1. Introduction

DigiMango OÜ ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, process, and protect your information when you visit our website https://llmsseooptimizer.com (the "Website") and use our LLMS SEO Optimizer WordPress plugin (the "Plugin").

This Privacy Policy complies with the European Union General Data Protection Regulation (GDPR), Estonian data protection laws, and other applicable privacy regulations. By using our Website or Plugin, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of information in accordance with this policy.

Data Controller Information

Company: DigiMango OÜ
Registry Code: 16049675
Address: Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551, Estonia
Email: llmsseo@digimango.com
VAT Number: EE102289554

2. Information We Collect

2.1 Website Analytics Information

We use Google Analytics 4 (GA4) and Google Tag Manager (GTM) to understand how visitors interact with our Website. This helps us improve our services and user experience. The information collected includes:

  • IP address (anonymized)
  • Browser type and version
  • Operating system
  • Pages visited and time spent on pages
  • Referring website
  • Device information (screen resolution, device type)
  • Geographic location (country/city level)
  • User interactions with website elements

2.2 Contact Information

When you contact us through our Website or email, we may collect:

  • Your name
  • Email address
  • Message content
  • Any additional information you voluntarily provide

2.3 Newsletter Subscription (Future Implementation)

If you choose to subscribe to our newsletter (when available), we will collect:

  • Email address
  • Subscription preferences
  • Subscription date and time

2.4 Plugin Usage Information

Important: Our free WordPress plugin does not collect any personal data or usage information from your WordPress website. The plugin operates entirely on your server and does not transmit any data to our servers.

For future paid versions, any data collection will be clearly disclosed and require explicit consent before implementation.

2.5 Future Analytics Services

We may implement additional analytics services such as Microsoft Clarity in the future. Any such implementation will be updated in this Privacy Policy with appropriate notice.

4. How We Use Your Information

4.1 Website Improvement

We use analytics data to understand how visitors use our Website, which pages are most popular, and where users encounter difficulties. This helps us optimize the user experience and improve our content.

4.2 Customer Support

When you contact us, we use your information to respond to your inquiries, provide technical support, and resolve any issues you may experience with our Plugin or services.

4.3 Service Development

We analyze usage patterns and feedback to develop new features, improve existing functionality, and better understand our users' needs.

4.4 Legal Compliance

We may use your information to comply with applicable laws, regulations, and legal processes, including tax reporting requirements in Estonia.

4.5 Security and Fraud Prevention

We monitor website activity to detect and prevent fraudulent activities, security breaches, and other harmful activities that could affect our services or users.

5. Data Sharing and Third Parties

5.1 Google Analytics and Tag Manager

We use Google Analytics 4 and Google Tag Manager to collect and analyze website usage data. Google may process this data according to their privacy policy. We have configured these services to:

  • Anonymize IP addresses
  • Disable data sharing with Google for advertising purposes
  • Set appropriate data retention periods

For more information, see Google's Privacy Policy.

5.2 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our Website and providing our services, including:

  • Web hosting providers
  • Email service providers
  • Customer support platforms
  • Payment processors (for future paid services)

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.3 Legal Requirements

We may disclose your information if required by law, regulation, or legal process, or if we believe disclosure is necessary to:

  • Comply with legal obligations
  • Protect our rights and property
  • Ensure user safety
  • Investigate potential violations of our terms

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections outlined in this policy.

5.5 No Sale of Personal Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Retention

6.1 Analytics Data

Google Analytics data is retained for 26 months from the date of collection, after which it is automatically deleted. We may retain aggregated, anonymized analytics reports for longer periods for business planning purposes.

6.2 Contact Information

We retain contact information and correspondence for as long as necessary to provide support and respond to inquiries, typically:

  • Active support tickets: Until resolution plus 1 year
  • General inquiries: 3 years from last contact
  • Newsletter subscriptions: Until unsubscribed plus 30 days

6.3 Legal Retention Requirements

Some information may be retained longer to comply with Estonian legal requirements, including:

  • Tax-related records: 7 years
  • Business correspondence: 5 years
  • Legal compliance records: As required by law

6.4 Data Deletion

When retention periods expire, we securely delete or anonymize personal data unless longer retention is required by law or legitimate business interests.

7. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights regarding your personal data:

7.1 Right of Access (Article 15)

You have the right to request confirmation of whether we process your personal data and, if so, to access that data along with information about how it's processed.

7.2 Right to Rectification (Article 16)

You can request correction of inaccurate personal data and completion of incomplete data.

7.3 Right to Erasure (Article 17)

You can request deletion of your personal data in certain circumstances, including when:

  • The data is no longer necessary for the original purpose
  • You withdraw consent and there's no other legal basis
  • The data has been unlawfully processed
  • Deletion is required for legal compliance

7.4 Right to Restrict Processing (Article 18)

You can request restriction of processing in certain situations, such as when you contest the accuracy of the data or object to processing.

7.5 Right to Data Portability (Article 20)

You can request to receive your personal data in a structured, commonly used format and transmit it to another controller.

7.6 Right to Object (Article 21)

You can object to processing based on legitimate interests or for direct marketing purposes.

7.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

7.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in your country of residence, workplace, or where the alleged infringement occurred.

7.9 Exercising Your Rights

To exercise any of these rights, please contact us at llmsseo@digimango.com. We will respond to your request within 30 days and may request additional information to verify your identity.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including:

8.1 Google Services

Google Analytics and Tag Manager may transfer data to the United States and other countries. Google has implemented appropriate safeguards, including:

  • EU-US Data Privacy Framework certification
  • Standard Contractual Clauses
  • Additional technical and organizational measures

8.2 Safeguards for International Transfers

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as:

  • Adequacy decisions by the European Commission
  • Standard Contractual Clauses approved by the European Commission
  • Binding Corporate Rules
  • Certification schemes and codes of conduct

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

9.1 Technical Measures

  • SSL/TLS encryption for data transmission
  • Secure hosting infrastructure
  • Regular security updates and patches
  • Access controls and authentication
  • Data backup and recovery procedures

9.2 Organizational Measures

  • Privacy by design and by default
  • Staff training on data protection
  • Regular security assessments
  • Incident response procedures
  • Vendor security requirements

9.3 Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay when required by law.

10. Cookies and Tracking Technologies

10.1 What Are Cookies

Cookies are small text files stored on your device when you visit our Website. They help us provide a better user experience and understand how our Website is used.

10.2 Types of Cookies We Use

Essential Cookies

These cookies are necessary for the Website to function properly and cannot be disabled:

  • Session management cookies
  • Security cookies
  • Load balancing cookies

Analytics Cookies

These cookies help us understand how visitors interact with our Website:

  • Google Analytics cookies (_ga, _ga_*, _gid)
  • Google Tag Manager cookies
  • Performance measurement cookies

10.3 Cookie Management

You can control cookies through your browser settings. However, disabling certain cookies may affect Website functionality. Most browsers allow you to:

  • View and delete cookies
  • Block cookies from specific sites
  • Block third-party cookies
  • Clear all cookies when closing the browser

10.4 Third-Party Cookies

Our Website may contain cookies from third-party services like Google Analytics. These cookies are governed by the respective third parties' privacy policies.

11. Children's Privacy

Our Website and Plugin are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at llmsseo@digimango.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

  • Update the "Last Updated" date at the top of this policy
  • Notify users of material changes through our Website
  • For significant changes, provide additional notice via email (if we have your email address)
  • Maintain previous versions for reference

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

DigiMango OÜ

Email: llmsseo@digimango.com
Address: Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551, Estonia
Registry Code: 16049675

13.1 Data Protection Authority

If you have concerns about our data practices that we cannot resolve, you may contact the Estonian Data Protection Inspectorate:

Estonian Data Protection Inspectorate
Website: https://www.aki.ee/en
Email: info@aki.ee
Phone: +372 627 4135

14. Effective Date and Acknowledgment

This Privacy Policy is effective as of July 20, 2025. By using our Website or Plugin after this date, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

This Privacy Policy was last reviewed and updated on July 20, 2025, to ensure compliance with current data protection regulations and best practices.