What ZillionSEO is
ZillionSEO is a private portal that helps its owners and their team manage SEO, AI-answer visibility, website tracking tags and advertising for their own websites. It is not open to the public: people can only sign in after an Owner or Admin has added them.
Information we handle
- Account details of the people who use the portal: name, email address, role, and sign-in security data (such as two-step verification settings).
- Connections that you add on purpose: API keys and Google sign-ins for services such as Google Search Console, Google Analytics, Google Tag Manager and Google Ads. Keys and tokens are encrypted before they are stored, are never shown again after saving (only the last four characters), and are used only at the moment a request is made.
- Data from connected services, such as the list of your websites and properties, search and traffic statistics, tag configurations and ad account lists, kept so the portal can show reports and make the changes you ask for.
- Activity records (an audit log) of who changed what and when, and usage and cost records for paid API calls.
Google user data
ZillionSEO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We ask only for the Google permissions each feature needs: read-only access to Search Console and Analytics; Tag Manager access to view, edit and publish tags; Google Ads access to manage ad accounts you connect.
- We use Google data only to provide the features you see in the portal. We do not sell it, do not use it for advertising of our own, and do not use it to train AI models.
- People can read Google data only if they have been given access to the relevant website inside the portal.
- You can disconnect Google at any time from the API Center (revoke) and from your Google Account permissions page. Revoking wipes the stored token.
Sharing
We do not sell personal information. Data is shared only with the services you connect (for example, sending a request to an API with your key) and with our hosting and email providers who process it on our behalf.
Keeping data safe and how long we keep it
Secrets are encrypted at rest with per-organisation keys, access is limited by role, and sign-ins can require a second step. We keep data while the account is active. When you remove a person, a connection or a website, the related data is deleted, except the audit log and the usage and cost records, which we keep as a history of what happened. To ask for something to be deleted, contact us below.
Contact
Questions or deletion requests: ashish@mycodeworks.tech.