1. Who we are

Mota-SEO is run by ToolMusk, which decides how your personal data is used (the "data fiduciary" under India's Digital Personal Data Protection Act, 2023). This policy applies to the website, its tools and its reports.

2. The data we collect

• Account data: your name, email address and, if you set one, a hashed password. With "Login with Google" we receive your name, email and profile picture from Google.
• Reports and tool requests: the URLs, domains and options you submit, and the results, so we can show your reports and run the tools.
• Usage and limits: your IP address, used to count the free daily uses. We keep only a hashed form of it in our counters, for one day.
• Payments: the plan, amount, coupon and Razorpay order and payment IDs. Your card, UPI or bank details are entered on Razorpay and never reach our servers.
• Technical data: server logs with the IP address, browser and pages visited, kept for security and to fix errors.
• Messages: what you send us through the contact form.

3. Tools that run in your browser

Many tools (JSON formatter, QR generator, image tools and more) work entirely on your device. The text and files you put in them are not sent to us. Some of them remember your options in your browser's local storage.

4. Why we use it

• to provide the reports and tools you ask for, and your account;
• to apply the free limits and give Pro to paying users;
• to send the login codes and the emails about your account and payments;
• to keep the service secure, prevent abuse and fix problems;
• to meet our legal and tax obligations.

We do not sell your personal data and we do not use it for advertising.

5. Who we share it with

Only with the service providers we need to run the website, under their own privacy and security commitments:

• Razorpay, to take payments;
• Google, if you log in with Google, and for the website speed test (Google PageSpeed Insights receives the URL you test);
• the W3C validators, which receive the HTML or CSS you validate;
• our hosting and email providers.

The server tools contact the websites you ask them to check, the way a browser would. We may also share data when the law requires it.

6. Cookies

We use the cookies needed for the website to work: the session cookie, the security (CSRF) cookie, and your light or dark theme. We do not use advertising cookies. Razorpay may set its own cookies in the payment window.

7. How long we keep it

• account data and reports: as long as your account exists;
• free-limit counters: one day;
• webhook tester requests: 12 hours;
• payment records and invoices: as long as tax law requires (usually 8 years in India);
• server logs: a few weeks.

8. Your rights

You can access, correct or delete your personal data, and withdraw your consent, at any time. Most of it can be changed or deleted in your account settings; deleting your account deletes your reports. For anything else, contact us and we will answer within 30 days.

9. Security

We use HTTPS, hashed passwords, and access controls on our servers. No system is perfectly secure; if a breach affects your data, we will inform you and the authorities as the law requires.

10. Children

The service is not meant for children under 18. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy. The date at the top shows the latest version, and we will tell account holders by email about important changes.