Privacy Policy

This Privacy Policy applies to GMK Solution websites, services, client dashboards, and connected tools, including SEO Rank Tracker and related reporting, alerting, and analysis workflows. If you connect a Google account to one of our tools, this policy also applies to the Google user data processed through that connection.

For SEO Rank Tracker and similar Google-connected SEO workflows, we request only the minimum read-only scopes needed to operate the feature: https://www.googleapis.com/auth/webmasters.readonly and https://www.googleapis.com/auth/analytics.readonly, in addition to basic sign-in scopes.

We do not request write scopes for Search Console or Google Analytics through SEO Rank Tracker. Our Google-connected SEO features are designed for read-only reporting, discovery, monitoring, and analysis.

We use personal information and Google user data only for the limited purposes described below:

• Authenticate users, maintain connected Google sessions, and verify that the required read-only scopes are present.
• List eligible Search Console and GA4 properties so users can map the correct properties to a tracked domain.
• Import and process SEO performance data to build page-level dashboards, competitor comparisons, alerts, reports, and historical trend views.
• Discover landing pages from GA4, associate Search Console and GA4 metrics with tracked pages, and generate domain or page summaries.
• Generate reports, send alert or report emails to configured recipients, and support workspace collaboration features requested by the user.
• Generate AI-assisted recommendations and insight summaries. When this feature is used, limited page URLs and aggregated SEO performance metrics may be sent to our configured AI inference provider solely to generate on-demand insights.
• Secure, operate, troubleshoot, improve, and audit our application and enforce our rate limits, billing rules, and service integrity controls.

We do not sell Google user data. We do not use Google user data for advertising. We do not use Google Search Console or Google Analytics data to train generalized AI or ML models for unrelated purposes.

We do not sell or rent personal information or Google user data. We may share data only in the following limited cases:

• With hosting, infrastructure, database, authentication, and email delivery providers that help us operate the service under confidentiality and security obligations.
• With payment processors when billing is required.
• With our configured AI inference provider, only when a user uses AI insight features and only for the purpose of producing the requested analysis.
• With workspace members, admins, or authorized client recipients when the user explicitly configures shared workspaces, report delivery, or alert emails.
• With legal authorities when required by law, regulation, court order, or to protect our rights, users, or systems.

We do not share Google user data with third parties for independent marketing or resale purposes.

We store data in our application databases and hosting infrastructure, and we use reasonable administrative, technical, and organizational measures to protect it.

• HTTPS is used for data transmitted between users, our application, and Google APIs.
• Connected account tokens, synced metrics, reports, alerts, and related settings are accessible only to authorized application processes and authorized personnel.
• API keys created inside our tools are stored in hashed form rather than as plaintext values.
• Access to production systems and stored data is restricted based on operational need.
• We monitor service activity, rate limits, and abuse signals to help protect user data and service integrity.

No method of transmission or storage is perfectly secure, but we work to reduce risk and limit access to the minimum necessary.

We retain data only for as long as needed to provide the service, maintain historical reporting requested by the user, meet legal obligations, resolve disputes, and enforce agreements.

• Google OAuth tokens are retained while the Google connection remains active or until the user asks us to remove them.
• Synced SEO metrics, alerts, reports, jobs, property mappings, tracked pages, competitors, and workspace settings are retained while the relevant account, workspace, or tracked domain remains active.
• Backups, logs, and archived records may persist for a limited additional period where required for recovery, security, or legal compliance.

• Access, correct, update, or request deletion of your personal information.
• Disconnect a Google account or revoke Google access through your Google account controls.
• Opt out of marketing communications.
• Request information about the data we hold and how it is processed.

We use cookies and similar technologies to:

• Keep users signed in and remember preferences.
• Measure website and application usage.
• Improve reliability, security, and user experience.

You can manage cookies through your browser settings, although some site functionality may be affected.

Your information may be processed in countries other than your home country. Where applicable, we rely on reasonable contractual, organizational, and security safeguards to protect transferred data.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date on this page and post the revised policy at the same public URL.

For privacy, deletion, or Google API data questions, contact us at:

• Email: info@gmksolution.com
• WhatsApp: +880 1568 577082
• Address: 14 Shahid Abdur Razzak Ln, Kushtia 7000, Bangladesh