Privacy & Cookie Policy

Last updated: October 25, 2026

SEOLZ is operated by SEOLZ.com, an assumed name of Wheelock Group, Inc., based in Sparta, Michigan (“SEOLZ”, “we”, “us”), which is responsible for the personal data described in this policy. SEOLZ provides ecommerce site audits across SEO, answer-engine readiness (AEO), AI visibility (GEO), accessibility, security, and site-health. This policy explains what we collect, how we use it, the cookies we set, and how we handle data from Google accounts you choose to connect. Plain language first; specifics where they matter.

1. Information we collect

  • Account information — your name, email address, and a securely hashed password. If you subscribe to a paid plan, our payment processor handles your card details (we never see or store full card numbers).
  • Sites you add — the domains you ask us to audit, plus settings you provide (brand name, contact email, platform/stack, white-label preferences).
  • Audit data — to run an audit we crawl the publicly accessible pages of the site you provide, the same pages a search engine sees, and store the findings, scores, and history. We do not log in to your site or collect data about your customers.
  • Connected Google data — only if you connect a Google account (see §3).
  • Usage & diagnostics — basic logs, and, only with your consent, analytics and error-monitoring (see §4).

2. How we use your information

  • To run audits and generate scores, findings, and fix guidance for your sites.
  • To operate your account, process subscriptions, and send transactional and alert emails (e.g., audit complete, score drops, expiring SSL/domains). You can opt out of non-essential alerts per category.
  • To generate fix content, we send finding metadata (not your customers' personal data) to AI/data providers (see §5). Audit response text is never persisted beyond what's needed to produce a fix.
  • To maintain security, prevent abuse, debug problems, and improve the product.

3. Google account connections

Connecting Google is optional and used to enrich your audits. When you connect, we request only these scopes:

  • Sign-in (openid, email) — to identify the connected account.
  • Search Console (read-only) — to read your search performance (queries, impressions, clicks, positions) so we can tie audit findings to real traffic.
  • Google Analytics (read-only) — to read aggregate traffic metrics for context.
  • Tag Manager (read-only) — to read your container/tag setup so we can audit your tracking and flag conflicts (e.g., double analytics).
  • Tag Manager — make changes (tagmanager.edit.containers) — requested only if you explicitly opt into letting SEOLZ apply tracking fixes for you, and only after a separate consent screen. We write changes to a draft workspace for your review; we never publish without your action.

You can disconnect at any time from your site settings, and revoke SEOLZ's access in your Google account permissions.

Limited Use disclosure.SEOLZ's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use Google user data only to provide and improve the audit features you request, do not transfer it to others except as needed to provide those features (or for security/legal reasons), do not use it for advertising, and do not allow humans to read it except with your consent, for security, or as required by law.

4. Cookies

We keep cookies to a minimum:

  • Strictly necessary — a secure, httpOnly session cookie (seolz_token) that keeps you signed in, and a small cookie (seolz_consent) that remembers your cookie choice for a year. The app can't work without the session cookie, so it's always set when you log in. Neither is used for advertising.
  • Optional analytics & error monitoring — only if you choose “Accept all” in the banner. This loads Google Tag Manager / Google Analytics (usage analytics) and error monitoring (Sentry) so we can understand usage and fix problems. Choose “Essential only” to decline; nothing optional loads.

Change your choice any time with the Cookie settings link in the site footer.

5. Service providers & sharing

We don't sell your data. We share it only with providers that help us run SEOLZ:

  • Amazon Web Services — hosting and transactional email (SES).
  • Stripe — subscription billing and payment processing.
  • Google — sign-in and the Search Console / Analytics / Tag Manager APIs you connect.
  • Anthropic, Perplexity, DataForSEO — AI and search-data processing used to generate fix guidance and AI-visibility checks. They receive finding/query metadata, not your customers' personal data.
  • Sentry — error monitoring (only when optional cookies are accepted).

We may also disclose information if required by law or to protect the rights, safety, and security of SEOLZ and its users.

Customers and agencies processing their clients' data through SEOLZ can review our Data Processing Addendum (roles, sub-processors, security, breach notification and transfers).

6. Data retention

We keep account and audit data while your account is active so you can track changes over time. If you remove a site, it disappears from your account and its Google connection tokens are deleted; the audit results about that public website are kept in de-identified form and used only in aggregate (for example, platform-wide benchmarks). If you delete your account, we immediately erase your personal data — your name, email, password, preferences, notifications, email history, report recipients, connected-account tokens and the IP addresses we logged — cancel any subscription, and keep only de-identified audit results about public websites. Our payment processor (Stripe) retains billing records as required by law.

7. Security

We use encryption in transit (HTTPS), hashed passwords, scoped access tokens, and least-privilege access controls. No system is perfectly secure, but we work to protect your data and limit who can access it.

8. Your rights

You can access, correct, export, or delete your data — under Account → Your data (“Download my data” and “Delete account”) or by emailing us. Depending on where you live (e.g., the EEA/UK or California), you may have additional rights to access, portability, deletion, and to object to certain processing. We honor verified requests and don't discriminate against you for exercising them.

9. International, children, and changes

SEOLZ is operated from the United States; if you use it from elsewhere, your data is processed in the US. SEOLZ is a business tool not directed to children, and we don't knowingly collect data from anyone under 16. We may update this policy as the product evolves; we'll revise the “last updated” date and, for material changes, give notice in-app or by email.

10. Contact

Questions about your data or this policy? Email privacy@seolz.com. See also our Terms of Service.