Privacy Policy
Last Updated: 2025-11-20
At BlogShoot ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at www.blogshoot.com and app.blogshoot.com.
Important: We use Google Search Console data solely for displaying SEO metrics to you. We do not sell, share, or use your GSC data for any other purpose.
1. Information We Collect
1.1 Information You Provide
- Account Information: When you create an account, we collect your email address, name, and Google account information through OAuth authentication.
- Workspace Information: Website URLs, WordPress connection details, and content preferences you provide during setup.
- Payment Information: Payment details are processed securely through Stripe. We do not store your complete credit card information.
1.2 Google Search Console Data
When you connect your Google Search Console account, we collect and process:
- Site verification data: List of websites you have access to in Google Search Console
- Index coverage data: Number of pages indexed, indexing errors, and coverage statistics
- Sitemap data: Sitemap submission status and statistics
- Search analytics data: Page URLs, impressions, clicks, and position data (read-only)
How We Use GSC Data: This data is used exclusively to display SEO monitoring dashboards and index statistics within your BlogShoot account. We do not:
- Sell or share your GSC data with third parties
- Use your GSC data for advertising purposes
- Modify or write any data to your Google Search Console account
1.3 Automatically Collected Information
- Usage Data: Information about how you interact with our service, including pages visited, features used, and time spent.
- Device Information: Browser type, operating system, IP address, and device identifiers.
- Cookies: We use cookies and similar technologies to maintain your session and improve user experience.
2. How We Use Your Information
We use the collected information for the following purposes:
- Service Delivery: To provide, maintain, and improve our SEO content generation and monitoring services
- SEO Analytics: To display your website's Google indexing status, coverage rate, and search performance metrics
- Authentication: To verify your identity and manage your account access
- Communication: To send you service updates, technical notices, and support responses
- Payment Processing: To process subscriptions and manage billing
- Service Improvement: To analyze usage patterns and improve our features
- Security: To detect, prevent, and address technical issues or fraudulent activity
3. Data Storage and Security
3.1 Data Storage
- Location: Your data is stored on secure servers located in [specify region, e.g., "the United States and Europe"]
- Encryption: Sensitive data, including OAuth tokens and API credentials, are encrypted at rest using AES-256 encryption
- Access Control: Access to your data is restricted to authorized personnel only
3.2 Google OAuth Tokens
We securely store your Google OAuth access tokens and refresh tokens to maintain your Google Search Console connection. These tokens are:
- Encrypted using industry-standard AES-256 encryption
- Used only to access Google Search Console data on your behalf
- Automatically refreshed when expired
- Deleted immediately when you disconnect your Google Search Console integration
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following circumstances:
4.1 Service Providers
- Google APIs: To access Google Search Console data on your behalf (read-only access)
- Stripe: For payment processing (PCI DSS compliant)
- Cloud Infrastructure: For hosting and data storage (AWS, Alibaba Cloud, or similar)
4.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities.
4.3 Business Transfers
If BlogShoot is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
5. Your Rights and Choices
5.1 Access and Update
You can access and update your account information at any time through your account settings.
5.2 Data Deletion
You can request deletion of your account and associated data by contacting us at [email protected]. Upon request, we will:
- Delete your account and profile information
- Remove all stored OAuth tokens and credentials
- Delete your Google Search Console connection data
5.3 Google Search Console Disconnection
You can disconnect your Google Search Console account at any time through the Integrations page. This will immediately:
- Revoke our access to your Google Search Console data
- Delete all stored OAuth tokens
- Remove cached GSC data from our systems
5.4 Opt-Out of Communications
You can opt out of marketing communications by clicking the "unsubscribe" link in our emails or updating your preferences in account settings.
6. Google API Services User Data Policy
BlogShoot's use of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We only request access to Google Search Console data (webmasters.readonly scope)
- We use this data solely to provide SEO monitoring features to you
- We do not use Google data for serving advertisements
- We do not allow humans to read your Google data unless necessary for security purposes, compliance with applicable law, or with your explicit consent
7. Data Retention
We retain your information for as long as your account is active or as needed to provide services. We will delete or anonymize your information within 30 days of account deletion, except where:
- Required by law to retain (e.g., tax records)
- Necessary to resolve disputes or enforce agreements
- Aggregated and anonymized for analytics (no personally identifiable information)
8. Children's Privacy
BlogShoot is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will delete such information.
9. International Data Transfers
If you are accessing BlogShoot from outside [your primary region], please note that your information may be transferred to, stored, and processed in regions where our servers are located. By using our service, you consent to such transfers.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date
- Sending you an email notification (for significant changes)
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: [email protected]
- Website: www.blogshoot.com
Summary: We respect your privacy. Your Google Search Console data is used only to show you SEO insights. We never sell your data or use it for advertising. You can disconnect and delete your data at any time.