Scope of this notice
This notice covers the SILKTRACE website and hosted SEO workspace at silktrace.app, a privately maintained portfolio application. No advertising tags, optional product analytics or session replay are installed. Hosting and authentication providers process necessary operational and security records.
Information the application processes
The hosted application may process your Google profile identifier, name, email and optional avatar through Neon Auth; session and account-security records; workspace settings, projects, research, audit evidence, exports, caches, quotas and receipts; provider API credentials you choose to save; essential request/error/security records; and messages you send to support. Do not submit secrets or sensitive personal information the product does not need.
Why this information is used
Information is used to operate and protect the workspace, authenticate users, execute approved provider operations, enforce quotas, display saved evidence, diagnose failures, handle export/deletion requests and respond to support. SILKTRACE does not sell personal information or use account/project data for advertising. Necessary platform logs are separate from optional analytics.
Google sign-in data
SILKTRACE requests only basic Google sign-in information: your account identifier, name, email address and profile picture if available. Neon Auth processes and stores that identity and session information to sign you in; SILKTRACE uses the identifier to associate your private workspace and displays your account name and email. The application does not request access to Gmail, Drive, Calendar or other Google Workspace content. Google identity data is processed by Neon and the Vercel-hosted application for authentication, account display and security. It is not sent to DataForSEO, sold, used for advertising or used to train AI models.
How information is protected
Connections to the application use HTTPS. Private workspace access is checked on the server, and private responses are marked not to be stored in shared caches. Database access is restricted to the application roles and authorized operators. Essential session cookies support login and account security; blocking them prevents sign-in. No system can promise complete security.
Your provider credentials
DataForSEO credentials are encrypted at the application layer using a server-only keyring. They are used for authenticated requests to fixed official provider endpoints, and are not intentionally returned to the browser or written to URLs, logs, fixtures or support bundles. Encryption reduces exposure from a copied database; it does not eliminate the risk of a compromised server, encryption key or provider account.
Service providers
SILKTRACE uses Vercel for hosting and operational delivery, Neon for PostgreSQL and authentication, Google for sign-in, and DataForSEO for user-approved SEO operations. A provider request sends the required target, keyword, market or crawl parameters and your provider credentials to DataForSEO. Cloudflare provides DNS and forwards messages sent to the public support and security addresses to an operator-controlled Gmail inbox. Support messages include the information you choose to send. Providers apply their own terms, privacy practices and retention rules, and may process information outside your country.
Retention and deletion
Google identity and session information is retained for authentication under Neon Auth’s lifecycle. Projects, saved evidence, settings, usage receipts and cached results remain until removed by application cleanup, a supported delete control or account deletion. Cache expiry controls reuse and does not guarantee immediate physical deletion. Disconnecting removes the primary credential record. Account deletion removes primary workspace data and credentials, disables access and requests removal of the Neon Auth identity and sessions. Failed upstream cleanup is retained for retry; provider-retained identity metadata may remain. Minimal one-way deletion references prevent accidental restoration. Support messages are kept while needed to handle the request or a security or legal obligation; you can request their deletion.
Infrastructure retention
The launch deployment uses Vercel Hobby with a one-hour runtime-log window and no external log drain or optional analytics. The production database uses Neon Free in AWS US East (Ohio), with a restore history of up to six hours, subject to the free-plan storage limit. Deleted database records may remain in that history until it expires. DataForSEO states that API task data is retained for 365 days, with endpoint-specific result retrieval windows. Deletion from SILKTRACE cannot retract requests already sent or remove records independently retained by providers.
Your choices and questions
Settings provides provider disconnect, account export and account deletion controls. Projects can be deleted in Saved Monitoring. You may also revoke Google authorization in your Google Account; revoking authorization alone does not delete saved SILKTRACE workspace data. Contact the support address below to request access, correction or deletion, or ask a privacy question. We may need to verify account ownership. Never include provider passwords, session tokens or unnecessary private data in a message. Material changes to this notice will carry an updated effective date.
A question about your information?
support@silktrace.appSupport is best effort. Never send passwords, API keys or session tokens.