Privacy policy
Last updated: October 10, 2026
This policy explains how Iron Noodle Technologies ("Iron Noodle", "we", "us") handles information when you visit seocommand.center (the "Site") or use SEO Command Center (the "Service"). We keep it plain: we collect what we need to run the Service, we protect it, and we do not sell it.
1. Information we collect
Information you give us
- Account information: your name, username, email address, role and the organization you belong to.
- Content you add: the websites, keywords, offices, notes, onboarding documents, questions and settings you enter into the Service.
- Lead records: when you connect call, chat or form logs (for example a shared spreadsheet), the entries in them, which may include the names, contact details and messages of people who contacted your business.
Information from services you connect
- Google Analytics and Google Search Console: read-only traffic and search performance data for the properties you choose. See Google user data.
- Website platforms: page content and settings from WordPress or Webflow sites you connect, so the Service can measure pages and apply changes you approve.
- Other tools you connect, such as task management (for example Bitrix24) or search data providers, only as needed for the features you use.
Sign-in credentials for these services are never typed into the Service where the service offers its own sign-in. The access tokens they issue are stored encrypted.
Information collected automatically
- Usage and log data: actions taken in the Service (for example which reports were run), timestamps, browser type and IP address, used to operate, secure and meter the Service.
- Public web data: the Service measures public search results, public web pages and AI assistant answers about the businesses you track.
2. How we use information
- To provide the Service: measuring search and AI visibility, preparing reports, drafting and applying the changes you approve, and keeping history.
- To secure the Service, prevent abuse, and meter paid actions and spending limits.
- To support you and communicate about your account and the Service.
- To improve the Service, using aggregated or de-identified information.
- To meet legal obligations.
We do not sell personal information, and we do not use it for advertising.
3. Google user data
When you connect a Google account, the Service requests read-only access to Google Analytics (analytics.readonly) and Google Search Console (webmasters.readonly). We use this data only to show traffic and search performance for the sites you link, inside your account and the reports you generate.
SEO Command Center's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not use Google user data for advertising, we do not sell it, we do not use it to train general AI models, and people at Iron Noodle Technologies do not read it except with your permission, for security, or as the law requires.
You can disconnect a Google account at any time from the site's settings in the Service, or revoke access from your Google account's security settings.
4. AI providers
Some features send content to AI model providers to produce analyses, drafts and answers, for example page text to draft a description, or a question to the in-app helper. We send only what a feature needs, under agreements that do not allow the provider to use it to train their models where such terms are offered. To measure AI visibility, the Service also asks public AI assistants questions about the businesses you track.
5. How we share information
- Service providers that host and run the Service for us, such as cloud hosting, AI model providers and search data providers, bound to use information only to serve us.
- Services you connect, when you ask the Service to send work to them (for example creating a task in your task system).
- Your organization: people in your account, and an agency account above it, can see the information in that account according to their roles.
- Legal and safety: when required by law, or to protect rights, safety and the integrity of the Service.
- Business transfers: as part of a merger, acquisition or sale of assets, subject to this policy.
6. Cookies
The Service uses one essential cookie to keep you signed in. The Site does not use advertising cookies or third-party tracking scripts. Your browser may store small preferences, such as a light or dark theme, on your own device.
7. How long we keep information
- Account information and content: while your account is active, and for a reasonable period afterwards to allow recovery, unless you ask us to delete it sooner.
- Call, chat and form lead records: up to 15 months, then removed automatically.
- Logs: for as long as needed to operate, secure and meter the Service.
8. Security
Information is encrypted in transit. Passwords are stored as hashes, and tokens for connected services are encrypted at rest. Access inside the Service is limited by roles and by account. No system is perfectly secure, so we also monitor for and respond to incidents.
9. Your choices and rights
You can update your account information, disconnect any connected service, and ask us to access, correct, export or delete personal information we hold about you. Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or the GDPR, including the right to object to or restrict certain processing. We will not discriminate against you for exercising these rights. To make a request, use the contact details below.
10. Our customers' data
Businesses and agencies that use the Service decide what websites, documents and lead records to bring into it. For that information we act on our customers' instructions. If your information appears in a customer's records (for example as a lead), please contact that business first; we will help them respond.
11. Children
The Service is for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.
12. International transfers
We and our providers may process information in the United States and other countries. Where required, we use appropriate safeguards for these transfers.
13. Changes to this policy
We may update this policy. We will change the date at the top and, for material changes, give notice in the Service or by email before they take effect.
14. Contact
Questions or requests about privacy: privacy@seocommand.center.