What We Do with Your Data.
In plain language — who controls it, what we process, your rights, and how to exercise them.
This page explains our GDPR posture in plain language. It sits alongside our Privacy Policy and Terms of Service, which govern in the event of any conflict.
Who Is the Data Controller
Octolyze Inc. is the controller for the account and billing data of our customers. For the data our customers audit — the websites, Search Console, and Analytics they connect — the customer is the controller and Octolyze acts as a processor under a Data Processing Agreement.
What We Process, and Why
- Account data (name, email, organisation) — to operate your account. Legal basis: contract.
- Crawl and audit data (URLs, status codes, page content signals) fetched from sites you choose to audit — to produce the audit. Legal basis: your instruction as controller.
- Connected Google data (Search Console, Analytics) — only when you connect it, only the read scopes you grant, to compute Search × Analytics signals. Legal basis: your explicit connection.
- Product usage (essential logs) — to keep the service secure and reliable. Legal basis: legitimate interest.
We do not sell personal data, and we do not use your audited data to train models.
Your Rights
Under the GDPR you can, at any time, request to access, correct, export, restrict, or erase your personal data, and object to processing based on legitimate interest. We answer verified requests within 30 days.
Sub-Processors & Transfers
We use a short list of infrastructure sub-processors (hosting, email delivery, and Google APIs for connected data). Where data leaves the EEA, it is covered by Standard Contractual Clauses. A current sub-processor list is available on request.
Retention
Crawl history is retained per your plan’s data-history window and deleted afterwards. Delete a project and its crawl data is removed. Close your account and account data is erased, save for what law requires us to keep.
To exercise a right or request our DPA, email [email protected] or use the contact page. If you believe we’ve mishandled your data, you also have the right to lodge a complaint with your local supervisory authority.