Privacy statement

VNX Digital is responsible for processing your data in SEOpera.

• Dutch Chamber of Commerce (KvK) number: 90575482
• VAT identification number: NL004827354B90
• Email: advies@vincentvandeth.nl

• Account data: your name and your email address. If you sign in with Google, also the ID of your Google account.
• Website data: the addresses you have scanned, the public content of those pages and the scan results.
• Google user data, if you connect Search Console or Analytics. The details are set out below.
• Technical data: your IP address, in server logs and to limit abuse.
• Payment data, if you pay through SEOpera: your name, your email address, the amount, the date and the Mollie ID of the payment, and the IP address and browser details you paid with.
• Email correspondence about your account.

If you connect Search Console or Analytics, SEOpera receives this data from them:

• From Search Console, per page, query and day: clicks, impressions, click-through rate and average position.
• From Analytics, per landing page including the query string, per host name and per day: sessions, engaged sessions, users, new users, conversions, engagement rate, bounce rate and average session duration.
• By default SEOpera counts organic traffic only. For that it also reads the source and the medium of each session.
• To let you choose a property, SEOpera reads the list of your Search Console properties with your access level. It also reads the list of your Analytics accounts and properties with their names. Of the property you connect, SEOpera stores the address or the number, for Analytics also the name and for Search Console your access level.

• Performance of the contract: your account, the scans, the reports and the alerts.
• Legitimate interest: security and the prevention of abuse.
• Consent: the connection with Google. You can withdraw this consent at any time.

If you connect Search Console or Analytics, the following applies to the data SEOpera receives from them.

• SEOpera only has read access and changes nothing in your Google account.
• SEOpera uses the data only to show you your own reports and your own portal.
• VNX Digital does not sell the data and does not use it for advertising.
• The data is not used to train AI models.
• The data is not sent to a language model. The recommendations that a language model writes are based on the public content of your pages and the scan results.
• No person reads the data, except with your explicit consent, when it is needed for security or when the law requires it.
• You revoke access on the Connectoren page in the portal or at myaccount.google.com/permissions.

SEOpera's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

SEOpera uses these services:

• Google Cloud: the server, in region europe-west4 (the Netherlands).
• Supabase: the database and signing in.
• Vercel: this website and the portal.
• Resend: sending email. Resend receives your email address and the content of the email, sometimes with your report attached.
• Mollie: payments, if you pay through SEOpera. Mollie receives your name, your email address, the amount and the address of the scanned website.
• ActiveCampaign: only if that integration is switched on. ActiveCampaign then receives your email address and first name, the address of the scanned website, the type of report, the score and the download link.
• DataForSEO: only if you switch on that integration. DataForSEO then receives the domain of your website and the keywords you track, with country and language.
• Google PageSpeed Insights: only if that measurement is switched on. Google then receives the address of the homepage you have scanned, to measure its speed.
• DuckDuckGo: searching for competitors, except in the free scan. DuckDuckGo then receives search terms with the domain of the scanned website and the industry SEOpera derives from it.

Language models write the recommendations and the fix instructions. They can also extract keywords from your pages and make their content searchable for the recommendations.They receive the public content of your pages and the scan results, no Google user data. In production, only a provider with a recorded legal basis for transfers outside the European Economic Area runs. Today that is OpenAI alone. DeepSeek and OpenRouter have no such basis and are not used in production: SEOpera does not start there if either one is configured.

• OpenAI, in production. Processor: OpenAI Ireland Limited (EEA and Switzerland) and OpenAI OpCo, LLC (United States). Region: United States; under the DPA, EEA data is processed by OpenAI Ireland Limited. Legal basis for transfer: EU-US Data Privacy Framework. Retention at the provider: 30 days.
• DeepSeek, not in production. Processor: Hangzhou DeepSeek Artificial Intelligence Co., Ltd. Region: People's Republic of China. Legal basis for transfer: no recorded legal basis. Retention at the provider: not documented.
• OpenRouter, not in production. Processor: OpenRouter, Inc. Region: United States, plus the upstream model providers OpenRouter routes to. Legal basis for transfer: no recorded legal basis. Retention at the provider: not documented.

Your data is kept for as long as your account exists. On your request, VNX Digital deletes it.

Payment data is an exception. On your request it is not erased but stripped of your name, your email address, your IP address and your browser details. The amount, the Mollie ID and the date are kept for as long as the statutory tax retention obligation lasts: seven years after the end of the year of your payment, or of its reversal if that came later. After that they are deleted automatically.

This website sets one functional cookie, seopera_locale. It remembers the language you chose for one year. The website loads no tracking, no analytics and no third-party scripts.

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You send a request to advies@vincentvandeth.nl.

If you disagree with how VNX Digital handles your data, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

If this statement changes, the new version and its date appear at the top of this page.