Helix SEO — Privacy Policy

This is the privacy policy for Helix SEO, an internal, read-only analytics tool. See the About page for what Helix SEO is.

Last updated: August 24, 2026

Data We Access

• Google Search Console data (search queries, clicks, impressions, indexing status) via the read-only webmasters.readonly scope
• Bing Webmaster Tools data via a read-only API key
• Google Analytics 4 data (sessions, landing pages, traffic source/medium, conversions) via the read-only analytics.readonly scope and the Analytics Data API's runReport method

Access is limited to properties the operator owns and has directly authorized. No data is ever written, modified, or deleted on any connected platform.

How We Use This Data

Data is imported into a private, local dashboard used only by the operator for internal SEO and marketing reporting on the operator's own websites. It is not used to build user profiles, not used for advertising or personalization, and not used for any purpose beyond the operator's own reporting.

Data Sharing

We do not sell this data. We do not share it with any third party. It never leaves the operator's own local infrastructure.

How We Protect This Data

• All connections to Google, Bing, and Analytics APIs use encrypted HTTPS/TLS — data is never transmitted in plaintext.
• OAuth credentials and refresh tokens are stored as environment-scoped secrets on the operator's own private infrastructure. They are never committed to source control, logged, or exposed on any public-facing endpoint.
• Access to the dashboard and the underlying data is restricted to the operator alone — there are no shared logins, no multi-user access, and no public deployment of this tool.
• Imported data is stored only on the operator's own private, non-public infrastructure, not in a third-party or publicly reachable database.

Data Retention

Data is retained locally for as long as needed for ongoing SEO and marketing reporting, and is deleted when no longer needed for that purpose.

Revoking Access

Because all connected accounts are owned by the same operator who runs Helix SEO, access can be revoked at any time directly through each platform's own account security settings (for example, Google Account → Security → Third-party access).

Contact Us

Questions about this policy can be sent to info@helix-seo.com.