Legal
Effective July 3, 2026 · Applies to the website, the plugin suite & the connection service
The short version
Your data lives on your own WordPress site, not on our servers. The Page Pulse plugins analyze your content and traffic inside your own hosting environment. We operate a small connection service whose only job is to broker authorizations — it does not receive, store, or process your website analytics, search data, or content.
This policy covers three things: (1) the pagepulselabs.com website, (2) the Page Pulse plugin suite for WordPress — Content Pulse, Link Pulse, Backlink Pulse, and Traffic Pulse (the “Plugins”), and (3) the connection service we operate so the Plugins can securely connect to Google (the “Connection Service”).
To keep this readable we avoid legalese, but a few terms have specific meanings: “personal data” (or “personal information”) is any information relating to an identified or identifiable person; a “controller” decides why and how personal data is processed; a “processor” handles it on a controller’s behalf; a “service provider” / “sub-processor” is a third party we (or Freemius) use to help deliver the service.
Section 01
Like most websites, our web host keeps standard server logs (IP address, browser type, pages requested, timestamps) for security and troubleshooting. We retain these logs for [e.g. 30–90 days] and use them only to keep the site secure and running. The legal basis is our legitimate interest in operating and protecting the site.
We use Google Analytics 4 (GA4) to understand how visitors use the site (pages viewed, general location, device and browser type, and how you arrived). GA4 sets cookies and collects your IP address and usage data; this information is processed by Google. We have configured GA4 to [CONFIRM: anonymize/truncate IP addresses and, if applicable, use Google Consent Mode]. We do not use Google Analytics data for advertising or remarketing, and we do not use Google Signals.
You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on, by declining analytics cookies in our cookie banner, or by sending a Global Privacy Control (GPC) signal from your browser. For more on Google’s practices, see the Google Privacy Policy.
Where required by law (for example, for visitors in the EU/UK), we load analytics cookies only after you consent through our cookie banner. Essential cookies needed to make the site work are always active. You can change your cookie choices at any time via [link to cookie settings / “Cookie Preferences” control].
If you fill out a form (support, beta signup, newsletter), we receive what you submit — typically your name and email, plus anything you write in a message. Form submissions are stored [CONFIRM: in our WordPress database / with our form provider [name]] and retained for as long as needed to correspond with you or provide what you asked for, then deleted on a periodic basis. To reduce spam we use [CONFIRM: e.g. Google reCAPTCHA / hCaptcha / Akismet]; if this is reCAPTCHA, it shares limited technical data with Google under the Google Privacy Policy. We use form data only to respond to you or send what you requested. We don’t sell or rent it. The legal basis is your consent and/or our taking steps at your request.
If you sign up for our newsletter or updates, we use your email to send those communications. Every marketing email includes an unsubscribe link, and you can opt out at any time. We send marketing email only with your consent (or, where permitted, to existing customers about similar products). We comply with CAN-SPAM (US), and where applicable CASL (Canada) and PECR (UK/EU).
To run the website and communicate with you, we may use third-party service providers for hosting, analytics, email delivery, and customer relationship management (CRM). We share only the information those providers need to perform their function, and we require them to protect it and use it only on our instructions. When we add or change a significant provider (for example, adopting a CRM or email platform), we will update this policy. Current and prospective providers include [e.g. web host, Google Analytics, email/CRM provider — name once selected].
Section 02
The Plugins run entirely inside your WordPress installation. Everything they create and cache is stored in your site’s database, under your control:
Page Pulse Labs has no access to any of this. It is never transmitted to our servers. Because this data stays with you, you are the data controller for it (including any personal data about your own site’s visitors), and you are responsible for your own privacy disclosures to those visitors. When you uninstall a Plugin, its settings pages let you choose whether that data is kept or deleted.
Traffic Pulse retention. Traffic Pulse is designed to keep a longer history than Google Analytics itself retains, so you don’t lose historical trends. It stores this history aggregated to daily and monthly totals — not individual sessions or visitor-level records — which keeps the archive privacy-protective while still useful for long-term analysis. This aggregated data is stored in your own WordPress database.
Our Plugins use the Freemius SDK for licensing (see Section 07). During activation, Freemius may ask you to opt in to sharing diagnostic and usage information — such as your site URL, admin email, WordPress/PHP environment, and active-plugin list — which helps us understand how the Plugins are used and improve them. This sharing is optional and off unless you opt in. If you skip it, the Plugins still work fully. This data, when shared, is processed by Freemius under the Freemius privacy policy.
Section 03
Some Plugin features connect to your Google account, with your explicit consent, using Google’s OAuth system. Here is exactly what happens:
What we request. Read-only access to Google Search Console data (webmasters.readonly scope) and read-only access to Google Analytics 4 data (analytics.readonly scope). We never request write access, and we never access your email, contacts, files, or any other Google service.
What that data is used for. The Plugins retrieve your search performance metrics (queries, clicks, impressions, positions) and analytics metrics (sessions, users, engagement, conversions, revenue totals) and store them in your own WordPress database, solely to power the analysis, dashboards, and archives you see in your WordPress admin. The data is used for no other purpose.
What our Connection Service does — and doesn’t do. Google requires an application secret to complete an authorization, and shipping that secret inside a downloadable plugin would be insecure. So the authorization handshake passes through our Connection Service (hosted on Cloudflare). During that handshake, a one-time exchange code exists on our infrastructure for up to 60 seconds and is then automatically destroyed. The resulting access and refresh tokens are delivered to and stored only on your WordPress site. Our Connection Service does not store your tokens, and your Search Console and Analytics data never passes through or resides on our servers — your WordPress site retrieves it directly from Google.
Limited Use disclosure. Page Pulse Labs’ use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not allow humans to read it (we couldn’t — it never reaches us).
Revoking access. You can disconnect at any time from the Plugin’s settings page (which discards the tokens stored on your site), and/or revoke Page Pulse Labs’ access entirely at myaccount.google.com/permissions.
Section 04
Section 05
If you enable AI-powered analysis, you supply your own API key for the provider you choose (OpenAI, Anthropic, or Google Gemini). When you run an analysis, the content of the page being analyzed — and related context such as your tracked keywords and the brand details you enter — is sent directly from your WordPress site to your chosen provider, under your account and that provider’s terms and privacy policy. Your API keys are stored only in your WordPress database. Page Pulse Labs is not a party to this traffic and takes no markup.
Section 06
Optional features let you connect accounts you hold with third parties — for example DataForSEO (keyword metrics) or Bing Webmaster Tools (backlink data). These use your own credentials, stored on your site, and are governed by those providers’ terms. Connect them only if you want those features.
Section 07
Paid licenses are sold and managed through Freemius, our e-commerce and licensing partner, which acts as the merchant of record for purchases. This means Freemius — not Page Pulse Labs — is the seller of record and handles payment and tax processing. When you purchase or activate a license, Freemius collects and processes the information needed to do that — such as your name, email address, payment details, license key, and the domain the license is activated on — under the Freemius privacy policy. We do not store your payment card details.
Our Connection Service keeps a minimal record associating a license key with the site host that registered it, retained for up to 365 days after last activity, so we can validate connections and prevent abuse. The legal basis is performance of our contract with you and our legitimate interest in preventing abuse.
Section 08
Section 09
The Connection Service runs on Cloudflare’s edge network. Application secrets are stored in Cloudflare’s encrypted secret store, never in plugin code or in your browser. All traffic between your site, our Connection Service, and Google uses HTTPS. Authorization handshakes are signed and expire within minutes; exchange codes are single-use and expire within 60 seconds.
We take reasonable measures to protect personal information, but no method of transmission or storage over the internet is 100% secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal data, we will notify affected users and the relevant authorities without undue delay and, where required, within the timeframes set by applicable law (for GDPR, within 72 hours of becoming aware).
Section 10
Because your data lives on your own site, you delete it the same way you manage anything on your site — and each Plugin’s settings include an option to erase everything it created upon uninstall. On our side, the only records are:
| Data | Retention |
|---|---|
| Website form submissions | While we correspond with you, then periodically deleted |
| Newsletter/CRM contact data | Until you unsubscribe or request deletion |
| Website server logs | [e.g. 30–90 days] |
| Google Analytics (website) | [e.g. 14 months] |
| PageSpeed caches | ≤ 24 hours |
| Rate-limit counters | ≤ 2 days |
| One-time OAuth exchange codes | ≤ 60 seconds |
| License-to-site registrations | ≤ 365 days after last activity |
To ask us to delete anything we hold about you, email privacy@pagepulselabs.com. We will verify your identity before acting and respond within the timeframe required by applicable law (generally within 30–45 days).
Section 11
We are based in Minnesota, United States, and some of our providers process data outside your country. Where personal data is transferred internationally, we rely on an appropriate safeguard: adequacy decisions where they exist (for example, Israel, where Freemius is based, benefits from an EU adequacy decision), the EU–US and UK–US Data Privacy Framework and/or Standard Contractual Clauses (and the UK IDTA) for transfers to US-based providers such as Google and Cloudflare. By using the Service you understand your information may be processed in these locations. You may contact us for more detail on the specific safeguards that apply.
Section 12
You have the right to access, correct, delete, or receive a portable copy of your personal data; to object to or restrict processing; and to withdraw consent at any time (without affecting processing done before withdrawal). We process personal data on these legal bases: consent (analytics cookies, marketing), legitimate interests (site security, abuse prevention, product improvement), performance of a contract (licensing), and legal obligation (tax and accounting records). You also have the right to lodge a complaint with your local supervisory authority (in the UK, the ICO).
You have the right to know what personal information we collect and why, to access and delete it, to correct inaccuracies, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not use or disclose sensitive personal information beyond what is necessary to provide the Service. We honor Global Privacy Control (GPC) browser signals as opt-out requests. We will not discriminate against you for exercising these rights.
If your state grants comprehensive privacy rights, you have similar rights to access, correct, delete, and obtain a copy of your personal data, and to opt out of targeted advertising, sale, or profiling. We honor these rights and GPC signals where applicable.
Email privacy@pagepulselabs.com. We will verify your request (and any authorized agent’s authority) before responding. You may appeal a denied request by replying to our decision.
If you are a business or agency customer subject to GDPR and need a Data Processing Agreement or a list of sub-processors, contact us at privacy@pagepulselabs.com. Our sub-processors and partners include Google, Cloudflare, Freemius, and our web host WP Engine.
Section 13
Our website and Plugins may link to third-party sites and services (Google, Freemius, and others). We are not responsible for the content or privacy practices of those sites. We encourage you to review their privacy policies.
Section 14
If we change this policy, we’ll post the new version here with an updated effective date. Material changes will be noted in the Plugins’ changelogs or announced on our website. Your continued use of the Service after a change takes effect means you accept the updated policy.
Section 14
This policy is governed by the laws of Minnesota, United States, without regard to its conflict-of-laws rules, except where mandatory local privacy laws grant you additional rights.
Section 12
Page Pulse Labs
privacy@pagepulselabs.com
pagepulselabs.com