1. Who we are
Audyt SEO i GEO (SEO and GEO audit) is provided by Double Digital Sp. z o.o. (“we”), the data controller for the data described below.
Double Digital Sp. z o.o., ul. Grzybowska 87, 00-844 Warszawa, Poland, NIP 5273008411, KRS 0000979253. E-mail: kontakt@double-digital.pl.
2. What the service does
You give us the address (URL) of a public website. Our server downloads that page, its robots.txt file, its XML sitemap and a sample of up to 20 internal links, and returns a technical SEO report. The service is available as a plugin in ChatGPT (via the Model Context Protocol) and in a web panel.
3. Data we process
- The URL you submit and the audit report generated from the public website (status codes, titles, headings, links and similar technical data).
- When you use the ChatGPT plugin: an anonymised user identifier that OpenAI sends for rate limiting. We store only a salted one-way hash of it, never the identifier itself. We do not receive your name, e-mail address or the content of your conversation, other than the arguments ChatGPT passes to the tool (the URL and the option to check links).
- Technical request data such as the IP address of the calling server, used transiently and stored only as a salted hash for rate limiting of clients other than ChatGPT.
- Web panel accounts: e-mail address and name needed to sign in, and the audits you run.
Please do not submit URLs that contain personal data, passwords or access tokens (for example in query parameters).
4. Why we process it and on what legal basis
- To run the audit you request and return the result – Art. 6(1)(b) GDPR (providing the service) and Art. 6(1)(f) GDPR (our legitimate interest in operating the service).
- To prevent abuse, enforce rate limits and keep the service secure – Art. 6(1)(f) GDPR.
- To cache recent results and improve the quality of the audit engine – Art. 6(1)(f) GDPR.
5. How long we keep it
- Rate-limit records (hashed identifiers): about 2 days.
- Audit reports: up to 12 months, then deleted automatically.
- Web panel accounts: until you ask us to delete the account.
6. Who processes data for us
- Base44 – application hosting and database.
- Cloudflare and Google Public DNS – DNS lookups of the audited domain names (only the domain name is sent).
- OpenAI – if you use the plugin in ChatGPT, OpenAI processes your conversation under its own privacy policy.
The audited websites receive ordinary HTTP requests from our server, identified by the user agent “SEOAuditAgent/1.0”.
7. Your rights
You can request access to, correction or deletion of your data, restriction of processing, and you can object to processing based on legitimate interest. You also have the right to lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych). To exercise your rights, write to kontakt@double-digital.pl.