Privacy Policy
Last updated: November 11, 2026
This policy explains what personal data Selvio collects when you visit selvio.io, use the Selvio app at app.selvio.io, or connect Google Search Console to it; why; who receives it; how long it is kept; and how you can exercise your rights.
1. Who is responsible
Selvio is published by Meven Pigneul, entrepreneur individuel (sole trader, micro-entreprise) registered in France and trading as ShiidoCorp, who is the data controller.
- SIRET: 100 128 743 00018
- Contact: team@selvio.io
- Host: Miridia SASU, 200 rue de la Croix Nivert, 75015 Paris, France
2. Data we collect
Your account
Selvio has no passwords. You sign in with your email address: we email you a one-time link and a 6-digit code. We keep your email address, your sign-in sessions, and a record of each sign-in attempt (email address, IP address, date) to prevent abuse.
The waitlist
If you join the waitlist, we keep your email address, the website you entered, your language, the consent text you accepted, your IP address and the date.
What you create in the app
The website address you submit, the competitors you choose, the pages Selvio generates for you and your changes to them, and your publishing settings (domain and subdirectory). To build these pages, Selvio reads public web pages: your own website, to capture its design and its claims, and your competitors' official pages, to read their prices, plans and limits. This is public business information.
Google Search Console
Only if you choose to connect it. See section 4.
Payment
Payments are processed by Stripe. Selvio never sees or stores your card number. We keep your Stripe customer identifier, your plan and the status of your subscription. Stripe collects your billing details (name, email address, billing address, payment method) under its own privacy policy.
Technical data
Our servers log requests (IP address, browser user agent, address requested, date and time) to keep the service secure and working. Selvio uses no analytics tool, no advertising tracker and no third-party cookie, on selvio.io or on app.selvio.io.
3. Purposes and legal bases
Under Article 6 of the General Data Protection Regulation (GDPR):
| Purpose | Legal basis |
|---|---|
| Running your account, generating and publishing your pages, showing your Search Console figures, emailing you about your account | Performance of the contract (Art. 6(1)(b)) |
| Securing sign-in, preventing abuse, server logs, fixing and improving the service | Legitimate interest (Art. 6(1)(f)) |
| Telling waitlist members when Selvio opens | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| Invoicing and accounting | Legal obligation (Art. 6(1)(c)) |
Selvio sets no non-essential cookie. If that changes, we will ask for your consent first.
4. Google user data
What Selvio asks Google for
Signing in to Selvio does not use your Google account. Google comes in only if you click Connecter (Connect) in the Google Search Console box of the Publication screen. Google then asks you to grant Selvio a single permission:
https://www.googleapis.com/auth/webmasters.readonly
View Search Console data for your verified sites. Read-only.
Selvio requests no other Google scope: not your name, your email address, your profile picture, or access to any other Google service.
What Selvio reads and keeps
- The list of Search Console properties your Google account can access, so that you can choose the one for your domain. Only the property you choose is kept.
- For each page Selvio published on your site: daily impressions, clicks, average position and top search queries (Search Analytics).
- The indexing status of those same pages (URL Inspection).
- A refresh token, so that the daily import keeps working, stored encrypted (AES-256-GCM), and the list of permissions you granted.
Selvio does not read or keep figures for the other pages of your site.
How Selvio uses it
Only to show you, in your Selvio dashboard, whether each page Selvio published for you is indexed by Google and how it performs in Google Search. Nothing else.
Selvio's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular:
- Selvio does not sell this data.
- Selvio does not use it, or transfer it, for advertising, retargeting, or to assess creditworthiness or for lending.
- Selvio does not transfer it to anyone, except as needed to provide the feature described above, to comply with the law, or as part of a merger, acquisition or sale of assets, with notice to you.
- Selvio never sends it to an AI model provider, and never uses it to develop, improve or train generalized or non-personalized AI or machine-learning models.
- No person reads it, unless you ask us to (for support, with your consent), or it is needed for security, to investigate abuse, or to comply with the law.
Revoking access and deleting the data
You can revoke Selvio's access at any time from your Google Account, at myaccount.google.com/permissions. Selvio then can no longer read anything from Search Console, from the next daily import. To have the stored token and figures deleted, or to close your account, email team@selvio.io: we delete them within 30 days.
5. Who receives your data
Selvio does not sell personal data. It shares data only with the providers below, each for the purpose stated, under a contract that binds them to process it only on Selvio's instructions.
| Provider | What for, and what it receives | Location |
|---|---|---|
| Miridia | Hosting of the servers and the database: all the data above | France |
| Stripe | Payments: your billing details and subscription | Ireland, United States |
| Resend | Sending sign-in and waitlist emails: your email address | United States |
| Anthropic | The AI model that writes the text of your pages: public content of your site and of your competitors' sites, and your page settings. Never your Google data. | United States |
| DataForSEO | Search volumes and search results for keywords about your category. No personal data. | Estonia |
| Perplexity | Questions people search about your category. No personal data. | United States |
| Search Console API, only if you connect it (section 4) | United States |
We may also disclose data when the law requires it.
6. Transfers outside the EU
Some providers above are in the United States. Transfers to them rely on the EU-U.S. Data Privacy Framework where the provider is certified under it, and otherwise on the Standard Contractual Clauses adopted by the European Commission. You can ask us for a copy of the safeguards at team@selvio.io.
7. How long we keep data
| Data | Kept |
|---|---|
| Account and app data | While your account is open, then deleted within 30 days after it is closed |
| Sign-in attempts | 30 days |
| Sign-in sessions | 30 days, or until you log out |
| Waitlist | Until you unsubscribe, and at most 3 years |
| Google Search Console token and figures | Until you ask for deletion or close your account (deleted within 30 days) |
| Invoices and accounting records | 10 years (French Commercial Code, Art. L123-22) |
| Server logs | 12 months |
8. Your rights
You have the right to access your data, to have it corrected or erased, to receive it in a portable format, to object to its processing, to restrict its processing, and to withdraw your consent at any time when processing relies on it. Under French law, you can also give instructions about what happens to your data after your death.
To exercise these rights, email team@selvio.io. We answer within one month. We may ask you to prove your identity.
If you think your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France), or with the authority of your EU country.
9. Cookies
selvio.io sets no cookie. app.selvio.io sets only the cookies it needs to work, which do not require consent:
| Cookie | Purpose | Duration |
|---|---|---|
selvio_session | Keeps you signed in | 30 days |
selvio_login | Links a sign-in email to the browser that asked for it | 15 minutes |
selvio_gsc_state | Protects the Google Search Console connection against forged requests | 10 minutes |
You can block cookies in your browser settings, but you will then not be able to sign in. Stripe's payment pages, on checkout.stripe.com and billing.stripe.com, set Stripe's own cookies, described in Stripe's cookie policy.
10. Security
- All traffic is encrypted in transit (HTTPS).
- Google tokens are encrypted at rest (AES-256-GCM).
- Sign-in codes and links are stored only as keyed fingerprints, never in clear, and expire after 15 minutes.
- The database only accepts connections from Selvio's own server, and access to production is restricted to the publisher.
If a breach puts your data at risk, we will notify the CNIL and, where required, you, as the GDPR requires.
11. Minimum age
Selvio is a professional tool. You must be at least 16 years old to use it.
12. Changes to this policy
The date at the top of this page shows the latest version. If we make a material change, we will email account holders before it takes effect.