Privacy policy

Ultra SEO is invite only. A person can sign in only if a workspace owner has invited their email address. It is a business tool and is not directed to children.

Account details. When you sign in with Google we receive your name, email address and profile picture. We use them to identify you, show who approved a change, and control access to a workspace.

Data from accounts you connect. A workspace owner chooses which accounts to connect. From each one we read only what the product needs:

• Google Ads: campaigns, ad groups, ads, keywords, negative keywords, search terms, and daily performance such as impressions, clicks, cost and conversions.
• Google Analytics: daily sessions, users, key events and revenue, grouped by channel, source and medium. We do not read data about individual visitors.
• Shopify: orders (totals, dates, products and traffic source) and the product catalog. We do not store customer names, emails, phone numbers or addresses.
• Meta Ads: campaigns, ad sets, ads and performance.

Connection credentials. Access and refresh tokens for connected accounts are encrypted before they are stored and are used only on our servers.

Activity records. We keep an audit log of sign-ins, connections, proposals, approvals and applied changes.

Cookies. We use only the cookies needed to keep you signed in and to complete a connection. We do not use advertising or tracking cookies.

• To show the workspace its own performance in dashboards and reports.
• To analyze that performance and draft recommended changes for the workspace to review.
• To apply a change to a connected account after a person with the right role approves it, or under an automatic rule the workspace owner has switched on.
• To keep the service secure and to fix problems.

We do not sell personal information. We do not use connected-account data for advertising, and we do not use it to build profiles of individuals.

A site owner can add Ultra's script to their website to connect store orders with the ads that led to them. When it runs, the script stores a random visitor id in the browser's storage. It sends Ultra that id, the ad click id, the page address and the referring page address (both without query strings) and the campaign tags from the link, and it reports the shopping cart's id to Ultra so an order can be matched. Only if the site owner turns on cart tagging does it also add the visitor id to the shopping cart.

The script does nothing when Global Privacy Control or Do Not Track is on. It never collects names, email addresses, phone numbers or addresses. We delete visit records after 120 days. When the site owner turns it on, we report the ad click id and the order's number, value, currency and time to Google Ads so the sale can be counted against the ad.

Ultra SEO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, data received through Google APIs is used only to provide and improve the features described here. It is not transferred to others except as needed to provide those features, to comply with the law, or as part of a merger or sale with notice to you. It is not used for advertising. People at ITD do not read it unless you ask us to for support, it is needed for security, or the law requires it.

Google data is not used to develop, improve or train generalized artificial intelligence or machine learning models.

We rely on a small number of providers to run Ultra SEO. Each one processes data only on our instructions:

• Supabase, for the database and sign-in.
• Netlify, for hosting and scheduled jobs.
• Anthropic, whose Claude models analyze a workspace's performance data to draft recommendations. Data sent for analysis is not used to train their models.
• Resend, for invitation and report emails.

Google, Meta and Shopify are the sources of connected-account data and receive the changes a workspace approves.

We keep workspace data for as long as the workspace is active. A workspace owner can disconnect any account on the Connections page, which deletes that account's stored credentials and the data synced from it.

You can also withdraw access at the source, for example at myaccount.google.com/permissions for Google.

To delete your user account or an entire workspace, email basil@tiedisposal.com. We complete deletion requests within 30 days.

Data is encrypted in transit and at rest. Connection credentials are additionally encrypted by the application. Access to a workspace is limited to the people its owners invite, and is enforced by the database for every request.

You can ask for a copy of your personal information, ask us to correct it, or ask us to delete it by emailing basil@tiedisposal.com.

If we change this policy we will update the effective date above, and we will tell workspace owners by email before a material change takes effect.

Questions about this policy go to basil@tiedisposal.com.