Privacy Policy

Last updated: April 14, 2026

Effective date: April 14, 2026  ·  Governing entity: LazyMetrics Holdings LLC

1. About LazyMetrics

LazyMetrics Holdings LLC ("LazyMetrics", "we", "our", or "us") operates the platforms and tools available at lazymetrics.com and app.lazymetrics.com. We provide SEO audit, analytics reporting, AI visibility tracking, and content workflow tools for digital marketing agencies and website owners.

This Privacy Policy explains what personal data and Google user data we collect, how we use it, who we share it with, and the rights you hold over it. If you have questions, contact us at hello@lazymetrics.com.

2. Data we collect

We collect the following categories of data when you use our platform:

Account data

  • Name and email address, collected when you sign in via Google OAuth.
  • Subscription and billing details (processed by Stripe; we do not store raw card data).

Google account data

  • Google Search Console — search impressions, clicks, average position, connected-property monitoring data, and top page / query performance for properties you explicitly connect. Scope: https://www.googleapis.com/auth/webmasters.readonly. Access is read-only.
  • Google Analytics 4 — session counts, traffic sources, engagement metrics, and conversion data for GA4 properties you connect. Scope: https://www.googleapis.com/auth/analytics.readonly.

Usage data

  • Pages visited, features used, and error logs — collected to improve product reliability.
  • Session cookies for authentication persistence (see Section 10).

3. How we use your data

We use the data we collect for the following purposes only:

  • To generate SEO audit reports and prioritised recommendations for your connected properties.
  • To display search performance, traffic, and AI visibility data within your dashboard and client-facing portals.
  • To automate monthly client reports using your connected data sources.
  • To surface index monitoring insights and direct you to the relevant Google Search Console pages for action.
  • To authenticate your account and maintain your session securely.
  • To process subscription billing through Stripe.
  • To improve the accuracy, reliability, and features of our tools based on aggregated, anonymised usage patterns.

We do not sell your data. We do not use your Google user data to serve advertising, build advertising profiles, or for any purpose unrelated to providing the features you requested.

4. Google API Services — Limited Use disclosure

LazyMetrics' use of information received from Google APIs strictly adheres to the Google API Services User Data Policy, including its Limited Use requirements. Our specific commitments are:

  • Purpose limitation. Google user data is used exclusively to provide and improve user-facing features within LazyMetrics. We do not use this data for any secondary purpose including advertising, profiling, or analytics unrelated to the service.
  • No sale or transfer. We do not sell, rent, or transfer Google user data to any third party. We share data only with sub-processors listed in Section 9 that are strictly necessary to operate the service (e.g. our database provider), and only under equivalent data protection obligations.
  • No use for advertising. We do not use Google user data to serve advertisements, build advertising audiences, or engage in any ad-related processing.
  • No machine learning training. We do not use Google user data to train, fine-tune, or evaluate machine learning or AI models.
  • Human access prohibition. LazyMetrics personnel do not access, read, or process your Google account data except: (a) as technically necessary to deliver the service at your direction; (b) to investigate a security incident you have reported; (c) to comply with applicable law; or (d) with your explicit written consent. In all cases, access is logged and minimised to what is strictly required.

5. Search Console monitoring and indexing guidance

LazyMetrics uses connected Google Search Console property data to monitor index coverage, identify pages that may need attention, and direct you to the relevant Google Search Console interface to inspect or review those URLs.

  • We only display monitoring and guidance data for Search Console properties you explicitly connect to your LazyMetrics account.
  • Any index review or submission action inside Google Search Console is completed by you within your own Google account environment.
  • We do not request or use broader Google permissions than are necessary for the reporting, monitoring, and connected-product functionality described in this policy.

6. Data storage and security

Your data is stored in Supabase, hosted on AWS infrastructure in the United States. We implement the following technical safeguards:

  • Row-level security (RLS) policies ensure your data is only accessible to your account.
  • OAuth tokens are encrypted at rest and are never exposed in client-side code or logs.
  • All data in transit is encrypted via TLS 1.2 or higher.
  • Access to production systems is restricted to authorised personnel and logged.

While we implement industry-standard security measures, no system is completely secure. We encourage you to use a strong password and revoke access to any service you no longer use via your Google Account settings.

7. Data retention

  • Account and audit data is retained for as long as your account remains active.
  • Google user data cached for reporting purposes is retained for a maximum of 13 months from the date of collection, consistent with Google Analytics data retention best practices.
  • Upon account deletion, all personal data and Google user data is permanently deleted within 30 days. Billing records may be retained for up to 7 years as required by applicable financial regulations.
  • If you revoke OAuth access to your Google account via Google Account Permissions, we will cease fetching new data immediately. Cached data will be deleted within 30 days.

8. Agency accounts and client data

If you use LazyMetrics as an agency to manage data on behalf of your clients, the following applies:

  • You are responsible for obtaining any necessary consents from your clients before connecting their Google Search Console or Analytics properties to LazyMetrics.
  • Client portal access is scoped per client — team members only see data for clients they are explicitly assigned to.
  • LazyMetrics processes client data on your behalf as a data processor. You remain the data controller for your clients' data under applicable privacy law.

9. Sub-processors and third-party services

We use the following sub-processors to operate LazyMetrics. Each is bound by contractual data protection obligations:

  • Supabase — database, authentication, and file storage (AWS, US).
  • Vercel — application hosting and edge functions (US and global CDN).
  • Stripe — payment processing (US). Subject to Stripe's Privacy Policy.
  • Sentry — error monitoring and performance tracking (US). Error payloads are anonymised where possible.
  • Google LLC — authentication via Google OAuth and API data access (subject to Google's Privacy Policy).
  • DataForSEO — AI visibility and search result enrichment data for reporting features.

We do not share your personal or Google user data with any third party outside this list except as required by law.

10. Cookies

We use session cookies solely to maintain your authenticated session. We do not use tracking cookies, third-party advertising cookies, or persistent device fingerprinting. You may disable cookies in your browser settings; doing so will require you to log in each session.

11. Your rights

You have the following rights with respect to your personal data:

  • Access. Request a copy of the personal data we hold about you.
  • Correction. Request that inaccurate data be corrected.
  • Deletion. Request that your account and all associated data be permanently deleted.
  • Portability. Request an export of your data in a machine-readable format.
  • Restriction. Request that we restrict processing of your data in certain circumstances.
  • Google access revocation. You may revoke LazyMetrics' access to your Google account at any time via myaccount.google.com/permissions. This immediately stops any new data fetching.

To exercise any of these rights, email hello@lazymetrics.com. We will respond within 30 days. We may need to verify your identity before processing requests.

12. Children's privacy

LazyMetrics is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at hello@lazymetrics.com and we will delete it promptly.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and by posting a notice within the application at least 14 days before the changes take effect. The updated policy will be identified by a revised "Last updated" date at the top of this page. Continued use of LazyMetrics after the effective date constitutes your acceptance of the revised policy.

14. Governing law and contact

This Privacy Policy is governed by the laws of the State of Florida, United States, without regard to its conflict of law provisions.

For any privacy-related questions, data requests, or concerns, contact us at:
hello@lazymetrics.com
LazyMetrics Holdings LLC
1177 Market St
San Francisco, CA 94103, USA