you are signed in, your account name and email are sent too so we know who we are talking to.