Privacy policy – SEO Monitor

Last updated: 8 October 2026

This policy explains how SEO Monitor, an internal tool operated by Arbona d.o.o. ("Arbona", "we"), accesses, uses, stores and shares data obtained through Google APIs. Arbona's general privacy policy is available at arbona.hr/hr/politika-privatnosti.

1. Data we access

• Google Search Console (scope webmasters.readonly): list of properties the connected account can see, aggregated search performance (clicks, impressions, CTR, position by date, query, page and country), sitemap status and URL Inspection results for client websites.
• Google Analytics (scope analytics.readonly): list of GA4 properties the connected account can see and aggregated reports (sessions, engaged sessions, event count, key events and revenue by date and channel).
• Basic profile (openid, email): the email address of the connected Google account, so we know which account has access to which property.

These are aggregated website statistics. We do not access Gmail, Drive, contacts or any personal data of website visitors; Google Analytics and Search Console reports do not identify individual people.

2. How we use the data

The data is used only to show SEO results of client websites to Arbona employees inside SEO Monitor, to detect indexing and technical problems, and to prepare reports and review meetings with the client who owns the website. We do not use Google data for advertising, do not sell it, and do not use it to develop, improve or train generalised AI or machine learning models.

3. Storage and security

Data is stored in a managed PostgreSQL database (Neon) and the app runs on Vercel. OAuth refresh tokens are encrypted (AES-256-GCM) before they are stored. Access to the app requires signing in with an Arbona Google Workspace account and is limited by role. All traffic is encrypted with HTTPS.

4. Sharing

Google data is not shared with third parties. It is visible only to Arbona employees working on the client's project and may be included in reports for that same client. Service providers process it only on our behalf: Vercel and Neon host the app and the database, and Anthropic (Claude API) receives aggregated reporting data when an Arbona employee requests an AI-written analysis of a client project. Under Anthropic's commercial terms, API data is not used to train their models.

5. Retention and deletion

While we provide SEO services to a client, reporting data for their website is refreshed regularly. When the cooperation ends, the project is archived: the app stops requesting any new data from Google for that website, and the data already collected is kept read-only as a historical record, visible only to Arbona employees. It is deleted at the client's request. A connected Google account can be disconnected at any time in the app (Admin → Integrations → Remove), which deletes its stored token, or by revoking access at myaccount.google.com/permissions. To request deletion of data, contact us at the address below.

6. Google API Services User Data Policy

SEO Monitor's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Contact

Arbona d.o.o. · hrvoje.galic@arbona-agency.com · www.arbona.hr