1. When this agreement applies
This Data Processing Agreement (“DPA”) supplements the Terms of Service between the customer (“Customer”) and the operator of SeOMeter.in described on Legal Operator Details (“SeOMeter”). It is not binding by being published. It becomes binding only when the Customer requests it in writing from support@seometer.in, provides its legal name and signatory details, and SeOMeter confirms acceptance or both parties sign it.
2. Roles of the parties
For personal data contained in content that the Customer submits to the Services about its own users, clients or websites, the Customer is the controller / data fiduciary and SeOMeter acts as processor / data processor, processing on the Customer’s documented instructions.
SeOMeter acts as an independent controller / data fiduciary for its own account administration, authentication, billing and tax records, fraud prevention, security logging, service analytics and legal compliance, which are not covered by this DPA and are described in the Privacy Policy.
3. Subject matter, duration and details
- Subject matter: providing SEO audit, crawl, reporting, monitoring and AI-assisted analysis features.
- Duration: for the subscription term and the deletion period in section 11.
- Categories of data subjects: individuals whose data appears on audited pages or in submitted content, and the Customer’s authorised users.
- Categories of personal data: data contained on public web pages or in content the Customer submits (for example names or email addresses appearing on a page), user account identifiers and project data. The Customer should not submit special-category, financial or government-identifier data.
- Nature of processing: collection, storage, analysis, transmission to subprocessors, display and deletion.
4. Processing instructions
SeOMeter will process the personal data only to provide the Services under the Terms, this DPA and the Customer’s documented instructions given through the Services’ configuration or written requests, unless law requires otherwise. SeOMeter will tell the Customer if it believes an instruction infringes applicable law. The Customer is responsible for having a lawful basis and notice for the data it submits and for lawful use of the Services.
5. Confidentiality
SeOMeter will limit access to Customer personal data to people who need it to operate the Services and who are bound by confidentiality duties.
6. Security
SeOMeter will maintain reasonable technical and organisational measures appropriate to the risk, as described in Data Safety & Security. That page does not claim third-party security certifications. The Customer is responsible for securing its own account credentials and workspace permissions.
7. Subprocessors
The Customer authorises SeOMeter to use the providers listed on Subprocessors & Third-Party Services. SeOMeter will impose data-protection obligations on subprocessors that are appropriate to their role, and remains responsible to the Customer for their performance of those obligations. SeOMeter will update the list when it adds a subprocessor that processes Customer personal data and, if the Customer objects on reasonable data-protection grounds within 30 days of notice, will discuss alternatives in good faith; if none is reasonable, the Customer may terminate the affected Services and receive a pro-rata refund of prepaid fees for the remaining period.
8. Requests from individuals
SeOMeter will give the Customer reasonable help, taking into account the nature of the processing, in responding to requests from individuals to exercise rights under applicable law. If SeOMeter receives such a request about Customer data, it will direct the individual to the Customer where it can identify the Customer.
9. Personal data incidents
SeOMeter will notify the Customer without undue delay after becoming aware of a confirmed personal data breach affecting Customer personal data, and will provide the information reasonably available to help the Customer meet its own legal notification duties, and will take reasonable steps to contain and remediate it. Notice may be sent to the Customer’s account email.
10. International transfers
The Customer acknowledges that subprocessors may process data outside India. Where applicable law requires safeguards for such transfers, SeOMeter will use the mechanisms that law allows and will tell the Customer which apply on request.
11. Deletion and return
On termination or at the Customer’s written request SeOMeter will delete or de-identify Customer personal data, or make it available for export where the product allows, within the period stated in the Privacy Policy (currently an aim of 90 days after account closure), except where law requires retention or data remains in backups until they rotate out. Records needed for billing, tax or legal claims may be kept.
12. Information and audit assistance
On reasonable written request, and no more than once a year unless an incident requires otherwise, SeOMeter will provide information reasonably necessary to show compliance with this DPA. On-site audits are not offered; where a regulator requires more, the parties will agree a reasonable process and the Customer will bear its own costs.
13. Liability and conflict
Liability under this DPA is subject to the limits in the Terms to the extent permitted by law; nothing here limits liability that cannot lawfully be limited. If this DPA conflicts with the Terms about processing of Customer personal data, this DPA prevails on that point.
14. Governing law
This DPA is governed by the laws of India. Customers subject to other privacy laws that require additional standard terms (for example standard contractual clauses) should contact us so the parties can assess what applies.
Contact: support@seometer.in. See also Legal Operator Details.