Privacy Policy

Last updated: November 30, 2025

1. Introduction

Barracuda SEO ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web-based SEO crawler and auditing tool (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, and password when you create an account
  • Project Data: Website URLs, crawl configurations, and project settings
  • Payment Information: Billing details processed securely through Stripe (we do not store credit card information)
  • Communication: Messages you send to us via email or support channels

2.2 Information Collected Automatically

  • Usage Data: How you interact with the Service, including pages visited, features used, and time spent
  • Technical Data: IP address, browser type, device information, and operating system
  • Crawl Data: Website crawl results, SEO issues detected, and performance metrics
  • Integration Data: Data from connected services (Google Search Console, Google Analytics, Microsoft Clarity) when you authorize integrations

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and manage your account
  • Send you technical notices, updates, and support messages
  • Respond to your comments, questions, and requests
  • Monitor and analyze usage patterns to improve user experience
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations and enforce our terms

4. Data Storage and Security

We take data security seriously and implement industry-standard measures to protect your information:

  • Encryption: Data is encrypted in transit using TLS/SSL and at rest
  • Access Controls: Row-Level Security (RLS) policies ensure users can only access their own project data
  • Secure Infrastructure: Data is stored in Supabase with enterprise-grade security
  • API Security: API keys and tokens are stored securely using Cloud Run secrets
  • Regular Audits: We regularly review and update our security practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • Service Providers: With trusted third-party services that help us operate the Service (e.g., Supabase for data storage, Stripe for payments, Vercel for hosting)
  • Team Collaboration: With team members you explicitly invite to shared projects
  • Legal Requirements: When required by law, court order, or government regulation
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
  • With Your Consent: When you explicitly authorize us to share information

6. Third-Party Integrations

Our Service integrates with third-party services (Google Search Console, Google Analytics, Microsoft Clarity, Slack, Google Drive). When you connect these services:

  • We access only the data you explicitly authorize
  • We use OAuth tokens that you can revoke at any time
  • Your data remains subject to the privacy policies of those third-party services
  • We do not share your Barracuda data with these third parties beyond what's necessary for the integration

7. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and associated data
  • Data Portability: Export your project data
  • Opt-Out: Unsubscribe from marketing communications (account-related emails will still be sent)
  • Revoke Access: Disconnect third-party integrations at any time

To exercise these rights, please contact us at privacy@barracudaseo.com.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account:

  • We will delete your personal information and project data
  • Some information may remain in backups for a limited time for disaster recovery purposes
  • We may retain anonymized, aggregated data that cannot identify you

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the Service, you consent to the transfer of your information to these countries.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last updated" date
  • Sending you an email notification (for significant changes)

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: