Privacy Policy
How BuildForUser protects your privacy, safeguards client information, and complies with the Google API Services User Data Policy.
BuildForUser’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
01.Who We Are & Scope
This Privacy Policy applies to BuildForUser ("BuildForUser", "we", "our", or "us"), operating via https://buildforuser.com and our associated client dashboards, SEO intelligence suites, CMS connectors, and digital growth services.
Our registered operational contact is: hello@buildforuser.com (Founder & Lead Engineer: Rowell Mark Blanca).
We provide web engineering, WordPress development, Next.js / React application hosting, search engine optimization, and marketing telemetry. This policy explains what information we collect, why we collect it, how it is secured, and your control over it.
02.Information We Collect
Account & Contact Details
When you create an account, register a website, or request an audit, we collect your name, business email address, company name, and website URLs.
Website Technical Telemetry
Public website data including HTTP headers, title tags, meta descriptions, Schema JSON-LD markup, Google Lighthouse scores, and sitemap XML structures.
Google OAuth Tokens (Optional)
When you choose to connect Google Search Console or Google Analytics, we store encrypted OAuth access and refresh tokens strictly for querying your verified properties.
Session & Usage Metrics
Standard technical logs such as IP address, browser user-agent, session timestamps, and dashboard interactions for security and rate-limiting.
03. Google User Data Policy & Limited Use
BuildForUser allows website owners and managers to connect their Google Search Console and Google Analytics 4 accounts to visualize real organic search reach. This section details our strict adherence to Google's API User Data requirements:
Requested Google OAuth Scopes:
- https://www.googleapis.com/auth/webmasters.readonlyRead Google Search Console verified sites, query impressions, clicks, & rankings
- https://www.googleapis.com/auth/analytics.readonlyRead Google Analytics 4 traffic sessions & conversion event counts
- https://www.googleapis.com/auth/userinfo.email & openidAuthenticate authorized Google identity
How We Use Google Data:
- Direct Dashboard Display: To calculate and display real organic clicks, keyword queries, average SERP rankings, and click-through rates (CTR) inside your authorized BuildForUser SEO Command Center.
- Actionable Content Recommendations: To generate suggestions for on-page SEO improvements based on real queries that already generate impressions.
- Strict Client Scoping: Credentials and performance data are bound exclusively to the client website you specify and are completely isolated from other accounts.
What We NEVER Do with Google Data:
We do not sell, rent, license, or monetize Google user data to data brokers, advertising networks, or third parties.
Google user data is never used to train, develop, fine-tune, or improve generalized machine learning or artificial intelligence models.
04.Security & AES-256 Encryption
We implement industry-standard administrative, physical, and technical safeguards:
- Encryption at Rest: All third-party OAuth access tokens and refresh tokens are encrypted using AES-256-CBC cryptography with unique initialization vectors (IV) before writing to our persistent database.
- Encryption in Transit: All HTTP communications with BuildForUser and third-party APIs (Google, Stripe, etc.) are strictly enforced via TLS 1.3 / HTTPS.
- Role-Based Access Control: Access to client data is compartmentalized. Regular client accounts can only access websites explicitly delegated to them.
05.Data Retention, Disconnection & Deletion
You maintain complete ownership and control of your integrations:
1-Click Immediate Disconnect
You can revoke access to Google Search Console or GA4 at any moment by clicking "Disconnect for this Client" in your SEO Command Center or Dashboard Settings. Doing so immediately purges all encrypted tokens from our database.
You may also revoke BuildForUser’s access directly through Google’s official security portal at Google Account Permissions (myaccount.google.com/permissions).
06.Your Privacy Rights (GDPR & CCPA/CPRA)
Depending on your location, you have statutory rights regarding your personal information, including:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete records.
- Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your account and records.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
To exercise any of these rights, email us directly at hello@buildforuser.com. We respond to all requests within 30 days.
07.Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our legal obligations or technology stack. When revisions occur, we update the "Effective" date at the top of this page. Substantial changes will be communicated via notification in your dashboard or by email.
Questions Regarding Your Privacy?
Contact our engineering and compliance desk directly.
If you have questions about this policy, Google API data usage, or wish to request data deletion, please reach out to: