Privacy Policy
Effective date: August 26, 2026
Who we are
Beacon is an SEO platform for small businesses. It audits websites, tracks keyword rankings, monitors competitors and backlinks, and can apply approved SEO fixes to sites you connect. This policy explains what information we collect, why we collect it, and the choices you have.
Information we collect
- Account information. Your name, email address, and profile details, provided through our sign-in provider when you create an account.
- Project data. The websites, keywords, and competitors you add, plus the audit results, ranking history, and backlink data we gather about them.
- Site connection credentials. If you connect a site for Auto-Fix (for example a WordPress app password or a store API token), we store that credential encrypted and use it only to read your site content and apply fixes you have authorized.
- Payment information. Payments are processed by Stripe. We never see or store your full card number — we keep only your subscription status, plan, and billing history references.
- Support conversations. Messages you send to our support assistant, so we can help you and review escalated issues.
- Usage and log data. Basic technical information such as IP address and request logs, used for security, rate limiting, and troubleshooting.
How we use your information
- To provide the service: run audits, track rankings, monitor backlinks, and power the AI agents you use.
- To bill your subscription and manage your plan.
- To respond to support requests and resolve issues.
- To secure the service and prevent abuse.
We do not sell your personal information, and we do not use your data for third-party advertising.
Google API data
If you choose to connect a Google account, Beacon may request access to Google Search Console or other Google API data. The authorization screen will identify the specific permissions requested before you grant access. Depending on the features you enable, this data may include the sites and properties you manage, search queries and landing pages, clicks, impressions, click-through rate, average position, countries, devices, dates, sitemaps, and indexing information.
- Purpose. We use Google API data only to provide and improve the user-facing Beacon features you request, such as displaying Search Console performance, reporting SEO trends, identifying opportunities, and generating recommendations for your connected sites.
- Storage and security. OAuth access and refresh tokens are encrypted at rest. Google API data is stored only when needed to provide connected features and is protected using the security measures described in this policy.
- Retention and deletion. We retain Google API data while your Google connection or Beacon account remains active and for no longer than needed to provide the connected features. Disconnecting Google stops new collection. You may request deletion through the in-app support chat; deleting your Beacon account deletes stored Google API data and OAuth tokens, except information we must retain to comply with law or protect the service from abuse.
- Revoking access. You can revoke Beacon's access at any time from your Google Account connections or by disconnecting Google in Beacon. Revocation prevents future access but does not by itself delete data already stored by Beacon; you can request deletion as described above.
- Sharing and human access. We do not sell Google user data. We do not transfer it except to processors that help provide the requested Beacon feature, for security, to comply with law, or as otherwise permitted by Google policy and with any consent Google requires. People do not read Google user data unless you affirmatively authorize access to specific data, access is necessary for security or legal compliance, or the data has been aggregated and anonymized for lawful internal operations.
- Advertising and AI. We do not use Google user data for advertising, retargeting, data brokerage, credit or lending decisions, or to develop, improve, or train generalized or non-personalized AI or machine-learning models.
Beacon's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Service providers we share data with
We use a small number of processors to run Beacon. Each receives only what it needs to do its job:
- Clerk — authentication and account management.
- Stripe — payment processing and subscription billing.
- Search data providers (SerpApi, DataForSEO) — we send the keywords and domains you track to retrieve ranking, volume, and backlink data.
- OpenAI — powers the AI agents, the support assistant, and Auto-Fix suggestion drafting. Relevant content from your projects and connected sites is processed to generate results.
Cookies and sessions
We use cookies to keep you signed in and to secure your session. We do not use third-party advertising or cross-site tracking cookies.
Data retention and deletion
We keep your data while your account is active. You can delete your account and its data at any time from the in-app support chat — the assistant will walk you through a confirmation step, after which your projects, keywords, audits, site connections, and support history are deleted. Billing records held by Stripe are retained as required for tax and accounting law. To prevent a deleted identity from silently recreating an account, Beacon retains only a one-way hash of its identity identifier; this marker contains no email, raw identifier, or billing data.
Security
All traffic is encrypted in transit over HTTPS. Site connection credentials are encrypted at rest with AES-256-GCM. Access to production systems is restricted. No method of transmission or storage is 100% secure, but we work to protect your information with industry-standard measures.
Your rights
Depending on where you live, you may have rights to access, correct, or delete your personal information. You can exercise these at any time through the in-app support chat, and we will respond to verified requests.
Children
Beacon is a business tool and is not directed to children under 16. We do not knowingly collect personal information from children.
Changes to this policy
If we make material changes, we will update this page and revise the effective date above. Continued use of Beacon after a change means you accept the updated policy.
Contact
Questions about this policy or your data? Email jgreen@greenspeed2lead.com. No account or sign-in is required. Customers can also use the in-app support chat while signed in.