Privacy Policy

Last updated: September 14, 2026

Introduction

Our website and application, referred to collectively as “PlanMoon” in this document, is committed to protecting your privacy. This policy describes how PlanMoon collects, uses, stores, shares, and protects any information you provide us, including information you provide through social media platforms such as Facebook, Instagram, X (Twitter), and LinkedIn, and data we access from Google services on your behalf.

Website Visitors

Like most website operators, PlanMoon collects non-personally-identifying information typically made available by web browsers and servers, such as browser type, language preference, referring site, and the date and time of each visitor request. Our purpose in collecting this information is to better understand how our visitors use our website. We may release non-personally-identifying information in aggregate, such as by publishing reports on website usage trends.

Gathering of personally-identifying information

Certain interactions with PlanMoon require us to gather personally-identifying information. The amount and type of information depend on the nature of the interaction. For example, we ask users who sign up for our services to provide a username and email address. We collect this information only as needed to fulfill the purpose of the visitor’s interaction with PlanMoon and do not disclose it except as described below.

Google User Data

PlanMoon integrates with Google services so that you can analyze your own website and marketing performance inside our product. Access is always initiated by you through Google’s OAuth consent screen, and you can revoke it at any time.

What Google user data we access

When you connect a Google account, we request only the scopes needed for the features you choose to use. These are the only scopes PlanMoon requests:

• openid — used to establish your identity with Google when you sign in.
• https://www.googleapis.com/auth/userinfo.email — your Google account email address, used to create and identify your PlanMoon account.
• https://www.googleapis.com/auth/userinfo.profile — your name and profile picture, used to display your account in the PlanMoon interface.
• https://www.googleapis.com/auth/webmasters.readonly — read-only access to the Google Search Console properties you select, including search queries, impressions, clicks, average position, and page, device, and country breakdowns.
• https://www.googleapis.com/auth/webmasters — used to read your verified Search Console properties and sitemaps, and to submit or update sitemaps for a property at your direction. We use this scope only for actions you explicitly initiate in PlanMoon.
• https://www.googleapis.com/auth/indexing — used to notify Google, at your request, that a page on a site you have verified has been added or updated, so that it can be crawled sooner.
• https://www.googleapis.com/auth/analytics.readonly — read-only access to the Google Analytics accounts and properties you select, including aggregated reporting data such as sessions, users, traffic sources, channel groupings, landing pages, events, and conversions.

We never modify or delete your analytics data, and we cannot do so: the Analytics scope we request is read-only. We do not request access to your Gmail, Google Drive, Calendar, Contacts, or Google Ads.

How we use Google user data

We use Google user data for a single purpose: to make the answers, reports, and recommendations PlanMoon gives you more accurate and more personalized to your own website and audience. Without this connection, PlanMoon can only give you generic advice. With it, we can ground our output in how your site actually performs.

Concretely, we use it to:

• Authenticate you and maintain your PlanMoon account.
• Read your Search Console and Analytics data at the moment you ask for a report, so the visibility, traffic, and keyword figures shown to you are your own.
• Tailor content, outreach, and SEO recommendations to your real search queries, landing pages, and traffic sources rather than to industry averages.
• Submit sitemaps or request indexing of your pages when you explicitly ask PlanMoon to do so.
• Provide customer support when you ask us for help.

We do not store your Google data

Two narrow exceptions apply, and they are the minimum needed for the product to function at all:

• Your account identity — the email address, name, and profile picture returned by the sign-in scopes are stored so that your PlanMoon account exists between visits.
• Your OAuth tokens — stored in encrypted form so you do not have to reconnect your Google account each time. These are deleted the moment you disconnect.

We do not use Google user data for advertising of any kind, including targeted, personalized, retargeted, or interest-based advertising. We do not use it to determine credit-worthiness, for lending purposes, or to build, enrich, or sell databases.

AI and machine learning

PlanMoon uses artificial intelligence to generate insights, summaries, and drafted content for you. We want to be explicit about how Google user data relates to this:

• We do not use Google user data to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models, including large language models or foundation models.
• We do not use Google Workspace APIs to develop, improve, or train non-personalized AI and/or ML models.
• Where Google user data is passed to a third-party AI provider in order to generate an output for you, it is sent solely to produce that single output, under contractual terms that prohibit the provider from retaining it or using it to train their models.
• Any AI-generated output derived from your Google user data is made available only to you and the members of your PlanMoon workspace.

How we share, transfer, or disclose Google user data

We do not sell, rent, or trade Google user data. We do not transfer or disclose Google user data to third parties except in the following limited circumstances:

• Service providers (sub-processors) who host our infrastructure, store our data, or process data to deliver features you have requested. These providers act on our instructions, are contractually bound to confidentiality, and may not use your data for their own purposes.
• With your explicit consent, for example when you ask us to export or share a report.
• Where required by law, such as in response to a valid legal process, or where we believe in good faith that disclosure is reasonably necessary to protect the rights, property, or safety of PlanMoon, our users, or the public.
• In connection with a merger or acquisition, in which case we will require the receiving party to honor this policy, and we will notify you before your data becomes subject to a different policy.

We do not transfer Google user data to data brokers, information resellers, or advertising networks.

Human access to your data

PlanMoon’s processing of Google user data is automated. Our personnel do not read your Google user data except in narrow cases: when you have given us explicit permission (for example, when you ask support to investigate a problem with your account), when necessary for security purposes such as investigating abuse, or when required by law. Such access is limited to authorized personnel and is logged.

Limited Use disclosure

PlanMoon’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we protect Google user data

We apply the following safeguards to Google user data:

• All data is encrypted in transit using TLS 1.2 or higher, and encrypted at rest.
• OAuth access and refresh tokens are stored encrypted and are never exposed to the browser or to other users.
• Access to production systems is restricted to authorized personnel, protected by multi-factor authentication, and follows the principle of least privilege.
• We maintain logging and monitoring to detect unauthorized access, and we review our security practices periodically.

Retention and deletion of Google user data

Search Console and Analytics data is not retained: it is processed in memory to produce your result and discarded when the request completes. The only Google-derived data we hold is your account identity (email, name, profile picture) and your encrypted OAuth tokens, which we keep for as long as your account is active.

You can remove that data at any time:

• Disconnect the integration from your PlanMoon account settings. This deletes your stored OAuth tokens immediately and revokes our ability to reach your Google account.
• Revoke access directly from Google at https://myaccount.google.com/permissions.
• Delete your PlanMoon account after deleting account all of the stored data will be deleted.

Protection of certain personally-identifying information

PlanMoon discloses potentially personally-identifying and personally-identifying information only to those employees, contractors, and affiliated organizations that need to know that information to process it on our behalf or provide services available through our website. These parties have agreed not to disclose it to others. Some of these employees, contractors, and affiliated organizations may be located outside of your home country. By using PlanMoon, you consent to the transfer of such information to them.

We do not rent or sell potentially personally-identifying and personally-identifying information to anyone. We disclose this information only when required by law, when you give us permission, or when we believe in good faith that disclosure is reasonably necessary to protect the property or rights of PlanMoon, third parties, or the public at large.

Use of Personal Information

PlanMoon will use the information you provide to manage your account, attend events, send newsletters, and provide services. We will not sell or lease your personal information to third parties without your permission unless required by law. Note that newsletters and marketing communications are sent only to the contact address associated with your PlanMoon account, and are never based on or targeted using Google user data.

Legal Grounds for Processing Personal Information

We rely on one or more of the following processing conditions:

• Our legitimate interests in providing information and services
• Your explicit consent
• Legal obligations
• Performance of a contract with you

Access to Data

You have the right to request a copy of the information we hold about you. If you would like a copy of some or all of your personal information, please send us an email from your registered account email address and request your data.

Retention of Personal Information

We will retain your personal information only for as long as necessary to fulfill the purposes we collected it for, including for satisfying any legal, accounting, or reporting requirements. When the retention period for a given type of data expires, we delete or destroy it.

Rights in Relation to Your Information

You may have certain rights under data protection law in relation to the personal information we hold about you. You may have the right to request a copy of your personal information, correct it, delete it, restrict our use of it, object to its processing, or withdraw your consent to its processing.

Third party links

PlanMoon may contain links to other websites provided by third parties not under our control. We are not responsible for the privacy practices or the content of these third-party sites.

Aggregated statistics

PlanMoon may collect statistics about the behavior of visitors to its websites. We may display this information publicly or provide it to others. However, we do not disclose personally-identifying information other than as described in this policy, and aggregated statistics never include Google user data obtained through the Google APIs.

Cookies and analytics on our own website

PlanMoon uses cookies to help identify and track visitors, their usage of PlanMoon, and their website access preferences. We use Google Tag Manager and Google Analytics on our own website to measure traffic and understand how visitors use our site; these tools set cookies and process information such as your IP address, device and browser characteristics, and pages viewed. This is separate from the Google Analytics data we access on your behalf through the Google APIs when you connect your own account. Visitors can control cookie settings through their browser, and can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on.

Privacy policy changes

Although most changes are likely to be minor, PlanMoon may change this Privacy Policy from time to time at our sole discretion. If we change how we use Google user data, we will update this page and notify account holders by email before the change takes effect. We encourage visitors to check this page frequently for any changes.

Contact

If you have any questions about this privacy policy, the information we hold about you, or to request deletion of your data, please contact us at [email protected].