Varnox Privacy Policy

Varnox application

Varnox is an SEO application published at https://varnox.io/seo-intelligence. This privacy policy explains how that application accesses, uses, stores, shares, and deletes Google user data. The rest of this page also covers visitors to https://varnox.io and clients who contact Varnox.

Google user data the Varnox application accesses: when a person chooses to connect a Google account, the application accesses Google Search Console data (verified sites, queries, landing pages, clicks, impressions, click-through rate, and average position), Google Ads Keyword Planner data (search volume, competition, and bid estimates), Google Analytics data (read-only session and conversion metrics), and Google Business Profile data (locations the person manages and listing performance). It also receives the Google account identity needed to keep that connection. It does not access Gmail, Google Drive, or contacts, and it does not create or run advertising campaigns.

How the Varnox application uses Google user data: the application uses that data only to show ranking, keyword, analytics, and local-listing reports to the people who connected it, and to recommend content and on-page work from those reports. Use is limited to providing and improving those features, in line with the Google API Services User Data Policy, including Limited Use. The application does not use Google user data for advertising, retargeting, credit decisions, lending, or to develop, improve, or train generalized or non-personalized AI or machine-learning models.

Who Google user data is shared with: Varnox does not sell Google user data. Varnox does not transfer or disclose it to advertisers, data brokers, information resellers, or other customers. A hosting or database provider may process it only to store the reports and show them inside the application. Access inside Varnox is limited to the Varnox team and authorized operators of the connected sites.

How Google user data is protected: connections use HTTPS encryption. Report data and the token that keeps the Google connection are stored on access-controlled servers. Security procedures are in place to protect the confidentiality of this data. Google user data is not published on public pages of varnox.io.

How long Google user data is kept, and how to delete it: Varnox keeps fetched reports and the connection token while the Google connection is active and the related project remains in the application. When that period ends, or when the person disconnects Google, Varnox deletes the stored Google report data and token for that connection. A person can remove Varnox at https://myaccount.google.com/permissions, or email [email protected] and ask for the stored Google user data to be deleted.

Who is responsible for your data

The data controller for this website and related enquiries is Varnox. For privacy questions or to exercise your rights, contact us at [email protected].

When we deliver paid work under a separate contract, that agreement may specify additional roles (for example, processor arrangements if we host systems on your behalf).

Information we collect

Depending on how you interact with us, we may process the following categories of information:

• Identity & contact: name, email address, telephone number, company or trading name.
• Enquiry content: messages you send via our contact form, email, or scheduling tools; service interests and budget indications you choose to provide.
• Technical & usage: IP address, browser type, device identifiers, referring URLs, pages viewed, and approximate location derived from IP (via logs or analytics, where permitted).
• Security: signals from spam-protection services (for example Cloudflare Turnstile) and server logs used to detect abuse.
• Contract & billing: where you become a client, business contact details, project correspondence, invoices, and payment references (we do not intentionally collect full payment card numbers on this marketing site).

We do not knowingly collect information from children under 16. If you believe a child has provided data, contact us and we will delete it promptly.

The Varnox application

Varnox is an SEO application at https://varnox.io/seo-intelligence. A person connects their own Google account so the application can read search and listing data for websites they already administer, then show ranking, keyword, analytics, and content reports inside the application. This privacy policy and the application page are public.

Google user data is requested only after a user chooses to connect Google and approves the consent screen. Varnox’s use of that data follows the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the user-facing features described on this page. We do not sell it, and we do not use it for advertising, credit, or unrelated purposes.

Google user data the application collects

When a user connects Google, Varnox may access the following categories of Google user data, limited to accounts and properties that user can administer:

• Google Search Console (read-only): verified sites, search queries, landing pages, clicks, impressions, click-through rate, and average position.
• Google Ads and Keyword Planner: keyword search volume, competition, and bid estimates used to describe demand for those queries. Varnox does not create, edit, or run advertising campaigns with this access.
• Google Analytics (read-only): property and report metrics, such as sessions and conversions, for sites the user connects, so monthly performance can be shown next to search data.
• Google Business Profile: business locations the user manages, and listing performance metrics, so local visibility can be included in the same reports.
• Basic account identity needed to complete the connection, such as the Google account that granted access. Varnox does not request Gmail content, Google Drive files, or contacts.

How the application uses Google user data

Varnox uses the Google user data above only to provide the application’s SEO reports to the people who connected that data:

• Show which queries a site ranks for, on which pages, and how clicks, impressions, and position change.
• Attach Keyword Planner search volume and competition to those queries.
• Show Analytics and Business Profile metrics for the same sites and locations.
• Recommend content and on-page work from gaps in that data.
• Keep a copy of the fetched report so the same authorized users can open it again without downloading it from Google on every visit.

We do not use Google user data to serve ads, to build advertising audiences, to sell data, to train public or generalized AI models, or to determine creditworthiness. We do not transfer it to third parties except the processors described below, who host the application and store the reports on our instructions.

How Google user data is stored, shared, and deleted

• Storage: report data and the refresh token needed to keep the connection are stored on infrastructure we operate for the Varnox application. Access is limited to the Varnox team and authorized operators of the connected sites.
• Sharing: we do not sell Google user data and we do not share it with advertisers, data brokers, or other customers. A hosting or database provider may process it only to store and display the reports.
• Retention: we keep fetched reports while the Google connection is active and the related project remains in the application. If you disconnect Google or ask us to delete a project, we delete the stored Google report data and tokens for that connection.
• Your control: you can remove Varnox at any time from https://myaccount.google.com/permissions. You can also email us at the contact address in this policy and ask us to delete stored Google user data.
• Security: connections use HTTPS. Tokens and report data are stored on access-controlled servers. We do not put Google user data in public pages, marketing pages, or client-facing pages on varnox.io.

Where information comes from

• Directly from you when you submit forms, email us, book a call, or sign an agreement.
• Automatically through cookies, similar technologies, and server logs — see our Cookie Policy.
• From service providers that help us operate the site (hosting, email delivery, analytics when consented).
• From public professional sources (for example, your company website) when relevant to a B2B enquiry.

How and why we use information

We use personal information for the following purposes:

• Respond to enquiries and provide quotations, consultations, and contracted services.
• Operate, secure, and improve our website (including debugging, abuse prevention, and performance measurement).
• Send transactional messages such as enquiry confirmations via email.
• Maintain business records, invoicing, and compliance with law.
• Market our services to existing contacts where permitted — you may opt out at any time.

Legal bases (UK / EEA visitors)

Where UK or EU data protection law applies, we rely on one or more of the following legal bases:

• Consent — for optional analytics/marketing cookies and similar technologies where required.
• Contract — to take steps at your request before a contract or to perform our agreement with you.
• Legitimate interests — to operate and improve our business, secure our systems, and respond to proportionate B2B outreach, balanced against your rights.
• Legal obligation — where we must retain or disclose information to comply with law.

Cookies and similar technologies

We use essential cookies and local storage entries required for security, preferences (such as theme), and remembering your cookie choices. Optional analytics tags (for example Google Tag Manager) load only if you choose “Accept all” on our cookie banner.

For details, including how to change your choice, read our Cookie Policy at /cookies.

Sharing with service providers

We use trusted processors who handle data only on our instructions and for our purposes, including:

• Website hosting and content delivery infrastructure.
• Email delivery (for example Resend) for enquiry notifications and confirmations.
• Cloudflare Turnstile for bot protection on forms.
• Analytics providers loaded via Google Tag Manager when you consent.
• Scheduling tools (for example Cal.com) when you book a meeting through linked flows.

We do not sell your personal information. We may disclose information if required by law, court order, or to protect rights, safety, and security.

International transfers

We and our providers may process data in countries outside your own (including the United States and Pakistan). Where required, we implement appropriate safeguards such as standard contractual clauses or equivalent mechanisms offered by our vendors.

How long we keep information

• Sales enquiries: typically up to 24 months from last contact unless a longer period is needed for an active opportunity or legal claim.
• Client project records: for the life of the engagement plus up to 7 years for tax, warranty, and dispute purposes where applicable.
• Server and security logs: generally 30–90 days unless needed for incident investigation.
• Analytics: according to the retention settings of the relevant tool, subject to your consent.

Security

We apply reasonable technical and organisational measures appropriate to a small professional services business, including TLS encryption in transit, access controls, and vendor due diligence. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

Your rights and choices

Depending on your location, you may have rights to access, rectify, erase, restrict, object to processing, data portability, and withdraw consent (where processing is consent-based). You may also lodge a complaint with your local supervisory authority.

To exercise rights, email [email protected]. We may need to verify your identity before responding. You can change cookie preferences by clearing site data or using the choices described in our Cookie Policy.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last revised. Material changes will be posted on this page.