CebuHub

Privacy Policy

This Privacy Policy describes how CebuHub ("we," "us," or "our") collects, uses, and discloses your personal information when you use our technical SEO audit platform and services. We are committed to protecting your privacy in compliance with international data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Philippine Data Privacy Act of 2012 (RA 10173).

1. Information We Collect

We collect information to provide better services to our users. The types of information we collect include:

  • Account Information: When you sign up via Email or Google OAuth, we collect your name and email address.
  • Audit Data: We collect the URLs you submit for crawling and the resulting technical SEO findings, which are stored in our secure database.
  • Usage Information: We collect data about your interactions with our site, including IP addresses, browser types, and access times.
  • Payment Information: Payment processing is handled by our Merchant of Record (MoR), Lemon Squeezy. We do not store full credit card details on our servers; however, we receive transaction confirmation and subscription status.

2. How We Use Your Information

We use the collected data for the following purposes:

  • Service Delivery: To execute Free Shallow Audits and Full Crawls, and to generate AI-driven developer briefs using Vertex AI.
  • Communication: To send magic links for authentication, transactional receipts, and notifications regarding your audit status.
  • Improvement: To monitor and analyze platform performance and prevent abuse or unauthorized crawling.
  • Compliance: To fulfill legal obligations, such as tax reporting requirements handled through our MoR.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for processing your data is:

  • Performance of a Contract: Processing is necessary to provide the services you requested.
  • Legitimate Interests: To improve our services and ensure the security of our platform.
  • Consent: Where you have given clear consent for specific processing (e.g., marketing communications).

4. Data Sharing and Third-Party Services

We share your data only with service providers necessary for our operations:

Provider

Google Cloud

Purpose

Hosting (Cloud Run), Database (Cloud SQL), and AI Analysis (Vertex AI).

Lemon Squeezy

Merchant of Record for global payment processing and tax compliance.

Resend

Delivery of transactional emails and authentication links.

Auth.js

Management of secure user authentication sessions.

5. International Data Transfers

CebuHub is operated from the Philippines. Your information may be transferred to and maintained on computers located outside of your state or country, specifically in the United States or Singapore, where our Google Cloud infrastructure is hosted. By using the service, you consent to this transfer.

6. Your Rights and Choices

Depending on your location, you may have the following rights:

  • Access & Portability: Request a copy of the personal data we hold about you.
  • Correction: Request that we update or correct inaccurate information.
  • Deletion: Request the deletion of your account and associated personal data.
  • Object or Restrict: Object to the processing of your data for specific purposes.
  • Withdraw Consent: Withdraw your consent for data processing at any time.

To exercise these rights, please contact us at Person.

7. Data Security

We implement industry-standard security measures, including:

  • SSRF Protection: All outbound fetches are routed through a hardened utility to prevent internal infrastructure access.
  • Encryption: Data is encrypted in transit and at rest within Google Cloud SQL and Secret Manager.
  • Authentication: Secure sign-in via magic links and Google OAuth.

8. Data Retention

We retain your personal information only for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Audit findings are stored to provide crawl history but may be deleted upon account termination or at your request.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us.