How ParSEO keeps your site and data safe

ParSEO works on your real website, so it's built to change nothing without your OK and to keep what you share private.

Your changes, under your control

• Nothing goes live without your OK. Every change ParSEO prepares for your website waits for your approval. You can let safe kinds of fixes approve themselves, and switch that off at any time.
• Undo for 14 days. Every change can be reversed from inside ParSEO for 14 days after it goes live.
• The same page for everyone. ParSEO edits your real page. It never shows search engines or AI crawlers something different from what people see.

Your data

• A private database area. ParSEO's tables live in a private schema of a managed Postgres database (Supabase). That schema isn't exposed through the database's public web interface, and every table has row level security switched on, so the only way in is through ParSEO itself, which checks who you are and what your role allows.
• Encrypted connections. The app talks to the database over TLS, checked against the database provider's own certificate, so it can't be silently redirected.
• Keys and passwords for your site, encrypted. Publishing credentials you give ParSEO (for example a WordPress application password) are stored encrypted, with a key kept apart from the database.
• Read-only Google access. Search Console and Analytics are connected with read-only permissions. ParSEO can read your numbers; it can't change your Google settings.
• Files kept private. Screenshots of your pages and documents you upload are stored in a private storage bucket and served only through ParSEO.

Your account

• Sign-in. Accounts use email with confirmation, or Google sign-in. ParSEO never stores your password in a readable form.
• Sessions. You stay signed in with a single secure, HTTP-only cookie. No advertising or tracking cookies.
• Team roles. Owners, admins, members and viewers see and do only what their role allows; viewers can't make changes or spend.
• Limits on use. Every plan has daily and monthly limits, and per-website spending caps, so nothing can run away with your account.
• Leaving. You can delete your account from Settings. Your account data and sign-in are removed.

Reporting a problem

If you find a security issue, please tell us privately on WhatsApp (see the contact page) so we can fix it before it's shared. Our security.txt lists the same contact.