Privacy policy

Who we are

Boostbase is a product of Seoboost B.V., Wegtersweg 32, 7556 BR Hengelo, the Netherlands (Chamber of Commerce no. 71073175). Seoboost B.V. is the controller of the data described in this policy. Please send privacy questions to info@boostbase.nl.

The website

This website sets no cookies and uses no analytics or advertising services. For every visit our hosting records technical data: IP address, browser, requested page and time. We use this only to keep the site secure and available, and it is deleted after 30 days.

The Boostbase app

When you use the app, we process:

• Account data: your name, email address and how you sign in (Google account, or password with two-factor authentication). Your password and two-factor key are managed by Google's sign-in service. We cannot see your password and do not store it.
• A session cookie. It is needed to keep you signed in and expires after 12 hours. We use no other cookies.
• Security data: your IP address and the times of your requests, to detect and block abuse.
• The data you work with in the app: domains, keywords, pages, rankings, action items and who made which change.

Data from Google

When you connect them yourself, Boostbase retrieves data from Google services:

• Google Search Console (read-only): clicks, impressions, positions and pages of the websites you grant access to.
• Google Ads (once this integration is available): the structure and results of the advertising accounts you connect. We only make changes to your account on your instruction or according to rules you set yourself.

We use this data only to show it to you and your team in your own Boostbase environment and to perform the functions you ask for. We do not sell it, do not use it for advertising, do not share it with other clients and do not use it to train AI models. Our staff only view it with your consent, for security purposes, to comply with the law, or in aggregated and anonymised form for the operation of the service.

Boostbase's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke a connection at any time in the app or in your Google account. We then delete the access token immediately and the retrieved data of that connection within 30 days.

Legal basis

We process your data to perform the agreement with you or your employer, to secure the service (legitimate interest) and to comply with legal obligations, such as the retention of financial records.

Who we share data with

We use the following processors. Each of them is bound by agreements on confidentiality and security.

• Google: hosting, storage, sign-in and logs, within the EU.
• DataForSEO: search results and search volumes. We only send keywords, domains and market, no personal data.
• Anthropic: the AI analysis. We send keywords, measurements and text from public web pages, no account data.

Where a processor is located outside the European Economic Area, we use appropriate safeguards such as the European Commission's standard contractual clauses. We never give data to others for their own purposes, unless the law requires us to.

How long we keep data

• Account data and your work data for as long as the account exists. After the agreement ends we delete it within 30 days, unless the law requires us to keep it longer.
• Website and app logs: 30 days.
• Access to Google services: until you revoke the connection; the retrieved data for at most 30 days after that.

Security

All connections are encrypted (HTTPS), data is stored encrypted, client users sign in with mandatory two-factor authentication, and every request is checked on the server so that you only see your own data. Access keys for connected services are stored separately and encrypted, and never reach the browser.

Your rights

You have the right to access, correct or delete your data, to restrict processing, to object and to data portability. Send your request to info@boostbase.nl; we respond within one month. If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

If we change this policy, the new version is published on this page with the date below.