隐私政策 / Privacy Policy

我们仅收集为您提供服务所必需的数据：

• 账号信息：您通过 Google OAuth 登录时获取的邮箱地址和姓名。
• 站点信息：您在 Loomaly 中添加和管理的网站域名。
• Google Search Console (GSC) 数据：在您逐站点显式授权后，我们通过 Google API 拉取的搜索查询、点击数、展示数、点击率、平均排名等数据。
• 公开性能数据：来自 Google PageSpeed Insights 与 CrUX 的公开页面性能数据（不涉及个人隐私）。
• 页面内容：我们保存每个被审计页面的抽取结果（标题、描述、标题层级、链接、结构化数据和约 4,000 字的正文样本），用于展示问题、解释判断和对比历次审计；完整 HTML 原文只短期缓存，不长期保存。
• 使用与计费记录：LLM token 用量、套餐余额等用于计费的数据。
• 支付信息：信用卡信息由 Stripe 直接处理，我们不接触也不存储您的卡号。

• 为您生成 AI SEO 审计报告与改进建议；
• 在您的 Loomaly 控制台展示搜索表现指标；
• 按流量影响优先级排序审计发现；
• 计费、套餐余额管理与发票开具；
• 发送服务相关邮件通知（如审计完成、连接失效等）。

我们仅在您按站点显式授权 Google OAuth 后访问您的 GSC 数据。我们使用 GSC 数据仅限于：（a）在您的 Loomaly 控制台展示搜索表现指标；（b）按流量影响为 SEO 审计发现排定优先级；（c）在您点击时代您向 Search Console 提交 sitemap（这是我们唯一的写操作）。

我们绝不共享、出售、或将 GSC 数据用于广告投放、训练 AI 模型，或任何与您的 Loomaly 使用体验无关的目的。为生成您看到的优先级排序，GSC 数据可能会交给 AI 模型即时处理，但不会被保存用于训练。

Loomaly 对从 Google API 获得的信息的使用和传输，遵守 Google API 服务用户数据政策，包括其中的「有限使用」要求。

Refresh token 在 D1 数据库中以 AES-GCM 加密静态存储。您可以随时在站点设置中断开连接，或前往 myaccount.google.com/permissions 撤销授权。断开后我们会立即删除对应的 refresh token。

为了提供服务，我们使用以下第三方平台：

• Cloudflare：托管、Workers 运行时与 D1 数据库；
• Google APIs：OAuth 登录、Search Console、PageSpeed Insights、CrUX；
• Cloudflare Workers AI：AI 模型推理，包括 TypeSafe 的 Jev 判断模型（经 Cloudflare 提供），用于判断页面内容、生成修复建议和对话；
• Stripe：支付处理；
• Cloudflare Email Service：交易邮件发送。

这些服务有各自的隐私政策，您的数据在传输到它们时受其条款约束。

• GSC 数据：滚动保留 28 天；
• 审计发现：在您主动删除前永久存储；
• Refresh token：加密存储；您断开连接时立即删除；
• 页面 HTML：仅短期分析使用，不长期存储原文。

Loomaly 的运营者位于中国香港特别行政区，按香港《个人资料（私隐）条例》处理个人资料；如您所在地的法律（如 GDPR、CCPA）给予您更多权利，我们同样遵守。您对自己的数据享有以下权利：

• 访问权：导出您的账号和审计数据；
• 删除权：删除您的账号和所有相关数据；
• 数据可携权：以机器可读格式获取您的数据；
• 撤回授权：随时撤销 Google OAuth 授权或断开 GSC 连接；
• 更正权：更正不准确的个人信息。

如需行使上述权利，请联系 privacy@loomaly.com。

Loomaly 仅使用一个必要的 session cookie（由 better-auth 设置，HTTPOnly、SameSite=Lax）以维持您的登录状态。我们不使用第三方 tracking cookie，也不投放广告。

我们使用 Cloudflare Web Analytics 和 Databuddy 统计访问量、来源网站和页面性能，两者都不设置 cookie，也不跨网站追踪您。 我们还会在服务器端统计注册、扫描等关键步骤的次数，不关联您的账号或邮箱。 您的浏览器会在当前标签页的 sessionStorage 里记下您是从哪个网站来的（例如 news.ycombinator.com），关闭标签页即清除。

Loomaly 部署在 Cloudflare 全球边缘网络，数据可能在最近的边缘节点处理。Google API（GSC、PSI、CrUX）由 Google 在美国及全球数据中心提供。我们在所有传输中使用 TLS 加密。

如对本隐私政策有任何疑问或投诉，请发邮件至 privacy@loomaly.com。

我们可能会不时更新本政策。重大变更会通过邮件通知您，并在本页面更新"Last updated"日期。继续使用服务即视为您接受更新后的政策。

We collect only the data necessary to provide the service:

• Account info: your email address and name, obtained via Google OAuth sign-in.
• Site info: domains you add and manage in Loomaly.
• Google Search Console (GSC) data: search queries, clicks, impressions, CTR, and average position, fetched via Google APIs after your explicit per-site authorization.
• Public performance data: page performance from Google PageSpeed Insights and CrUX (no personal data).
• Page content: for each audited page we keep what we extract from it (title, description, headings, links, structured data and a text sample of about 4,000 characters) to show issues, explain judgments and compare audits over time. The full HTML is only cached briefly, never kept long-term.
• Usage & billing records: LLM token usage and plan balance for billing.
• Payment info: credit card data is processed directly by Stripe; we never see or store card numbers.

• To generate AI-powered SEO audit reports and recommendations;
• To display search performance metrics in your dashboard;
• To prioritize audit findings by traffic impact;
• For billing, balance management, and invoicing;
• To send service-related email notifications (audit completion, connection expiry, etc.).

We access your Google Search Console data ONLY after you explicitly authorize the connection per-site. We use your GSC data EXCLUSIVELY to: (a) display search performance metrics in your Loomaly dashboard, (b) prioritize SEO audit findings by traffic impact, (c) submit a sitemap to Search Console when you click to do so — the only write we make.

We DO NOT share, sell, or use GSC data for advertising, training AI models, or any purpose unrelated to your Loomaly experience. To produce the ranking you see, GSC data may be processed by an AI model at request time; it is not kept for training.

Loomaly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Refresh tokens are AES-GCM encrypted at rest in our D1 database. You can revoke access at any time by disconnecting in site settings, or at myaccount.google.com/permissions. Upon disconnection, your refresh token is deleted immediately.

To deliver the Service, we rely on the following providers:

• Cloudflare — hosting, Workers runtime, and D1 database;
• Google APIs — OAuth sign-in, Search Console, PageSpeed Insights, and CrUX;
• Cloudflare Workers AI — AI model inference, including TypeSafe's Jev judgment model served through Cloudflare, to judge page content, write fix suggestions and power the chat;
• Stripe — payment processing;
• Cloudflare Email Service — transactional email delivery.

Each provider has its own privacy policy that governs data while it is in their care.

• GSC data: rolling 28-day window;
• Audit findings: stored until you delete them;
• Refresh tokens: encrypted; deleted immediately on disconnect;
• Page HTML: used transiently for analysis only; originals not retained long-term.

Loomaly is operated from the Hong Kong Special Administrative Region and handles personal data under Hong Kong's Personal Data (Privacy) Ordinance; where the law where you live (such as the GDPR or CCPA) gives you more, we follow it too. You have the following rights regarding your data:

• Access — export your account and audit data;
• Deletion — delete your account and all related data;
• Portability — receive your data in a machine-readable format;
• Withdraw consent — revoke Google OAuth authorization or disconnect GSC at any time;
• Correction — correct inaccurate personal information.

To exercise any of these rights, email privacy@loomaly.com.

Loomaly uses a single essential session cookie (set by better-auth, HTTPOnly, SameSite=Lax) to keep you signed in. We do not use third-party tracking cookies, and we do not run ads.

We measure visits, referring sites and page performance with Cloudflare Web Analytics and Databuddy. Neither sets cookies or tracks you across sites. On our servers we also count key steps such as sign-ups and scans, without tying them to your account or email. Your browser keeps the site you arrived from (for example, news.ycombinator.com) in this tab's sessionStorage; it is cleared when you close the tab.

Loomaly runs on Cloudflare's global edge network, so data may be processed at the edge node nearest you. Google APIs (GSC, PSI, CrUX) are served from Google's data centers in the United States and globally. All transfers use TLS encryption.

For questions or complaints about this Privacy Policy, please email privacy@loomaly.com.

We may update this Policy from time to time. Material changes will be communicated by email, and the "Last updated" date at the top of this page will be revised. Continued use of the Service after an update constitutes acceptance of the revised Policy.