deldov

Legal

Privacy Policy

Last updated: July 1, 2026

deldov ("we", "our", or "the service") is an SEO SaaS operated by a solo founder at https://deldov.vercel.app. This policy explains what data we collect, why we collect it, and how you can control it. Contact: shuee@trycommonplace.com

1. What we collect and why

Account and authentication

We use Clerk for authentication. When you sign in with Google or email, Clerk provides us with your name, email address, and a unique user ID. We store your user ID to associate your data with your account. We do not store your password.

Site data you add

When you add a website to deldov, we store the URL you provide. We crawl that site to collect SEO-relevant data (page titles, meta descriptions, headings, status codes, canonical URLs, and link structure). Crawl data is stored in our database and associated with your account.

Google Search Console data

If you connect Google Search Console, we request read-only access using the webmasters.readonly OAuth scope. We use this to pull search analytics (clicks, impressions, CTR, and position by query, page, and date) into your deldov dashboard. We store OAuth tokens encrypted at rest using AES-256-GCM. We never write to your Google Search Console property.

CMS credentials

If you connect a CMS (Webflow, WordPress, Shopify, Wix), we store the API credentials you provide. These credentials are encrypted at rest using AES-256-GCM before being written to our database. They are decrypted only in server-side code when publishing content on your behalf.

AI content generation

When you use deldov's content generation features, your site data and SEO context are sent to Anthropic's API to produce draft content. We do not persist the raw prompts or raw model responses beyond what is needed to display your results. Anthropic's privacy policy governs their handling of API inputs.

Payments

Billing is handled by Stripe. We do not store payment card details. Stripe provides us with a customer ID, subscription status, and plan information. Stripe's privacy policy governs their handling of payment data.

Cookies and sessions

We use cookies for authentication and session management only. These are set by Clerk and are necessary for the service to function. We do not use advertising cookies or third-party tracking cookies.

2. How we share your data

We do not sell, rent, or trade your personal data. We share data only with the infrastructure providers necessary to operate the service:

  • Clerk — authentication and user management
  • Neon — PostgreSQL database hosting
  • Vercel — application hosting and edge network
  • Anthropic — AI content generation via API
  • Stripe — payment processing

Each of these providers has their own privacy policy and data processing terms. We share only the minimum data each provider needs to perform their service.

3. Google API Services User Data Policy

deldov's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, deldov:

  • Only requests access to Google Search Console data using the webmasters.readonly scope, which provides read-only access to your Search Console data.
  • Uses Google user data solely to display search analytics within your deldov dashboard and to provide the SEO features you have requested.
  • Does not transfer Google user data to third parties except as necessary to operate deldov or as required by law.
  • Does not use Google user data for advertising or to train AI/ML models.
  • Does not allow humans to read Google user data except where you have given express permission, it is necessary for security purposes, or it is required by law.

4. Data retention

We retain your account data, site URLs, and crawl results for as long as your account is active. If you cancel your account, you may request deletion of your data by emailing shuee@trycommonplace.com. We will delete your data within 30 days of a verified deletion request. Some data may be retained in encrypted backups for up to 90 days after deletion.

5. Your rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Revoke Google OAuth access at any time through your Google account settings
  • Disconnect CMS integrations at any time from your deldov settings

To exercise any of these rights, email shuee@trycommonplace.com.

6. Security

We use industry-standard security practices including TLS encryption in transit, AES-256-GCM encryption for sensitive credentials at rest, and access controls that limit which server-side code can decrypt stored credentials. However, no system is perfectly secure and we cannot guarantee absolute security.

7. Changes to this policy

We may update this policy as the service evolves. We will update the "Last updated" date at the top and, for material changes, notify you by email.

8. Contact

Questions about this policy? Email shuee@trycommonplace.com.