Privacy Policy

Last Updated: October 17, 2025

1. Introduction

Kinetic Waves, LLC ("Company," "we," "us," or "our") operates the SEO Refresher service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

Important: This Privacy Policy should be read in conjunction with our Terms of Use.

2. Information We Collect

2.1 Information You Provide Directly

When you use our Service, we collect information that you provide directly, including:

  • Account Information: Name, email address, and profile information from your Google account
  • Google Search Console Data: Website URLs, page URLs, search queries, and performance metrics
  • Content Data: Blog post content, URLs, and documents you choose to optimize
  • Payment Information: Billing information processed through Stripe (we do not store credit card details)
  • Communications: Messages, feedback, or inquiries you send to us

2.2 Information Collected Automatically

When you access our Service, we automatically collect certain information, including:

  • Usage Data: Pages viewed, features used, time spent on the Service, and interaction patterns
  • Device Information: IP address, browser type, operating system, device identifiers
  • Analytics Data: Collected through Vercel Analytics for performance monitoring and service improvement
  • Cookies and Similar Technologies: Session tokens, authentication cookies, and preference settings

2.3 Information from Third-Party Services

We receive information from third-party services you connect to our platform:

  • Google Services: OAuth tokens, Search Console data, Google Docs access, Drive file permissions
  • Stripe: Payment status, subscription information, billing history

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Delivery

  • Provide, operate, and maintain the Service
  • Process your blog content through AI systems (Anthropic Claude and OpenAI ChatGPT)
  • Generate optimized content based on your specifications
  • Export content to Google Docs or HTML format
  • Authenticate your access to the Service
  • Track usage limits according to your subscription tier

3.2 Billing and Account Management

  • Process payments and manage subscriptions
  • Send transactional emails (receipts, subscription confirmations, password resets)
  • Enforce usage limits and subscription terms
  • Prevent fraudulent transactions

3.3 Communications and Marketing

  • Send marketing emails about new features, updates, and promotions (you may opt out)
  • Respond to your inquiries and support requests
  • Send important Service announcements and updates

We will never sell your information to third parties. Marketing communications are used solely for our own Service promotion and will only be sent to users of our Service.

3.4 Service Improvement and Analytics

  • Analyze usage patterns to improve the Service
  • Monitor Service performance and identify technical issues
  • Develop new features and functionality
  • Conduct research and analysis

3.5 Legal and Security

  • Comply with legal obligations and respond to legal requests
  • Protect against fraudulent, unauthorized, or illegal activity
  • Enforce our Terms of Use and other agreements
  • Protect the rights, property, and safety of our users and the public

4. Third-Party Service Providers

We share your information with third-party service providers who perform services on our behalf. These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.1 Infrastructure and Hosting

  • Vercel: Application hosting, CDN, and analytics (hosted on Amazon Web Services infrastructure)
  • Supabase: Database and authentication services (hosted on Amazon Web Services infrastructure)

4.2 AI Processing

  • Anthropic (Claude): AI-powered content generation and optimization. Your content is processed through Anthropic's API subject to their privacy policy and data retention practices.
  • OpenAI (ChatGPT): AI-powered content analysis and enhancement. Your content is processed through OpenAI's API subject to their privacy policy and data retention practices.

4.3 Payment Processing

  • Stripe: Payment processing, subscription management, and billing. We do not store your complete credit card information; Stripe handles all payment data according to PCI-DSS standards.

4.4 Google Services

  • Google OAuth: Authentication services
  • Google Search Console API: To access your website performance data
  • Google Docs and Drive APIs: To export optimized content

Your use of Google services is subject to Google's Privacy Policy and Terms of Service.

5. Data Storage and Security

5.1 Data Location

Your data is stored on servers hosted by Amazon Web Services (AWS) in the United States through our infrastructure providers (Vercel and Supabase).

5.2 Security Measures

We implement appropriate technical and organizational security measures to protect your information, including:

  • Encryption of data in transit using SSL/TLS protocols
  • Encryption of sensitive data at rest
  • Secure authentication using Google OAuth 2.0
  • Regular security assessments and updates
  • Access controls and authentication requirements for our personnel

However, no method of transmission over the Internet or electronic storage is 100% secure.While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

6.1 Active Accounts

For active accounts, we retain your data for 12 months from your last login or activity, or as long as necessary to provide the Service and comply with legal obligations.

6.2 Closed Accounts

When you close your account, we retain your data for 3 months to allow for account recovery or to resolve any disputes. After 3 months, your data is permanently deleted from our systems, except as required by law.

6.3 Legal Obligations

We may retain certain information for longer periods if required by law, to comply with legal obligations, resolve disputes, enforce agreements, or for legitimate business purposes.

6.4 Backup Systems

Data may persist in backup systems for up to an additional 30 days after the retention periods specified above.

7. Your Privacy Rights

7.1 Access and Portability

You have the right to access your personal information and request a copy of your data in a portable format. You can export your optimized content directly through the Service.

7.2 Correction

You have the right to correct inaccurate or incomplete personal information. You can update your account information through your account settings.

7.3 Deletion

You have the right to request deletion of your personal information. You can delete your account through account settings or by contacting us. Please note that we may retain certain information as required by law or for legitimate business purposes.

7.4 Marketing Opt-Out

You may opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by updating your communication preferences in account settings. Please note that you cannot opt out of transactional emails related to your account and subscriptions.

7.5 Cookie Management

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of the Service.

7.6 How to Exercise Your Rights

To exercise any of these rights, please contact us through https://kineticwaves.io/. We will respond to your request within 30 days.

8. Specific Privacy Rights by Jurisdiction

8.1 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information held by us
  • Right to opt-out of the sale of personal information (note: we do not sell personal information)
  • Right to non-discrimination for exercising your CCPA rights

8.2 European Union Residents (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent
  • Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data includes: performance of contract, legitimate interests, consent, and compliance with legal obligations.

8.3 Virginia Residents (VCDPA)

If you are a Virginia resident, you have rights under the Virginia Consumer Data Protection Act (VCDPA), including the right to access, correct, delete, and obtain a copy of your personal data, as well as the right to opt out of targeted advertising and the sale of personal data (note: we do not engage in these practices).

9. Children's Privacy

Our Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. While we do not verify user ages, our Service is designed for business and professional use.

If we learn that we have collected personal information from a child under 13, we will delete that information as quickly as possible. If you believe a child under 13 has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from your jurisdiction.

By using the Service, you consent to the transfer of your information to the United States and other countries. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

11. Do Not Track Signals

Our Service does not respond to Do Not Track (DNT) signals. We track user activity as described in this Privacy Policy to provide and improve the Service. You may disable tracking through your browser settings, but this may limit functionality.

12. Third-Party Links and Services

Our Service may contain links to third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services before providing them with your information.

This includes but is not limited to: Google services, Stripe, Anthropic, and OpenAI.

13. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law. Notification will be made without undue delay and will include information about the nature of the breach, potential consequences, and measures taken to address the breach.

14. Business Transfers

If Kinetic Waves, LLC is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any change in ownership or control of your personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

  • Updating the "Last Updated" date at the top of this Privacy Policy
  • Sending an email notification to your registered email address
  • Posting a notice on our Service

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this Privacy Policy periodically.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Kinetic Waves, LLC
Website: https://kineticwaves.io/

We will respond to your inquiry within 30 days.

17. Consent

By using our Service, you consent to this Privacy Policy and agree to its terms. If you do not agree to this Privacy Policy, please do not use the Service.