1. Introduction

Shoptalk Business Solutions ("we", "our", or "us"), operating SEOLFUL, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

2.1 Payment Information

When you make a purchase, we work with Razorpay, our payment processing partner, to securely process payments. We collect and store:

• Billing Information: Name, billing address, email address
• Transaction Data: Transaction ID, order ID, purchase amount, currency, payment method type
• Subscription Details: Plan type, billing cycle, subscription status
• Credit Transaction History: Credit purchases, usage, and balance

Important: We do NOT store your full credit card numbers, CVV codes, or sensitive payment credentials. All payment card information is securely processed and stored by Razorpay in compliance with PCI DSS standards. We only receive confirmation of successful payments and transaction details necessary for billing and support purposes.

2.2 Information from Google Sign-In

When you sign in with Google, we collect the following information:

• Email Address: Used for account identification and authentication
• Name: Used to personalize your experience and display in your profile
• Profile Image: Used to display your avatar in the application
• OAuth Tokens: Stored securely for session management and authentication

Scopes Requested: We only request the minimum necessary permissions:

• email: To identify your account
• profile: To display your name and profile image
• openid: For authentication

2.2 Information You Provide

• Connection details for your CMS platforms (WordPress, WooCommerce, Shopify)
• Content extracted from your websites
• Generated meta titles and descriptions
• SEO keywords and scoring data

2.3 Automatically Collected Information

• Usage data and analytics
• IP address and device information
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Authentication: Verify your identity and manage your account
• Service Delivery: Provide SEO meta generation and management services
• Communication: Send you service-related notifications
• Improvement: Analyze usage patterns to improve our service
• Security: Protect against fraud and unauthorized access

We do NOT:

• Sell your data to third parties
• Use your data for advertising purposes
• Share your data with data brokers
• Use your data for credit or lending decisions

4. Data Storage and Security

4.1 Storage

• Your data is stored in secure databases with encryption at rest
• OAuth tokens are encrypted using AES-256-GCM encryption
• CMS credentials are encrypted before storage

4.2 Security Measures

• HTTPS encryption for all data in transit
• Secure authentication protocols (OAuth 2.0 with PKCE)
• Regular security assessments
• Access controls and authentication
• Secure credential management

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Payment Processors: We share necessary billing information with Razorpay to process payments. Razorpay's use of your information is governed by their Privacy Policy and Terms of Service. Razorpay may share your information with banks, card networks, and other financial institutions as necessary to process payments.
• Service Providers: With trusted third-party service providers who assist in operating our service (e.g., hosting, database services, email services)
• Legal Requirements: When required by law or to respond to legal process, court orders, or government requests
• Protection of Rights: To protect our rights, privacy, safety, or property, or that of our users or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with user consent where required by law)

6. Your Rights and Choices

You have the right to:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Portability: Request a copy of your data in a portable format
• Opt-Out: Disconnect your Google account at any time

To exercise these rights, contact us through your account settings or by emailing support.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. When you delete your account:

• Your account information is deleted
• Your CMS connections are removed
• Your generated content may be retained for a limited period for backup purposes

8. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (if applicable)

11. Contact Us

If you have questions about this Privacy Policy, please contact us:

12. Compliance

This Privacy Policy complies with:

• Google API Services User Data Policy
• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Other applicable privacy laws