Privacy Policy

Last updated: 3 August 2026

This Privacy Policy explains how LLMs SEO2GEO processes personal data when providing the website, SEO analyser, crawler, customer area, and contact channels under Regulation (EU) 2016/679 (GDPR) and Portuguese Law No. 58/2019.

1. Controller and contact

StarLove Creative Studio, Unipessoal Lda, Portuguese tax identification number 518 587 835, the entity operating the LLMs SEO2GEO service, is responsible for the processing described in this policy. For privacy questions, rights requests, or crawler domain exclusion, use our Contact Page or email [email protected].

2. Data we process

• Account: name, email, protected credentials, preferences, service tier, and account-related history.
• Contact and support: name, email, subject, message, and information needed to answer the request.
• Website analysis: the submitted URL and public content returned by the website, which may include URLs, text, titles, metadata, headings, and structured data. Although public, this content may include third-party personal data.
• Results: generated files, scores, detected issues, metrics, keywords, and summaries of analysed pages.
• Technical and security data: IP address, User-Agent, access logs, response codes, timestamps, session identifiers, and events needed to prevent abuse and diagnose failures.
• Analytics: browsing data collected by Google Analytics only after any required consent.

We do not attempt to access authenticated areas of an analysed website. Crawler data originates from a URL submitted by a user and publicly accessible pages on that domain. See our crawler page.

3. Purposes and legal bases

We process this data to:

• provide analysis, generate files, and manage accounts, as necessary to perform the requested service;
• answer contact and pre-contractual requests;
• protect the platform, limit abuse, diagnose errors, and improve reliability, based on our legitimate interest in operating a secure service;
• analyse website usage, based on consent where required;
• comply with legal duties and establish, exercise, or defend legal claims.

Public content collected by the crawler is processed to produce the requested analysis. Where it includes third-party personal data, we rely on our legitimate interest in providing the technical analysis, limited to public content and subject to the right to object. Anyone submitting a URL must comply with the Terms of Service.

4. Recipients and providers

We may use hosting, storage, email, monitoring, and security providers acting under our instructions. Depending on the feature used, we also use:

• Google Analytics (Google LLC): usage statistics, only after consent;
• Google Gemini (Google LLC): keyword expansion and clustering in SEO Intelligence;
• Google Ads (Google LLC): keyword metrics and ideas in SEO Intelligence.

We do not sell collected content or use it to train models. We do not disclose data to third parties for our own behavioural advertising.

5. International transfers

Some providers may process data outside the European Economic Area. Where applicable, we rely on an adequacy decision, the EU–US Data Privacy Framework for certified entities, or Standard Contractual Clauses with appropriate supplementary measures. You may request information about the applicable safeguard through our privacy contact.

6. Retention

Different periods apply according to purpose:

• a technical crawl cache may be reused for 24 hours;
• directories containing generated files become eligible for deletion after 4 hours; because cleanup runs every four hours, they may remain for approximately 8 hours, unless replaced earlier by a new analysis of the same domain;
• reports, summaries, metrics, and history associated with an analysis or account may be retained while needed to provide the result and history, until a valid erasure request or a shorter operational period is defined;
• contact requests and technical logs are kept only as long as needed for support, security, legal compliance, and the defence of claims.

Reports may include URLs, titles, metadata, and results, but not a permanent full copy of every page. The result page uses a shareable address: anyone who receives that link can view the report. Where a fixed period cannot be stated, we decide based on purpose, the user relationship, legal duties, and the need to defend claims.

7. Cookies

We use essential session, security, and preference cookies. Google Analytics 4 is loaded only after the analytics category is accepted and may set these first-party cookies:

• _ga: distinguishes visitors to produce aggregate statistics; default lifetime of up to 2 years;
• _ga_Z60YZPSTYB: retains session state for the GA4 property; default lifetime of up to 2 years.

Browsers may enforce shorter periods. You can accept or reject analytics in the banner. To change a saved choice, select Cookie Settings in the footer, choose again, and delete existing cookies in your browser settings if you want them removed immediately. Withdrawal prevents new collection but does not affect earlier processing.

The tables below identify the cookies currently configured by category. The consent preference is retained for 30 days; session and CSRF cookies follow the configured session lifetime.

8. Rights

You may request access, rectification, erasure, restriction, portability, or object to processing where those rights apply. You may withdraw consent at any time. We generally respond within one month and may request reasonable information to verify identity and locate the data without collecting more than necessary.

You may lodge a complaint with the Portuguese Comissão Nacional de Proteção de Dados (CNPD) at cnpd.pt. If public content about you was included in an analysis, identify the domain and relevant URLs in your request.

9. Security and children

We apply appropriate technical and organisational measures, including access controls, credential protection, and abuse limits. No system is absolutely secure. The service is not directed at children under 16, and we do not knowingly collect children's data through accounts.

10. Changes

We may update this policy to reflect changes in the service or law. We will show the revision date and use an appropriate notice for material changes.