Built by SEO

Privacy Policy

Last updated: 14 May 2026

This privacy policy covers the Built by SEO website (builtbyseo.com) and all apps published by Paul Lovell, including IndexNow Sync, Google Indexing, and Google Search Console Plus.

1. Who we are

Built by SEO is operated by Paul Lovell. We build HubSpot apps and SEO tooling. Questions about this policy should be directed to our contact page.

2. What data we collect

This website

When you use the contact form on this site, we collect your email address and the message you submit, solely to respond to your enquiry. We do not use cookies, analytics scripts, or tracking pixels. Contact form submissions are sent via Resend and are not stored in a database.

IndexNow Sync

When you install IndexNow Sync we collect and store:

  • Your HubSpot portal ID and domain
  • OAuth tokens required to read your HubSpot content (stored encrypted)
  • Your installer email address, used for the welcome message and to pre-fill checkout
  • Your Bing IndexNow API key (stored encrypted)
  • A log of URLs submitted to Bing, including submission status codes and timestamps
  • Stripe customer and subscription IDs — no card details are stored by us

Google Indexing

When you install Google Indexing we collect and store:

  • Your HubSpot portal ID and domain
  • OAuth tokens required to read your HubSpot content (stored encrypted)
  • Your Google service account JSON key (stored encrypted), used solely to authenticate requests to the Google Indexing API
  • A log of URLs submitted to Google, including submission status codes and timestamps
  • Stripe customer and subscription IDs — no card details are stored by us

Google Search Console Plus

When you install Google Search Console Plus we collect and store:

  • Your HubSpot portal ID and domain
  • OAuth tokens required to read your HubSpot content (stored encrypted)
  • OAuth tokens to access your Google Search Console data on your behalf (stored encrypted)

Search Console performance data (impressions, clicks, positions) is retrieved in real time and displayed within HubSpot. We do not store Search Console data on our servers.

3. How we use your data

We use the data we collect to:

  • Provide and operate the service you installed
  • Process payments and manage your subscription via Stripe
  • Send an initial welcome email via Resend (IndexNow Sync and Google Indexing)
  • Power in-app dashboards and submission logs
  • Debug issues and improve reliability

We do not use your data for advertising or sell it to third parties.

4. Data sharing

We do not sell your data. We share data only with the following processors, where necessary to deliver the service:

  • Stripe — payment processing and subscription management
  • Resend — transactional email delivery
  • Bing / Microsoft — URL submission via IndexNow (IndexNow Sync only)
  • Google — URL submission via the Indexing API and retrieval of Search Console data
  • Vercel — hosting and serverless function execution
  • Supabase — database storage for installation and submission data

5. Data retention

  • Installation data (portal ID, OAuth tokens, API keys) is retained for as long as your account is active
  • Submission logs are retained for 90 days, then deleted automatically
  • On uninstalling an app you may request full deletion of your data via our contact page

6. Security

Sensitive credentials — including OAuth tokens and API keys — are encrypted at rest. All data is transmitted over HTTPS. We follow industry-standard practices to protect your data, but no system is completely secure and we cannot guarantee absolute security.

7. Your rights

You have the right to access, correct, or request deletion of your personal data at any time. To exercise these rights, contact us via our contact page. We will respond within 30 days.

8. HubSpot data

All apps access HubSpot only with the permissions explicitly required for their function. We do not access contact records, deal data, or CRM data beyond what is necessary to operate the app.

9. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects when changes were last made. Continued use of the site or apps after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Get in touch via our contact page.