Privacy Policy

What Scaup is

Scaup is an automated search and AI visibility service that connects to your website and Google Search Console account. We analyze your site's content and search performance, make improvements on your behalf, and set up your site to be discoverable by AI tools like ChatGPT and Perplexity. If you're curious about how automated SEO works and whether it's right for your site, check out our guide on what automated SEO is and whether it actually works.

Beyond traditional SEO, we also help your site appear in AI search tools and chatbot answers by setting up an llms.txt file, which tells AI systems how to surface your content accurately. Learn more about AI search visibility and how to get your website into ChatGPT and other AI answers.

What data we collect

When you sign up and connect your site, we collect and store:

• Google account info — your name, email address, and profile picture, used to identify your account
• Google Search Console data — search queries, clicks, impressions, and average position for your verified properties. We use this to understand how your site performs in search and decide what to improve
• Website content — page titles, meta descriptions, headings, and other on-page content from your connected site. We read this to identify improvements and apply changes
• Website connection credentials — such as WordPress application passwords or GitHub access tokens, used to read and update your site's content
• Usage data — basic analytics about how you use the Scaup app (pages visited, buttons clicked) to help us improve the product

How we use your data

• To analyze your site's search performance and identify improvements
• To generate and execute a growth plan for your site
• To apply content changes to your website (with your approval or via auto-apply if you opt in)
• To submit your URLs to Google's Indexing API so changes get picked up faster
• To send you weekly progress reports by email
• To improve the Scaup product based on aggregated, anonymized usage patterns

How we store and protect your data

Your data is stored in our backend database hosted by Convex. Sensitive credentials, including Google OAuth refresh tokens and website connection passwords, are encrypted using AES-256-GCM before storage. They are never stored in plaintext.

We use HTTPS for all data transmission. Access to production systems is restricted to authorized team members only.

Third-party services

We share data with the following services to operate Scaup:

• Google (OAuth, Search Console API, Indexing API) — to authenticate you and access your search data
• Anthropic (Claude AI) — to analyze your site content and generate improvements. We send page content and search data to Claude for analysis. Anthropic does not use this data to train their models
• Convex — backend database and server functions
• Resend — to send you weekly report emails
• Mixpanel — anonymous product analytics (browser-side only, no personal data sent)
• BetterStack — application logging and monitoring (no personal user data is logged)

We do not sell your data to anyone. We do not share your data with any parties other than those listed above.

Google API Services

Scaup's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request access to the Google API scopes necessary to provide the service (Search Console read/write and Indexing API)
• We do not use Google user data for advertising or sell it to third parties
• We do not allow humans to read your Google data unless you give explicit permission, it is necessary for security purposes, or it is required by law
• We limit our use of Google data to the practices described in this privacy policy

Your rights

You can:

• Disconnect your site at any time from the Scaup dashboard. This stops all scanning and changes
• Revoke Google access from your Google account permissions page at any time
• Unsubscribe from emails using the link in any Scaup email
• Request data deletion by emailing us at [email protected]. We will delete all your data within 30 days
• Request a copy of your data by emailing us at [email protected]

Data retention

We keep your data for as long as your account is active. If you delete your account or request data deletion, we remove all your personal data and site data within 30 days. Anonymized, aggregated data (like overall usage statistics) may be retained indefinitely.

Children

Scaup is not intended for use by anyone under 18. We do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by email. The "last updated" date at the top of this page reflects the most recent revision.

Contact

Questions about this policy? Email us at [email protected].