Privacy policy
Last updated: 6 October 2026
Who we are
Seoga is a service operated by LVS TECHNOLOGIES (registration number 202103242933), 23A, The Ascent, Kelana Jaya, Malaysia ("Seoga", "we", "us").
For anything about your personal data, write to privacy@getseoga.com. For other questions: support@getseoga.com.
We are the data user (under Malaysian law) and the controller (under European law) for the personal data described here.
The short version
- You can scan a website without giving us anything about yourself.
- If you want your report emailed, or a free account, we ask for one thing: your email address.
- We don't sell your data, show ads, or use advertising or analytics cookies.
- You can delete your account and data yourself, at any time, from your account page.
What we collect, and why
When you scan a website (no account)
| What | Why | How long |
|---|---|---|
| The website address you enter | To check that website | Kept as part of the report (see "Reports") |
| What our checker finds on that website's public pages: titles, text, links, structured data, speed, settings, and public business details shown on the site | To build the report | Kept as part of the report |
| Your IP address, turned into a one-way code (we store the code, never the address) | To limit free scans and stop abuse | 30 days |
| A human check by Cloudflare Turnstile | To stop automated abuse | Handled by Cloudflare (see "Who else handles data") |
Our checker, SeogaBot, reads only public pages of the website you asked about. How much it reads depends on the scan:
| Scan | Pages it reads | Opened in a browser | When |
|---|---|---|---|
| Quick check on getseoga.com (no account) | The home page, up to 5 more pages from the site's sitemap, and the contact and policy pages it links to | No | When you start it |
| Basic scan | Up to 25 pages | No | When you start it |
| Full scan | Up to 100 pages | The home page and the 5 most important pages | When you start it |
| Advanced scan | Up to 500 pages | The home page and the 20 most important pages | When you start it |
| Automatic check of a website in a free account | Up to 25 pages (a Basic scan) | No | Automatically, once a month, until you remove the website |
| Automatic check of a website on Starter | Up to 100 pages (a Full scan) | The home page and the 5 most important pages | Automatically, every week, until you remove the website |
| Automatic check of a website on Pro or Business | Up to 500 pages (an Advanced scan) | The home page and the 20 most important pages | Automatically, every week, until you remove the website |
Every scan also reads the site's public robots.txt and sitemap files. SeogaBot only follows links within that website, never logs in, and never reads pages that need a password. "Opened in a browser" means it loads the page the way a visitor's browser does, to see what appears after the page's scripts run. It follows the site's robots.txt, including any crawl delay, and limits how fast it asks. To stop the automatic checks, remove the website from your account.
When you ask us to email your report, or open a free account
| What | Why | How long |
|---|---|---|
| Your email address | To send the report you asked for, sign you in, and identify your account | Until you delete your account |
| Single-use sign-in links | To sign you in. Each works once, for 15 minutes | Deleted within a day of expiring |
| A sign-in session: a random code in a cookie, the time, and your browser's name | To keep you signed in | Up to 30 days, or until you sign out |
| The reports you saved | To show them in your account | Until you remove them or delete your account |
| "Tell me when it opens" requests | To email you once that feature is available | Until you delete your account |
| A security log of sign-ins and account changes, with a one-way code of your IP address | Security and fraud prevention | 12 months |
We only send you emails you asked for: the report, sign-in links, security notices about your account, and the "it's open" notice if you asked for one. We send no marketing email.
If an email to you bounces permanently or you mark it as spam, our email provider tells us and we record your address on a do-not-send list, so we never email it again. That list is kept for as long as we send email, because it exists to protect you.
Signing in with Google (once available)
If you choose "Continue with Google", Google sends us your name, email address and Google account ID, so we can create your account and sign you in. We do not receive your Google password.
Connecting Google Search Console
If you connect Google Search Console, we read, for the websites you choose, the search performance data Google holds about them: the searches your pages appeared for, impressions, clicks, average positions, and which pages are indexed, including Google's own report on how it sees a page you ask us about. The connection is read-only: we cannot change anything in your Search Console.
Connecting Google Analytics
If you connect Google Analytics, we read, for the properties you choose, the visitor figures Google holds about them: visits, where they came from, which pages they viewed and, where you have set them up, conversions. The connection is read-only. We use the figures to show your visits beside your scores and in your monthly report.
Connecting your Google Business Profile
If you connect your Google Business Profile, we read the business details Google holds for the locations you choose: name, address, phone, opening hours, categories and the figures Google shows you about them. We use them to check that your details match your website, because AI tools and Google rely on them. We do not change your profile unless you approve a specific change.
For all three connections you choose what to connect, you can disconnect at any time (and at myaccount.google.com/permissions), and when you disconnect we delete the data we received from Google within 30 days.
Reports
A report describes a public website, not a person. We keep every scan, with its date and results, so a website's progress can be shown over time. Large raw speed-test data is deleted after 90 days; the scores and check results stay.
Each report has a private link. Anyone you give the link to can see that report (without the solutions, which need an account). Share it only with people you want to see it.
If you delete your account, your email and everything tied to you are removed, and the reports stay only as anonymous history of the website.
Google user data
We use data we receive from Google (sign-in, Search Console, Analytics and Business Profile) only to provide the Seoga features you can see in your account: signing you in, and showing how your website performs on Google search, how that changes, and what to fix.
- We do not sell Google user data, or share it with anyone, except the service providers that run Seoga for us under contract, and only as needed to provide Seoga to you, or where the law requires it.
- We do not use Google user data for advertising.
- We do not use Google user data to develop, improve or train general artificial intelligence or machine learning models.
- People at Seoga do not read your Google user data unless you ask us to (for example in a support request), it is needed for security reasons, or the law requires it.
Limited Use. Seoga's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can remove Seoga's access to your Google account at any time at myaccount.google.com/permissions. When you disconnect Search Console or delete your account, we delete the Google data we received within 30 days.
Cookies
| Cookie | Where | What for |
|---|---|---|
| `__Host-sg_sid` | app.getseoga.com only | Keeps you signed in. Strictly necessary. |
| Cloudflare security cookies (for example `__cf_bm`, `cf_clearance`) | Our sites | Set by Cloudflare to protect the site from abuse. Strictly necessary. |
We use no analytics, advertising or tracking cookies.
Who else handles data for us
| Service | What it receives | Why |
|---|---|---|
| Cloudflare, Inc. (United States, worldwide network) | All visits to our sites, including your IP address, and the human check | Security, delivery and the human check |
| Google LLC (PageSpeed Insights, Chrome UX Report; sign-in and Search Console once available) | The address of the page being scanned; for sign-in, what Google sends us about you | Speed results; signing in; Search Console data |
| Amazon Web Services (Amazon SES, Singapore region) | Your email address and the emails we send you | Sending email, and telling us about bounces and spam reports |
| Titan Email | Your email address and the emails we send you | Sending email until Amazon SES takes over |
| Hostinger | Everything we store | Hosting our web server |
| Our database hosting provider | Everything we store | Hosting our database server |
Domain registries (RDAP), public DNS and Wikidata are asked about the scanned website's domain only, never about you.
When paid features launch, we will ask AI services (OpenAI, Anthropic, Google and Perplexity) and DataForSEO questions about the scanned business and its website. We'll update this policy before that happens and say exactly what is sent.
Transfers outside your country
Our service providers above process data in several countries, including Singapore, the United States and the countries where our servers and their networks are, so your personal data may be stored or processed outside the country where you live. When personal data leaves Malaysia, we only transfer it as the Personal Data Protection Act 2010 allows. When data from Europe or the United Kingdom is transferred to a country without an adequacy decision, we rely on the European Commission's standard contractual clauses (and the UK addendum) offered by our providers.
Your rights
Everyone
- Delete everything: sign in, open your account page, and choose "Delete my data". Your email, sessions and saved reports are removed at once; backups that still hold them expire within 30 days.
- See, correct or export your data, or stop us using it for a purpose: write to privacy@getseoga.com. We answer within 21 days.
- Withdraw consent: where we rely on your consent, you can withdraw it at any time; this doesn't affect what we did before.
Malaysia (Personal Data Protection Act 2010)
Malaysia is our home country, and the Personal Data Protection Act 2010 (as amended in 2024) applies to how we handle personal data. You have the right to access and correct your personal data, to withdraw consent, to ask us to stop processing that causes damage or distress, and to ask for your data to be transmitted to another data user where the law provides for it. If we have a data breach that is likely to cause significant harm, we notify the Personal Data Protection Commissioner and, where required, you. You can complain to the Personal Data Protection Commissioner of Malaysia (pdp.gov.my).
Europe and the United Kingdom (GDPR and UK GDPR)
Our legal bases are: performing the service you asked for (the scan, the emailed report, your account); our legitimate interest in keeping the service safe (IP codes, security logs, the human check, the do-not-send list); and your consent where we ask for it. You have the rights of access, rectification, erasure, restriction, portability and objection, and you can complain to the data protection authority where you live or work (in the UK, the Information Commissioner's Office). If you are in Europe or the United Kingdom, you can reach us about your personal data at privacy@getseoga.com.
India (Digital Personal Data Protection Act 2023)
We process your personal data for the purposes described above, which you agree to when you use Seoga, and you can withdraw that consent by deleting your account. You have the right to access a summary of your data, to correct and erase it, to nominate someone to exercise your rights if you can't, and to have your grievances answered. Write to privacy@getseoga.com; if you are not satisfied, you can complain to the Data Protection Board of India.
Security
Pages are served only over HTTPS. Sign-in links, sessions and IP addresses are stored only as one-way codes. Keys and database logins are encrypted. Customer data is separated per account and checked by automated tests. Backups are encrypted.
Age
Seoga is a service for businesses and is meant only for people aged 18 or over.
Changes
If we change this policy, we'll update the date at the top and email account holders about important changes before they apply.