Legal

Privacy Policy

This policy explains what CalmSEO collects, how we use it, and the choices you have when using the website, dashboard, MCP server, and REST API.

Effective date: June 15, 2026

The short version

CalmSEO is operated by Monolayer Studio LLC, 30 N Gould St., Sheridan, WY 82801. CalmSEO provides SEO data tools through a hosted MCP server, a REST API, and a web dashboard. We collect the information needed to operate accounts, authenticate users, connect Google Search Console, process billing, prevent abuse, and improve the product.

We do not sell personal information. We do not use your Google Search Console data for advertising or to train AI models.

Information we collect

Account and authentication information

When you sign in, we collect your email address and authentication records such as one-time-password verification data, sessions, IP address, user agent, and timestamps.

Google Search Console connection data

If you connect Google Search Console, CalmSEO requests read-only Search Console access and your Google account email. We store OAuth tokens, token expiry details, granted scopes, connected property URLs, permission levels, and related timestamps so CalmSEO can retrieve your Search Console data when you ask for it.

Usage and API data

We store API key metadata, credit balances, credit ledger entries, tool names, usage metadata, and OAuth handoff information needed to authorize MCP clients and account activity. API keys are stored using hashes and encryption rather than as plain text secrets.

Billing information

Paid plans are handled through Stripe. CalmSEO stores Stripe customer and subscription identifiers, plan status, payment method brand and last four digits, billing email or name if provided by Stripe, and billing event records. We do not store full payment card numbers.

Analytics and technical logs

We use privacy-friendly website analytics to understand page views and product interest. Hosting, security, and application providers may process technical information such as IP address, user agent, request URL, timestamps, and error logs.

How we use information

  • Provide, secure, and maintain CalmSEO accounts and sessions.
  • Send sign-in codes, account emails, support replies, and service notices.
  • Authorize MCP clients and REST API requests.
  • Retrieve Google Search Console data when requested by your account.
  • Run SEO data requests, measure credits, enforce limits, and prevent abuse.
  • Process subscriptions, plan changes, invoices, and billing support.
  • Debug errors, improve reliability, and understand product usage.
  • Comply with legal obligations and protect CalmSEO, users, and others.

How information is shared

We share information with service providers only as needed to operate CalmSEO. These providers include infrastructure and database hosting, email delivery, analytics, payment processing, Google APIs, and SEO data providers.

Some SEO tools require sending the keyword, URL, domain, location, or language in your request to third-party SEO data providers so the tool can return results. Google Search Console requests are sent to Google using your connected read-only authorization.

If you connect CalmSEO to an AI assistant or other MCP client, that client may receive tool descriptions and tool results needed to answer your prompt. Your use of that client is governed by its own privacy terms.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of CalmSEO, users, or the public.

Retention and deletion

We keep information for as long as needed to provide CalmSEO, maintain records, resolve disputes, enforce agreements, and comply with legal obligations.

You can disconnect Google Search Console from the CalmSEO dashboard. Disconnecting removes the stored Search Console OAuth connection and associated property list from CalmSEO.

To request account deletion or access to your personal information, contact us at legal@calmseo.com.

Security

We use technical and organizational safeguards designed to protect account data, OAuth tokens, API keys, and billing records. No internet service can guarantee absolute security, so you should keep your email account and CalmSEO API keys secure and rotate keys if you believe they may have been exposed.

Controls and choices

  • You can sign out from the dashboard account menu.
  • You can rotate your REST API key from the dashboard.
  • You can disconnect Google Search Console from the dashboard.
  • You can manage paid subscriptions through the billing portal.
  • You can contact us with privacy requests or questions.

Changes to this policy

We may update this Privacy Policy as CalmSEO changes. When we make material changes, we will update the effective date and may provide additional notice through the website or by email.

This policy is part of the CalmSEO Terms and Conditions.

Privacy questions can be sent to legal@calmseo.com or by mail to Monolayer Studio LLC, 30 N Gould St., Sheridan, WY 82801.