Privacy Policy for SimHop SEO

Last updated: 13 November 2026

1. Who we are

SimHop SEO is operated by SimHop Media & IT AB, Sollentuna, Sweden (company registration no. 559283-2884). Privacy contact: info@simhop.se.

When we process data about a client's website and business profile, we do so on the client's behalf and under the assignment the client has given us. Otherwise, SimHop is the data controller for information about the people who use the tool.

2. Data we process

Data from Google (via OAuth, with your consent)

• Google Search Console: the list of sites you have access to and search statistics for them (queries, pages, clicks, impressions, click-through rate and average position).
• Google Business Profile: business profile details (name, address, categories, opening hours), reviews including the reviewer's display name and text, and the replies we publish.
• Access tokens: the technical keys (access and refresh tokens) that Google issues so the app can retrieve data for you without requiring you to sign in each time.

We do not request access to email, Drive, contacts, calendar or any other Google data.

Other data

• Contact and sign-in details of SimHop staff who use the tool.
• Technical logs (such as IP address and timestamp) created by the hosting provider and server for operation and security.

3. How we use the data

• Produce reports and analyses of a website's search performance and local visibility.
• Produce suggestions and drafts, such as improved page titles or replies to reviews. A person reviews suggestions before anything is implemented or published.
• Operate, troubleshoot and secure the tool.

Our legal bases are primarily performance of our contract with the client and our legitimate interest in delivering and developing the service. Access to your Google data is based on your approval in Google's sign-in dialog.

4. Use of Google data (Limited Use)

SimHop SEO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice, this means that we:

• use Google data only to provide and improve the user-facing features described above;
• do not sell Google data and do not use it for advertising, targeted marketing or profiling;
• do not allow humans to read the data, except where necessary for security, to comply with law, to troubleshoot an individual case with your consent, or where the data is aggregated and anonymised for internal operations;
• do not use Google data to develop, improve or train generalised AI or machine-learning models;
• do not transfer the data to anyone other than the service providers listed below, and then only as necessary to deliver the features.

5. Service providers and recipients

• Vultr – server hosting where the application and database run.
• Vercel – hosts this information website. No Google data is stored or processed there.
• AI model providers (via API) – excerpts of data may be sent for analysis and to produce drafts. The providers may not use the data to train their models.
• DataForSEO – we send keywords and domain names to retrieve market and competitor data. No Google user data is sent there.

We do not sell personal data and do not disclose data to others, except where required by law.

6. Security

• Access tokens are stored encrypted in the database.
• Each client's data is kept separate from other clients' data.
• Access to the tool is limited to authorised SimHop staff.
• All communication takes place over encrypted connections (HTTPS/TLS).

7. Retention and deletion

We keep Google data and access tokens for as long as we have an engagement with the client. When the engagement ends, or if you ask us to, we delete the access tokens and the retrieved Google data, unless we are legally required to keep something (for example accounting records).

You can revoke the app's access directly with Google at myaccount.google.com/permissions. We can then no longer retrieve new data. You can also ask us to delete data already retrieved by contacting info@simhop.se.

8. Your rights

Under the GDPR you have the right to request access to, rectification of and erasure of your personal data, to request restriction of processing, to object to processing based on legitimate interest, and to receive your data in a portable format. Contact us and we will help you. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

9. Cookies

This website uses no cookies and no analytics or tracking tools.

10. Changes

We may update this policy. The latest version is always available on this page, with the date of the last change at the top.