Privacy Policy
Introduction
Welcome to SiteGuru! We value your privacy and are committed to protecting your personal information. This policy outlines how we handle your information collected through our website, https://www.siteguru.co, our SEO software on https://app.siteguru.co, and through your use of our services.
Information Collection and Use
We collect personal information only when necessary to provide our services to you. We gather this information through fair and lawful means, with your knowledge and consent. Here's what we collect and how we use it:
- Email Address: We store your email to manage your account, send service communications, and for security purposes. We do not use your email for marketing unless you explicitly consent.
- Google OAuth Account Data: When you connect your Google account with SiteGuru, we store limited information provided via Google OAuth to facilitate access to your Google Analytics and Google Search Console data. We require this data for integrating and enhancing our reports, such as providing detailed analytics and performance insights based on your selected profiles. We ensure this access is read-only, meaning we cannot make any changes to your Google account or data. We never sell this data, and we do not share it with third parties for their own purposes. It is sent to a third party only where you connect an integration that requires it, such as connecting SiteGuru to an AI assistant. See "AI assistants and MCP connectors" below.
- Aggregated and Anonymized Data: We may use the data collected through our services to perform high-level analyses, such as industry benchmarks, overall SEO trends, or general performance insights. This data is always aggregated and anonymized so it cannot be traced back to your individual account, website, or personal information.
Data Security
We protect the information we store with commercially acceptable measures to prevent loss, theft, and unauthorized access, disclosure, copying, use, or modification. Our security measures include:
- Encryption of data in transit and at rest.
- Strict access controls and audit trails.
- Regular security assessments.
If we discover a breach that affects your personal information, we will investigate it, take steps to limit the damage, and notify you and the relevant supervisory authority without undue delay.
Data Retention
We retain your personal information only for as long as necessary to provide you with our services. When you unsubscribe, we remove all your personal information from our systems unless a longer retention period is required or permitted by law.
AI assistants and MCP connectors
SiteGuru offers an MCP (Model Context Protocol) server that lets you connect your SiteGuru account to AI assistants such as Claude and ChatGPT. This connection is optional and is only ever established by you.
What you authorise. Connecting is an explicit action you take per assistant: you either sign in through OAuth 2.0 and approve the connection, or you generate an access key yourself. You can revoke a connection at any time from your SiteGuru account settings. The connection is read-only, so an AI assistant connected to SiteGuru cannot change, delete or create anything in your account.
What is sent, and to whom. When you ask a connected assistant a question about your sites, it calls our MCP server and we return the data needed to answer it. That data is sent to the provider of the assistant you connected, which is Anthropic for Claude and OpenAI for ChatGPT. Once it reaches them, it is handled under that provider's own privacy policy and terms. Depending on what you ask, it may include:
- SEO audit results for your pages, including page titles, meta descriptions, headings, image alt text, canonical URLs, structured data, page speed and indexation status.
- Google Search Console performance data for your sites, pages and keywords, including clicks, impressions, click-through rate and average position.
- Google Analytics 4 data, including sessions, users, traffic sources and, for ecommerce sites, revenue.
- Your tracked keywords, focus keywords and keyword groupings.
- Competitor analysis and backlink data.
- For connected Shopify stores, product and collection performance and SEO issues.
What we log. We record each tool call an assistant makes so we can see how the integration is used and improve it. Each record holds the name of the tool called, the parameters it was called with such as a site domain and a date range, a short summary of the response, timing and status, and a brief description written by the assistant of what you were trying to find out. We do not receive or store your conversation with the assistant, only these per-call records. A size-limited version of the same information is sent to PostHog, our product analytics provider.
Third-Party Services
To provide and improve our services, we share data with the following third parties. Each receives only what it needs for the purpose listed.
- Anthropic and OpenAI: If you connect SiteGuru to Claude or ChatGPT, the data those assistants request is sent to Anthropic or OpenAI on your behalf. See "AI assistants and MCP connectors" above. No data is sent to either company unless you connect them yourself.
- DataForSeo: We send your site's domain, your chosen competitors' domains and your keywords to look up search volumes, search results, competing pages and backlink data.
- PostHog: Product analytics, so we can see which features are used and where people get stuck. This includes records of MCP tool calls as described above. We do not use PostHog to track your behaviour outside our own website and app.
- Sentry: Error reports, so we can find and fix faults. A report can contain the identifier of the account that hit the error.
- Postmark: Your email address, so we can send service email such as reports, notifications and account messages.
- Stripe: Your billing details, to take payment and manage your subscription. Card details go directly to Stripe and are never stored on our servers.
- Google Analytics: Visitor analytics for our own website. We do not use it to track your behaviour outside our website.
Google Analytics Integration: If you connect your SiteGuru and Google Analytics accounts, we fetch visitor data from your selected profiles for reporting purposes. We only have read-only access.
Google Search Console: Connect your account to use features like the CTR curve tool and SiteGuru Insights. We fetch keyword and click data for performance reporting and improvement recommendations. This data is deleted weekly and upon account deletion.
External Links
Our website may contain links to external sites not operated by us. Please be aware that we have no control over the content and privacy practices of these sites and cannot accept responsibility for their policies.
User Rights
You have the right to access, correct, or request deletion of your personal data. To exercise these rights, please contact us directly through the contact information provided below.
Policy Updates
We may update this privacy policy occasionally. We will notify you of any significant changes through our website or through direct communication.
Questions and Contact Information
If you have any questions or concerns about our privacy policy or data handling practices, please contact us at email: info@siteguru.co
Acceptance of This Policy
Continued use of our website and services will be regarded as acceptance of our practices around privacy and personal information. If you disagree with any part of this policy, please discontinue use of our services and contact us to discuss your concerns.
This policy is effective as of 27 August 2026.