Privacy Policy

traffix.dev (“traffix”, “we”) is a growth-intelligence platform for agencies: it measures how client websites perform in search and AI answer engines, prioritises the work that will grow their traffic and leads, and reports the results. It is operated by Social Script, Bengaluru, India. Questions or requests about this policy: hello@traffix.dev.

Account data. When you sign up we collect your email address and authentication identifiers (via password or Google sign-in) to operate your account and agency workspace.

Client-site performance data (Google user data). When an agency connects a client site, we access — with your explicit OAuth authorization — read-only data from Google Search Console (queries, clicks, impressions, positions, indexing status, sitemaps) and Google Analytics 4 (aggregate sessions and conversion event counts). We never see your Google password; you can revoke access at any time from your Google Account permissions or by disconnecting the site in traffix.

Lead data. Websites managed through traffix may send us lead events (form submissions with name, email, phone, and message; and anonymous click counters for call and WhatsApp buttons) so the business and its agency can see and respond to enquiries. This data is provided by visitors to those websites and belongs to the business the website serves.

Public web data. We measure publicly available signals — search-result positions, backlinks, page speed, structured data — via third-party data providers. This is not personal data.

traffix.dev’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Concretely: Google user data is used only to provide the reporting and prioritisation features you see in the product — never for advertising, never sold, never used to train generalized AI or machine-learning models, and never transferred except to the subprocessors listed below as necessary to run the service, or as required by law. Humans do not read this data except with your permission (e.g. support), for security, or to comply with law.

To operate the product: computing performance reports, prioritised recommendations, and weekly summaries for the agency and (read-only, where the agency grants it) the client; sending transactional email such as lead notifications, weekly digests, and access invitations; securing and debugging the service; and measuring our own service costs. We do not sell personal data or use it for third-party advertising.

We run on a small set of infrastructure providers, each processing data only to provide their function: Vercel (application hosting), InsForge (database and authentication), Trigger.dev (scheduled jobs), Resend (transactional email), DataForSEO (public search-result and backlink data — receives keywords and domains, never personal data), and OpenRouter (AI-visibility sampling — receives generic buyer questions about a business category, never personal data).

Account and site data are retained while your account is active. Disconnecting a site stops collection; deleting a site deletes its stored data, including its leads. You can request deletion of your account and all associated data at any time by emailing hello@traffix.dev — we complete deletion within 30 days. Revoking Google access stops all further Google-data collection immediately.

Data is encrypted in transit (TLS) and at rest by our infrastructure providers. OAuth tokens are stored server-side, never exposed to browsers, and scoped read-only. Access to production data is restricted to the operator.

Depending on your jurisdiction (including under India’s Digital Personal Data Protection Act and the EU GDPR where applicable), you may have rights to access, correct, export, or erase personal data we hold, and to withdraw consent. Businesses whose website leads flow through traffix may request a copy or deletion of their lead data. Contact hello@traffix.dev and we will respond within 30 days. The service is not directed at children under 18.

We will post any material changes to this policy on this page with an updated effective date, and notify account owners by email for significant changes.