Privacy Policy

In short: what we keep depends on the tool. Tools that only work with what you type run in your browser and send us nothing. Tools that check a website, use AI or read your Google account send what they need to our server, and some of it is kept — each case is listed below. We never sell any of it.

Tools that run in your browser

Generators, calculators, counters and makers — for example the character counter, Google result preview, meta tag generator, QR code and UPI QR makers, GST invoice and quotation makers, photo resizer and the review link generator — work entirely in your browser. What you type or upload into them is not sent to our servers.

The email safety checker asks Cloudflare's public DNS service directly from your browser, so the domain you check does not reach us either.

Tools that check a website

The website audit and the other checkers that read a site (on-page, speed, broken links, sitemap, redirects, headers and similar) send the website address you enter to our server. Our crawler, UpgrowlyBot, then reads that site's public pages, the way Google does, and respects its robots.txt. Some checks also ask Google PageSpeed Insights (for speed) or Open PageRank (for a domain's authority score) about the address.

• Results are cached — kept for a few hours to a week depending on the check — so the same check is not repeated at the website's expense.
• Website audits are kept: the address, the score and the problems found, so you can come back to the report and see what changed between two audits. If you are signed in, the audit is linked to your account; if not, it is stored without a name.
• While an audit runs, the pages it read are kept for about 30 minutes to build the report, then deleted.

Tools that use AI

The writing tools (for example the review reply writer, content brief writer and outreach email writer) send what you type to an AI model: Cloudflare Workers AI first, and Google Gemini if that is unavailable. We keep the answer for up to 24 hours so the same request does not use the AI twice. Do not paste anything private into them.

If you connect Google Search Console or Google Analytics

You give us separate, read-only permission (webmasters.readonly for Search Console, analytics.readonly for Analytics). We read the list of websites you have there and, when you ask for a report, their numbers: for Search Console, clicks, times shown, click rate, position, the searches people made and the pages they landed on; for Analytics, totals of visitors, visits, pages viewed, how visitors found you, their device and city. Analytics gives us totals only — never anyone's name, phone number or email.

We cannot change anything in either account. The connection key Google gives us is stored encrypted, and each report is kept for up to 12 hours so it opens instantly next time.

Keyword positions (paid plans). If you pay for a plan, have connected Search Console and watch a website with SEO Watchdog, we also fetch that website's Search Console numbers once a week on our own, without you asking each time: the searches it was shown for, the page shown, its position, clicks and times shown. We keep these weekly numbers for 12 months so you can see how positions change, and show them on your account and in that website's monthly report. We only do this for websites you watch and have in your own Search Console.

This data is never shared, sold or used for our statistics. Press Disconnect on the tool and we delete the key, every cached report and the stored keyword positions at once. Removing a website from SEO Watchdog deletes its keyword positions too. You can also remove Upgrowly's access from your Google account's security settings; if Google ends our access, we stop fetching, and keep what we already stored until you disconnect or remove the website.

Your account

If you sign in with Google, we store your email address, name and profile picture. If you sign up with email, we store your email, the name you give (optional) and your password as a salted hash — never the password itself.

With an account we also keep what you save or ask us to do: the websites SEO Watchdog checks for you and the alerts it finds, your report branding (business name, colours and contact details — your logo stays on your own device), the reports you download, and report links you share. A shared report link stops working after 90 days.

If you join a waiting list, we store your email only to tell you about what you signed up for. We do not add you to marketing lists.

Limits and security

To apply daily limits and stop abuse, we briefly store your IP address (or, for IPv6, the network part of it) with a count of what you used. It is deleted when the limit resets, at most 24 hours later. We also log how many checks were used each day, by account if you are signed in, but not what you checked.

Analytics and ads

We use Google Analytics and Cloudflare Web Analytics to see how many people visit which pages. Google Analytics sets cookies and collects your approximate location, device and browser. Some pages show Google ads, which may set their own cookies. None of these receive anything you type into a tool. You can block them with an ad blocker or your browser's privacy settings and the site works the same.

Payments

If you pay us, the payment is handled by Cashfree. We never see or store your card, bank or UPI details. We keep a record that a payment happened, for how much, and the mobile number you gave for it (Cashfree requires one for every payment).

The India Local Index

When you run a website audit you may choose your city and business type. Only if you do, we keep, for that website: the city, the business type, its latest score and which of a dozen basic checks it failed (for example "no tap-to-call phone number"). A website counts once, with its latest audit.

From these we publish the India Local Index: percentages for a city, a business type or both. A figure appears only when at least 30 websites stand behind it, and it never names a website or a business. If you would rather your website was left out, write to us with its address and we will remove it.

Your 30-day plan

If you make a 30-day growth plan, we store it with your account: the website it was built for, its 30 tasks and the dates you ticked them off. Making a new plan replaces the old one.

How long we keep things

Sign-in sessions expire after 30 days. Cached results expire on their own, as described above. Audits, saved reports and account details stay until you ask us to delete them. Waiting-list emails stay until you ask to be removed.

Your rights

Write to us and we will, within 30 days:

• tell you what we hold about you
• correct anything that is wrong
• delete your account and everything attached to it

Who we share with

Only the services that make the site work: Cloudflare (hosting, database and AI), Google (sign-in, Search Console and Analytics connections, PageSpeed Insights, Gemini AI as a backup, analytics and ads), Open PageRank (the domain address only, for authority scores) and Cashfree (payments). We do not sell data to anyone, ever.

Changes

If we change this policy we will update the date at the bottom of this page.