Loading content...
Legal
Last updated: April 2026
We collect the following information when you use MCP SEO Ranking: your email address and password (for authentication via Supabase Auth); SEO project data you create, including keywords, rankings, audit results, blueprint progress, content calendars, and competitor lists; usage data such as pages visited, features used, and timestamps; and, if you connect Google Search Console, your search performance data (queries, clicks, impressions, positions) via OAuth 2.0 with read-only access.
We use your data exclusively to provide and improve the MCP SEO Ranking platform. Specifically: your email is used for authentication and account-related communications; your project data is used to power the SEO tools, generate reports, trigger alerts, and track blueprint progress; usage data helps us understand how the platform is used so we can improve performance and features. We do not sell your data to third parties. We do not use your project data for training AI models.
MCP SEO Ranking relies on the following third-party services (GDPR Article 28 sub-processors) to operate: Supabase (PostgreSQL database, authentication); Vercel (hosting, scheduled tasks); DataForSEO (SERP data, keyword volumes, difficulty scores, backlink profiles); Google Search Console (your search analytics data, only when you explicitly connect via OAuth); Google Gemini API (AI-generated embeddings + featured-image generation for content briefs); PostHog (product analytics + optional session replay, opted-in via cookie banner); Sentry (error tracking and performance monitoring of the application itself, may capture stack traces containing technical context but inputs are scrubbed); Resend (transactional email delivery from hello@mcpseoranking.com). Each provider processes data under their own privacy policies. We only share the minimum data necessary for each service to function.
We use essential cookies to maintain your authentication session -- these are required for the platform to work. We may also use optional analytics cookies to understand usage patterns. You can accept or decline analytics cookies through the banner shown when you first visit the site. Essential cookies cannot be disabled as they are necessary for basic functionality.
We retain your data for as long as your account is active. If you request account deletion by emailing support@mcpseoranking.com, all your project data is permanently removed from our servers within 30 days. Backups may retain deleted data for up to 30 additional days before being purged. Usage analytics are aggregated and anonymized after 90 days. Self-service account deletion via the Settings page is in development; the Settings 'Delete Account' control is currently disabled and points users to email support.
You have the right to: access all data associated with your account; export your data in JSON format by emailing support@mcpseoranking.com (the in-app /api/urls/export endpoint covers URL data only — full-account JSON export is by request); request correction of inaccurate data; request deletion of your account and all associated data by contacting support@mcpseoranking.com. We process data access and deletion requests within 30 days, in line with GDPR Articles 15, 17 and 20.
We take data security seriously. All data is encrypted in transit using TLS. Your database is protected by Supabase Row Level Security (RLS) policies on every table, ensuring users can only access their own data. API keys use the msr_ prefix and are stored as SHA-256 hashes -- we never store your raw API key. Rate limiting (30-60 req/min) and SSRF protection are enforced on all API routes. Input validation via Zod is applied to every API endpoint.
If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your data is: legitimate interest for platform operation and security, and consent for analytics cookies and Google Search Console integration. You can withdraw consent at any time. You have the right to data portability, the right to be forgotten, and the right to lodge a complaint with your local data protection authority. Our database is hosted in the EU (eu-central-1 region).
For privacy-related questions, data access requests, or deletion requests, contact us at support@mcpseoranking.com.