Privacy at a Glance
Here is our core pledge to you:
We never sell, rent, or trade your personal or corporate data to third-party data brokers.
All client campaigns, keywords, and backend access details are governed by binding confidentiality agreements.
All data in transit is encrypted using 256-bit SSL/TLS, and credentials are kept in encrypted vaults.
You can request export, rectification, or complete deletion of your data at any time with zero hassle.
Overview & Scope of Policy
This Privacy Policy governs the manner in which SEO Sahi Hai Inc. (collectively referred to as “SEO Sahi Hai”, “we”, “us”, or “our”) collects, uses, maintains, and discloses information collected from users, visitors, clients, and partners accessing our website (seosahihai.com), client portals, and any affiliated digital marketing, SEO, AI SEO, content writing, link building, PPC, web development, and virtual assistant services.
By visiting our website, submitting an audit request, scheduling a strategy call, or engaging our commercial services, you acknowledge that you have read, understood, and agreed to the data practices described in this policy.
Information We Collect
We collect information in three ways: directly from your submissions, automatically through website interaction, and via third-party integrations necessary for SEO campaign management.
A. Information You Provide Directly:
- Contact Details: Full name, professional title, company name, corporate email address, telephone number, and physical office location.
- Project & Audit Inquiries: Target website URL, competitors, monthly marketing budget, business goals, and current organic rankings.
- Billing & Account Information: Company tax ID, GST/VAT number, invoice recipient details, and billing contact. (Note: Credit card payments are processed directly through PCI-DSS certified gateways such as Stripe or Razorpay; we never store raw credit card numbers).
- Account Access Credentials: Read-only or delegated administrative access to CMS platforms (WordPress, Shopify, Magento), Google Analytics 4 (GA4), Google Search Console (GSC), Google Ads, and hosting panels required for technical optimization.
B. Information Collected Automatically:
- Device & Connection Data: IP address, browser type and version, operating system, device manufacturer, screen resolution, and language preference.
- Usage & Navigation Metrics: Pages visited, time spent on each URL, referring website URL, clickstream paths, and conversion actions.
How We Use Your Information
We process collected information strictly for legitimate commercial purposes, including:
Service Execution
Conducting in-depth technical website audits, keyword discovery, backlink indexing, on-page optimization, and core web vitals fixes.
Analytics & Reporting
Compiling customized monthly performance reports, keyword ranking trackers, organic conversion tracking, and competitive intelligence.
Client Communication
Sending status updates, schedule confirmations, strategic recommendations, invoices, and critical security notifications.
Compliance & Protection
Preventing fraud, enforcing contract terms, verifying billing integrity, and ensuring compliance with applicable cybersecurity regulations.
Client Confidentiality & Non-Disclosure (NDA)
We understand that your search engine strategies, private business models, customer volumes, product margins, and conversion figures are highly proprietary trade secrets.
White-Label Agency Protection & Standard Mutual NDAs
For our white-label agency clients and direct partners, we execute enforceable bilateral Non-Disclosure Agreements (NDAs). We never disclose your brand names, end-clients, or ranking methodologies without explicit prior written authorization.
All our internal employees, SEO strategists, developers, and virtual assistants sign legally binding confidentiality agreements with strict penalty clauses for unauthorized data dissemination.
Third-Party Disclosures & Integrations
We do not sell, trade, or transfer your personally identifiable information to outside parties. This does not include trusted third parties who assist us in operating our website, conducting our business, or serving our clients:
- SEO & Marketing Toolsets: Verified enterprise APIs such as Google Search Console, Ahrefs, Semrush, and Screaming Frog for analytical and diagnostic scans.
- Cloud Infrastructure Providers: Vercel, Amazon Web Services (AWS), and Google Cloud Platform (GCP) for secure server hosting and content distribution.
- Payment Processors: Stripe, PayPal, and Razorpay for encrypted, compliant payment gateways.
- Legal & Regulatory Mandates: When required by court order, statutory regulation, or lawful governmental requests.
Data Security & Storage
We implement multi-layered technical, physical, and administrative safeguards designed to protect personal and business information against unauthorized access, destruction, loss, alteration, or misuse:
TLS 1.3 Encryption
Every byte sent between your browser and our servers is encrypted.
Role-Based Access
Only assigned project managers and vetted engineers access project files.
Encrypted Vaults
API keys and credentials are stored in zero-knowledge password vaults.
Data Retention & Deletion
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements:
- Active Client Records: Stored throughout the duration of the engagement and retained for 3 years following contract conclusion for auditing purposes.
- Technical Credentials & Site Access: Immediately revoked and purged from our vaults within 14 days of project completion or client request.
- Website Audit Queries: Audit logs and scanned diagnostic reports are retained for up to 180 days to support comparative progress tracking.
Your Privacy Rights
Regardless of your geographical location, we provide comprehensive transparency and authority over your personal information:
Right to Access & Portability
You may request a copy of the personal data we hold about you in a structured, commonly used format.
Right to Rectification
You have the right to request the correction of incomplete, inaccurate, or outdated information.
Right to Erasure (“Right to be Forgotten”)
You can request the permanent deletion of your records when data retention is no longer legally required.
Right to Restrict or Object to Processing
You may opt out of promotional communications at any time by clicking “unsubscribe” or emailing us.
Global Compliance (GDPR, CCPA, CPRA & Indian IT Act)
We actively maintain compliance with leading international data privacy frameworks:
- European Union (GDPR): Lawful basis for processing under Article 6; Standard Contractual Clauses (SCCs) for cross-border transfers.
- California Consumers (CCPA / CPRA): We do not sell or share personal information for cross-context behavioral advertising. You have the right to limit sensitive personal info usage without discriminatory pricing.
- India (Information Technology Act & DPDP Act 2023): Strict reasonable security practices and procedures for sensitive personal data or information (SPDI).
Contact Our Data Protection Officer (DPO)
If you have questions regarding this Privacy Policy, wish to exercise your legal data rights, or file a privacy grievance, please reach out to our designated compliance desk:
SEO Sahi Hai Inc., C-210, Industrial Area, Sector 74, Mohali, Punjab 160055, India