What SolSEO holds about you, and who else sees it
This policy covers solseo.com.au, the SolSEO dashboard and the two SolSEO WordPress plugins. It is written from what the software does rather than from what a policy usually says, so the lists on it are the actual lists. Last updated 18 September 2026.
Who we are
SolSEO is a product of Solkarra Group Pty Ltd, ABN 44 688 412 900, of Abbey, WA, Australia. We are the entity responsible for the personal information described here. Write to [email protected] about anything on this page and a person will answer it.
What we collect, and why
Your account
Your name, your email address and a hash of your password, because you need to be able to sign in and we need to be able to reach you about your own account. Your plan, its status and its billing interval, because the service is metered by it. If somebody invited you, the account they invited you to.
We never see your card. Payment details are entered at Stripe and stay at Stripe. What comes back to us is a customer reference, the plan you bought, and whether the last invoice was paid.
What you ask us to watch
The addresses of the sites you add, the keywords you track, the target page you aimed each keyword at, the competitor domains you named, and the country and device you chose. This is the service. Without it there is nothing to check.
What the service produces about those sites
Daily positions and the search results they came from, the pages found by a crawl and what each page contained at the time, health check findings, page scores, uptime probes, and any report you generate. Some of it is a copy of a public page of yours, taken by our crawler at the address you gave us.
What the WordPress plugin sends
Nothing at all until somebody pastes a pairing code into it. The free plugin works completely on its own and makes no connection to us before that.
Once a site is paired, it sends this, twice a day, and nothing else:
- The site address and its time zone.
- The WordPress, PHP, WooCommerce and plugin version numbers.
- How many posts, pages and products are published, as counts.
- The permalink structure, such as
/%postname%/.
It does not send your posts, your drafts, your customers, your orders, your users or your traffic. The page scoring in the plugin runs on your own server and the result stays there. SolSEO Pro scores your phrases the same way, in the same place.
Your site's visitors
We hold nothing about them. The redirect log in the plugin records an address that was not found and the page that linked to it, which are two addresses and no person. Our crawler reads your pages as a visitor would and keeps the page, not who else read it.
Using the website and the dashboard
Our servers keep a request log: the address requested, the answer, how long it took, and the IP address it came from. Sign in attempts and administrator actions are logged the same way. That is how a break in is noticed and how a support question gets answered.
The marketing pages and the dashboard also carry Google Analytics, which is a separate thing with its own answers. What we measure on this website lists every event we send, and the account fields that go with them, and the ones that never do: your email address, your name, your keywords, your rankings and your invoices do not leave our servers for Google.
Cookies
- A session cookie, set when you sign in, so the next page knows it is you. It holds an identifier and nothing else.
solseo_consent, which records your answer to the analytics banner for 180 days.- Google Analytics cookies, set only once measurement is allowed.
Visitors from the UK, the EEA and Switzerland are asked before anything is stored, and nothing is stored until they say yes.
Who else sees it
The complete list, with what each one gets. We add nothing to it without changing this page.
| Who | What they get | Where |
|---|---|---|
| Stripe | Your name, email and payment details, so you can be billed | United States and Ireland |
| DataForSEO | A keyword, a country and a device, to run the search | United States |
| Serper | The same, when that provider is the one running the check | United States |
| A page address of yours, for a PageSpeed measurement; and Search Console figures for properties you connect | United States | |
| Google Analytics | Website events, once you have allowed them | United States |
| Cloudflare | Requests to solseo.com.au pass through it, and it sees the IP address they came from | Global |
| Our email provider | Your email address and the message, for alerts, reports and password resets | Australia |
Nobody on that list is allowed to use what they get for anything but the job it is there for. We do not sell personal information, we have never sold personal information, and there is no arrangement under which anybody pays us for it.
Several of them are outside Australia, which is what the table's last column is for. By using SolSEO you agree to that disclosure. We would need a Google in Australia to avoid it and there is not one.
Where your data is kept
The website and your account database run on our web host's servers in Australia. The crawling, the rank checking and the report rendering run on a virtual server in Sydney. Backups stay with the host that made them.
How long we keep it
| What | Kept for |
|---|---|
| Positions, keywords and their history | As long as the account is open. Unlimited history is part of what you are paying for |
| Crawled pages | The most recent crawls, by plan. Older page bodies are pruned and the findings stay |
| Uptime probes | 90 days, then the daily summary for 396 days |
| Alerts | 396 days |
| Request, sign in and admin logs | While the account is open |
| Invoices and billing records | Seven years, because Australian tax law says so |
Close your account and the rest goes with it. Ask us to delete it sooner and we will, apart from the billing records we are required to keep.
How it is protected
Everything travels over HTTPS. Passwords are hashed and cannot be read back. Every credential we issue, which is your pairing keys, your licence keys and your API keys, is stored as a digest with a short hint beside it, so a copy of our database does not contain a single usable key. Your alert channel addresses, which carry their own secret in the link, are encrypted at rest.
No system is perfect and we will not pretend otherwise. If something happens that puts your information at risk, you will hear it from us, and the Office of the Australian Information Commissioner will hear it too where the law requires.
Your choices
- See it. Ask and we will tell you what we hold about you.
- Correct it. Most of it is editable in the dashboard. Ask for the rest.
- Take it. Your keywords and positions export as CSV from the app.
- Delete it. Close the account, or write to us and we will do it.
- Turn off analytics. Clear this site's cookies to be asked again, or turn on Do Not Track and the tag does not load.
Email [email protected]. We answer within a few days and at the outside within 30.
If we get it wrong
Tell us first, at the same address, and say what you want fixed. If the answer is not good enough you can take it to the Office of the Australian Information Commissioner at oaic.gov.au, which handles privacy complaints in Australia and costs you nothing.
Children
SolSEO is a business tool and is not meant for anybody under 16. We do not knowingly hold information about a child, and we delete it if we find it.
When this changes
The date at the top changes with the words. If a change matters, which means a new recipient on the list above or a new kind of information collected, we email account holders before it takes effect rather than after.
Questions about any of this
Ask a person. We would rather answer a question about the policy than have somebody guess at it.
- The analytics detail lists every event we send.
- The pairing guide covers what the plugin sends and when.