Privacy Policy

1. Who we are

The SEOheist.lol service is the controller of personal data described here. Contact: support@seoheist.lol.

2. What we collect

Account data — email address, password hashes (via our auth provider), referral codes, role (e.g. hustler / kingpin / admin flags), coin balances, and Heist Score.

Listing data — domains, titles, descriptions, categories, tags, and related public page content you submit.

Usage & security — hashed IP addresses for click rate limiting and abuse prevention; request metadata necessary to operate APIs and crons; guest-swap messages you send.

Proof & badge data — URLs you submit for proof verification; domains registered for badge crawl verification.

We do not ask for payment card numbers on the core free product.

3. Why we process data

To provide the service (accounts, listings, redirects, scores, tools).

To prevent spam, fraud, and abuse (rate limits, spam checks, bans).

To generate optional AI-assisted content (e.g. pSEO articles or matchmaking) when those features are enabled.

To communicate about account or security issues when needed.

4. Processors and infrastructure

Supabase — authentication and Postgres database.

Vercel — application hosting and edge delivery.

Upstash Redis — rate limiting and short-lived counters.

Groq — optional AI generation for spam checks / content when configured.

Serper — optional live SERP lookups in tools when an API key is configured.

These providers process data under their own terms and solely to run SEOheist features.

5. Retention

Account and listing data persist until you request deletion or we remove an account for policy violations.

Click and rate-limit records are kept as needed for fraud prevention and scoring; hashed IPs are not used to build advertising profiles.

Server logs on hosting providers follow those providers’ retention defaults.

6. Sharing

We do not sell personal data.

Public pages intentionally expose listing titles, domains, scores, and similar hustle metrics — that is the product.

We may disclose data if required by law or to protect the service against abuse.

7. Your rights

Depending on where you live, you may have rights to access, correct, or delete personal data. Email support@seoheist.lol with the subject “Privacy request.” We may need to verify account ownership.

You can export or review much of your operational data from the dashboard while signed in.

8. Children

SEOheist is not directed at children under 16. Do not create an account if you are under the age required in your jurisdiction.

9. Changes

We may update this policy by revising the date on this page. Material changes will be reflected here.