Privacy policy

The controller of personal data is Tomasz Flis Tomwebwalker.pl, a sole proprietorship (jednoosobowa działalność gospodarcza), business address: al. Armii Krajowej 64 bl. 16/7, 05-200 Wołomin, NIP: 1251557108 (“we”, “Seonino”).

For anything about your data, write to [email protected]. We have not appointed a Data Protection Officer.

Seonino is a free tool that shows how well AI crawlers can reach, read and trust a website. You enter a URL, we run a Scan and publish a Report under an unlisted link. There are no accounts. This policy covers the data we process for that, and complements the Terms.

If you leave your email address in the audit form, we process your email address, your optional note, a link to the Report you were viewing, the date of your consent, the version of the consent text and the language of the page (together, a Lead).

Purpose and basis: to take steps at your request before a possible contract, namely to contact you about the audit (Article 6(1)(b) GDPR). The required, unticked checkbox is your consent to be contacted by email under the Polish Electronic Communications Law (Prawo komunikacji elektronicznej).

Providing your email address is voluntary, but without it we cannot contact you. We do not store your IP address or browser details on the Lead.

Retention: 12 months from the last contact with you (or from the day you submitted the form, if we have not contacted you yet), then the Lead is deleted automatically. If you become a client, the data moves to our normal business records, kept outside this app for the periods required by law.

You can withdraw your consent at any time by emailing us. We then stop contacting you and delete the Lead.

A Scan fetches public pages of the site you entered (see SeoninoBot) and records Facts such as the brand name, legal name, address, phone number and email. Public pages can show details of individuals, for example a sole trader’s legal name or a contact person’s phone number or email. We do not seek such data out, but a Report may repeat it when it appears on the scanned page.

Purpose and basis: producing the Report that someone asked for, which serves the business or site owner and uses data that is already public (legitimate interest, Article 6(1)(f) GDPR). We use the data for nothing else.

Notice under Article 14 GDPR: we collect these details from public pages without contacting the person. Informing everyone individually would take a disproportionate effort, so we rely on the exemption in Article 14(5)(b) GDPR and publish this policy and the SeoninoBot page as our notice.

Retention: the raw pages we fetched are deleted after 90 days. The Facts in a Report are kept as long as the Report exists. Scores and Check statuses contain no personal data and are kept for aggregate statistics.

Anyone can ask us to remove a Report: the site owner or the person named in it. Email [email protected] with the link to the Report. We handle requests manually within 30 days, after a light check that you are the site owner or the person named.

After removal the Report address returns “410 Gone”, we delete that Scan’s raw fetched pages and erase the Facts. Scores and Check statuses stay as aggregate statistics. Removal does not block a later Scan of the same site.

We share data only with the following processors, under data processing agreements:

• OVH (hosting): our VPS in Poland runs the database, Redis, the app and the worker. Core data (the database and the app) stays in the European Economic Area; Lead notifications pass through Resend (see below).
• Cloudflare: proxy and the Turnstile bot check on our forms (see Technical data).
• Resend (Plus Five Five, Inc.): the email delivery service that sends us a notification with every new Lead in full (email address, note and Report link). Resend is a US company, so this data is transferred outside the EEA on the basis of the EU–US Data Privacy Framework and/or Standard Contractual Clauses (Articles 45 and 46 GDPR).

We do not sell personal data.

To limit abuse we rate-limit requests. For this we keep a salted hash of your IP address (taken from Cloudflare’s CF-Connecting-IP header) in Redis, only for the length of the rate-limit window (at most 24 hours). Our app and container logs never record client IPs and are kept 14 days.

Cloudflare, as proxy and through Turnstile, processes technical data such as your IP address to protect the service. Basis: our legitimate interest in security and abuse prevention (Article 6(1)(f) GDPR).

Seonino sets no non-essential cookies, so there is no cookie banner. Cloudflare Turnstile may use technical storage strictly necessary to tell people from bots, and your choice of language is part of the page address, not a tracking cookie.

If we enable analytics, it is a self-hosted, cookieless Umami instance on our own server. It counts page views without cookies and without building a profile of you.

You have the right to access your data, to have it rectified or erased, to restrict its processing, and to object to processing based on legitimate interest (Article 6(1)(f)). Where we rely on consent, you can withdraw it at any time without affecting earlier processing. To use any of these rights, email [email protected].

You also have the right to complain to the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw.

We may update this policy. The current version is always on this page, with the date it took effect: October 19, 2026.