Privacy policy.

This policy explains what data Traffivio AI (“Traffivio”, “we”) collects through the traffivio.com website, the Traffivio iOS app and the Traffivio Android app (package com.traffivio.app), why, who we share it with, how long we keep it and how you can delete it. Data sent between the apps, the website and our servers is encrypted in transit (HTTPS).

Data we collect and why

Account data: email address, password hash (or Sign in with Apple / Google identifier), user ID, account ID and session identifiers — to create and secure your account. We do not collect your name.
Project data: website URLs, App Store app IDs, goals, audit findings, AI proposals, approvals, backups and activity history — to provide the service.
Integration data: optional read-only Google Search Console performance data, including when you connect it from the iOS or Android app, and encrypted credentials for connections you add — only to show results and apply changes you approve.
Usage data: first-party analytics (screens, taps, errors and app version) and a first-party install ID — to operate and improve the app. If you turn notifications on, we also store an optional Expo push token for that device.
Purchase data: on iOS, signed transaction details from Apple (product, dates, status); on Android, purchase history from Google Play Billing (product, dates and status). Our server verifies Android purchase tokens with the Google Play Developer API. We never receive card details.

We do not use data for tracking across other companies’ apps or websites, do not sell personal data and do not show ads in the app. The Android app does not collect the Google Advertising ID and does not include advertising or ad SDKs. Apple Search Ads attribution (Apple’s AdServices framework) is iOS-only.

Third parties

Apple — Sign in with Apple, In-App Purchase on iOS, and push notifications on iOS.
Google — Google Sign-In, Google Play Billing for Android subscriptions and action packs, Google Search Console (read-only), and optional website analytics.
Expo — delivers optional push notifications. If you turn them on, we send the Expo push token to Expo so the notification can be delivered.
AI processing provider — generates proposals from limited project summaries; not used to train general models.
Hosting provider — stores and serves our servers and email.

Essential operation

The website and its hosting provider process technical request information needed to serve pages and protect the service. Your analytics choice is saved in your browser for up to six months. The administrative area uses essential session cookies and is not included in website analytics.

Optional Google Analytics

If you choose “Allow analytics”, we load Google Analytics using measurement ID G-DZB4PH2JZX to measure visits and clicks on the public website’s workspace links. Google may process device, browser and usage information and set analytics cookies. Advertising personalization and Google signals are disabled. URL query parameters are excluded from the page address we send; project URLs, credentials and admin activity are not sent.

Analytics is not loaded before consent. You can reject it or change your choice below. Rejecting analytics does not prevent use of the website. Google privacy information.

No-account Quick Scan

The Quick Scan on the free SEO audit page is protected by Cloudflare Turnstile. When you use it, Cloudflare runs a security check in your browser and we send the resulting token and your IP address to Cloudflare to confirm it. We store the website URL you entered and the scan result for 24 hours, and keyed hashes of your network address for rate limits; we do not store the raw IP address with the scan. Cloudflare privacy policy.

Workspace data

When you register, we store your email, a password hash and session identifiers. Your workspace stores the website URL, goal, market, audit findings and activity needed to provide this preview. Public audits fetch only publicly reachable HTML. The workspace and admin area do not load Google Analytics.

You can export your workspace data and delete your account from Account settings. Deletion removes active workspace records and revokes sessions. Encrypted deployment backups may retain older records until those backups are retired. Confirmation and password-reset emails are queued for delivery through the hosting mail service; delivery is not guaranteed.

Google Search Console data

If you choose to connect Google Search Console, Traffivio requests only the read-only scope https://www.googleapis.com/auth/webmasters.readonly. We use it to list the Search Console properties you can access and to read search performance data (queries, pages, clicks, impressions, click-through rate and average position) for the property you link to your project. Traffivio cannot change your Search Console settings, properties, sitemaps or users.

We use this data only to show you reports, audits and recommendations inside your own workspace. If you turn on optional AI recommendations, a limited summary of this data (for example top queries and pages with their metrics) is sent to our AI processing provider solely to generate recommendations for you; it is not used to train generalized AI models. We do not sell Google user data, use it for advertising, or share it with anyone else except as needed to provide the features you use, to comply with law, or with your permission. Our staff do not read it except with your consent, for security, or to comply with law.

Limited Use. Traffivio’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Storage, retention and deletion of Google data

Google refresh tokens are stored encrypted on our servers and are never shown in the browser. Search Console data and recommendations derived from it are kept only as long as needed to provide your reports and to measure the results of changes you approved. You can disconnect Google Search Console in your project at any time; disconnecting deletes the stored token and cached Google data from active records, and we attempt to revoke the token with Google. You can also revoke access at myaccount.google.com/permissions. Deleting your account removes all of this data from active records; encrypted deployment backups may retain older records until those backups are retired.

Other integrations

Optional connections such as SFTP, WordPress or GitHub are used only to apply changes you approve. Their credentials are stored encrypted and are deleted when you disconnect them or delete your account. Do not send passwords, API keys or private project details through public links.

Retention

We keep account and project data while your account is active. Integration data is kept only as long as needed for reports and result checks. After deletion, records are removed from active systems; encrypted backups are retired on a rolling basis.

Delete your account

In the iOS app and the Android app: Account → Delete account → Delete my account. On the web: Account settings. Or email support@traffivio.com from your account email and we will delete it. Deletion removes your projects, history, connections and stored credentials. Apple subscriptions are managed by Apple — cancel them in your Apple ID settings. Google Play subscriptions are managed by Google — cancel them in the Google Play Store. Website subscriptions can be cancelled from your account or the receipt Paddle sends you.

Children

Traffivio is a business tool and is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect their data; contact us and we will delete it.

Your rights and contact

You can access, export, correct or delete your data at any time. Questions: support@traffivio.com · Support.

Changes

You can export your data or delete your account at any time in Account settings. We will post changes to this page with a new date. See also our Terms of service and Refund policy.

App analytics. The Traffivio iOS and Android apps send first-party usage events to our own servers only: screens opened, taps, errors, app version, a first-party install ID, and funnel steps (sign-up, site connected, proposals, approvals, purchases). On iOS we record where an install came from (Apple Search Ads attribution through Apple’s AdServices framework, provided by Apple without any device advertising identifier, a referral invite code, or organic). AdServices and Apple Search Ads attribution are iOS-only. The Android app does not collect the Google Advertising ID and does not include advertising or ad SDKs. We do not use the IDFA, do not track you across other companies’ apps or websites, and do not use third-party analytics in either app. If you opt in, we store an Expo push token and record notification opt-in and opens; you can turn notifications off in iOS Settings or Android system settings.

Purchases and consent records. Purchases on the website are processed by Paddle, which is the merchant of record; Paddle sends us payment status and the plan you bought, never your full card details. Purchases in the iPhone app are made through Apple; Apple processes payment and sends us only signed transaction details (product, dates, status), never your card. Purchases in the Android app (package com.traffivio.app), including subscriptions and action packs, are processed by Google Play Billing. Google processes payment. The app sends the product id and purchase token to our server, which verifies the purchase with the Google Play Developer API and stores the purchase record (product, dates and status). We never receive your card details. We store the version and time you accepted the Terms and Privacy Policy.