Privacy policy

1. Who is responsible

The controller is IDEA I B.V., based in Heerhugowaard (the Netherlands).

2. What data we process

Account: your name, e-mail and password, which we store hashed and cannot read, and your language. Subscription: status, dates and amounts of payments; your card or bank details are handled by Mollie and we never see them. Your sites: the domains you add and the results of audits and citation measurements. If you connect Google: aggregated Search Console and Google Analytics data for your sites. Free scan: the web address and the result, which we keep for 30 days, and your e-mail if you ask to receive the link. Technical logs: IP address and date of requests, for security and to limit abuse.

3. Why and on what basis

To provide and bill the service (performance of the contract). To keep it secure and prevent abuse (legitimate interest). To meet tax and accounting obligations (legal obligation). To send you the link to a free audit (your consent).

4. Who we share data with

With providers that help us deliver the service: Railway (hosting), Mollie (payments), Resend (e-mail delivery) and, if you connect it, Google. To measure citations we send OpenAI, Anthropic, Perplexity and Google the questions about your sector and your domain, not your personal data. Some of these providers may process data outside the European Economic Area with appropriate safeguards, such as standard contractual clauses. We do not sell your data.

5. If you connect your Google account

If you choose to connect your Google account to see your site’s Search Console or Google Analytics data, we only ask for READ permission to that data (impressions, clicks, position and queries in Search Console; visits and where they come from in Analytics) and your account e-mail, to show which one you connected. We do not access your mail, your files or anything else in your Google account.

We store an access code that Google gives us, encrypted, so we can read that data each day. We use that data only to show it to you in your panel and reports; we do not sell it, use it for advertising or share it with third parties. Studio Visibilidad’s use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

You can disconnect at any time from My sites, or remove the permission from your Google account. When you disconnect, we stop reading your data and delete the access code.

6. Cookies

We only use the cookies needed to keep you signed in and remember your language. We use no advertising or tracking cookies, which is why we show no cookie banner.

7. How long we keep it

Your account and data as long as you keep it. Payment records for as long as tax law requires (7 years). Free-scan results, 30 days.

8. Your rights

You can ask us for access, rectification, erasure, restriction, portability or to object by writing to info@ideadigital.nl. If you think we handle your data improperly, you can complain to the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

9. Security

We use encrypted connections, store passwords hashed and limit access to data. No system is infallible; if a breach affects you, we will tell you as the law requires.

10. Changes

We may update this policy. The date of the last update is shown above.

11. Contact

info@ideadigital.nl