Privacy Policy

1. Data we process

We only process data that is needed to provide the service:

• Account data: your name, e-mail address and login details.
• Organisation and website configuration: the websites you add and verify ownership of.
• Google Search Console data (read-only): clicks, impressions, click-through rate and average position per page and search query, for the properties you explicitly connect.
• Crawl data of your own website: page titles, meta descriptions, canonical URLs and internal links. We do not store the body text of your pages.
• Changes and measurements: the on-page changes you record in Lastmod and the measured before/after effect.
• Billing data: subscription and invoice details. Payments are handled by our payment provider (Mollie); we never see or store your full payment card details.
• Support correspondence when you contact us.

2. Why we process it (legal bases)

We process the data above to deliver and secure the service and to bill you (performance of contract and legal obligations), to communicate with you about the service (contract), and to improve the product — including the aggregated insights described in section 3 (legitimate interest). We do not sell your data and we do not use it for third-party advertising.

3. Learning across customers (aggregated, anonymous insights)

To improve our recommendations we compute, on a weekly basis, anonymised patterns across all connected websites — for example, how often a longer page title is followed by more clicks. These patterns are computed exclusively from the type of change, whether the text became longer or shorter, whether it contains a year, and the measured effect — never from URLs, page texts, search queries, domain names or anything that could identify a website or person. A pattern is only used once it is supported by at least 30 measured changes across at least 5 different organisations. You can exclude your organisation from contributing at any time in your settings; you will continue to benefit from the resulting insights. Legal basis: legitimate interest (product improvement); our balancing assessment is available on request.

4. Google user data (Limited Use disclosure)

Lastmod’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice this means: we request read-only access to Search Console; we use that data only to provide the features you see in your own dashboard and reports; we do not use it for advertising, do not sell it, do not use it to train generalised AI or machine-learning models, and no humans read it except with your consent, for security or support at your request, or where required by law. You can disconnect the integration at any time, which deletes the stored tokens.

5. Where your data is processed

Lastmod is built EU-first. Our database, application hosting, object storage, error monitoring and e-mail sending run in EU regions (including Frankfurt, Amsterdam and Ireland). Where a provider processes limited metadata outside the EU, this happens under EU Standard Contractual Clauses. A full list of sub-processors is available on request via privacy@lastmod.ai and will be published on this site before launch.

6. Retention and deletion

Raw measurement and crawl data is retained for the period that belongs to your plan, after which it is automatically cleaned up. If you delete your account or organisation, all associated data — including stored reports and access tokens — is permanently deleted after a short grace period, and the deletion itself is logged. You can export your data before deleting.

7. Your rights

Under the GDPR you have the right to access, rectify, erase and export your personal data, to restrict or object to processing (including objecting to the aggregated insights in section 3), and to lodge a complaint with your supervisory authority — in the Netherlands the Autoriteit Persoonsgegevens. Contact privacy@lastmod.ai to exercise any of these rights.

8. Cookies and security

We only use functional cookies (such as your session and language preference); we do not use third-party advertising or tracking cookies. Data is encrypted in transit and at rest; Google access tokens are additionally envelope-encrypted and are never exposed to the browser. Access to customer data is strictly scoped per organisation.

9. Changes and contact

We will update this page when our data practices change and note the date at the top; material changes will be announced to account holders. Contact: privacy@lastmod.ai. Our company registration details will be listed here before public launch.