Privacy Policy

TopicalDrift.com provides semantic drift and internal-link mismatch analysis using:

• Sitemap crawling and main-content extraction
• 768-dimensional embeddings (sentence transformers)
• UMAP semantic projection for 2D visualization
• K-means clustering for topical grouping
• Internal link context analysis
• Google Search Console (GSC) data integration (optional)

"You" refers to the person or organization using our website and services.

D) Google Search Console data (optional)

If you connect Google Search Console via OAuth 2.0, we may access GSC performance data such as:

• Queries, clicks, impressions, CTR, and average position for your property
• Page-level performance metrics
• Date ranges you specify for analysis

We use GSC data only to produce the analyses and reports you request. We do not access unrelated properties or use your GSC data for purposes beyond your requested scans. You can revoke access at any time through your Google account settings.

We use MagicLinks for passwordless authentication:

• When you sign in, we send a time-limited login link to your email address
• Clicking the link authenticates your session
• We do not store passwords — only your email address and authentication tokens
• Authentication tokens expire after a set period (typically 30 days)
• We use secure, encrypted cookies to maintain your logged-in session

• Provide the service: run unlimited scans (fair use), generate embeddings, compute UMAP projections, calculate semantic distances, detect drift/mismatch, build clusters, create interactive radial maps, identify linking opportunities, and produce reports/exports.
• Authentication: send MagicLinks emails, maintain login sessions, manage account access.
• Support: respond to requests, troubleshoot issues, provide implementation guidance, and improve reliability.
• Improve the product: analyze aggregate usage patterns (not individual site content) to improve UI, embedding accuracy, UMAP parameters, clustering quality, and workflows.
• Security: prevent abuse (including fair use policy enforcement), protect accounts, monitor for suspicious activity, and detect automated attacks.
• Billing (when paid plans launch): process subscriptions, manage plan limits, handle upgrades/downgrades.
• Communications: send service updates, feature announcements, beta notifications, and (with consent) marketing emails.

To provide analysis and track improvements over time (especially with unlimited scans), we store:

• Page embeddings: high-dimensional vectors representing semantic meaning (generated via sentence-transformers/all-MiniLM-L6-v2)
• UMAP projections: 2D coordinates (x, y) for visualization
• Semantic angles: Angular positions calculated from UMAP projections
• Cluster assignments: K-means cluster IDs and centroids
• Distance measurements: Actual (0-2.0) and normalized (0-1) semantic distances
• Link context embeddings: Vectors for anchor + surrounding text + container context

What we don't store:

• Full raw HTML of your pages (only extracted main content text)
• Complete GSC query lists (only aggregate performance data)
• Passwords (we use passwordless MagicLinks)

If you're in the EU/UK/EEA, we process information under one or more of these legal bases:

• Contract (Art. 6(1)(b) GDPR): to provide the service you requested (scans, embeddings, reports).
• Legitimate interests (Art. 6(1)(f) GDPR): to secure and improve our service, prevent abuse, and analyze aggregate usage patterns.
• Consent (Art. 6(1)(a) GDPR): for optional features (e.g., non-essential cookies, marketing emails) where required. You can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c) GDPR): to comply with applicable law (e.g., tax, fraud prevention).

We share information with service providers who help us operate the service:

Other sharing scenarios:

• Legal: to comply with lawful requests, court orders, protect rights/safety, or prevent fraud/abuse.
• Business changes: in connection with a merger, acquisition, or asset sale (we'll provide notice where required by law).

We keep data only as long as necessary for the purposes described above:

Your information may be transferred to, stored, and processed in countries other than your own, including the United States.

• We use service providers that operate globally (hosting, OpenAI API, etc.)
• Where we transfer data from the EU/UK/EEA to other countries, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions
• By using the service, you consent to these transfers as necessary to provide the service

We use cookies and similar technologies:

We use reasonable administrative, technical, and organizational measures designed to protect your data:

• Encryption: HTTPS/TLS for data in transit; encryption at rest for sensitive data
• Passwordless authentication: MagicLinks eliminate password-related vulnerabilities
• Access controls: Least-privilege principles, role-based access
• Monitoring: Automated alerts for abuse, suspicious activity, and anomalies
• Regular updates: Security patches applied promptly
• Data minimization: We don't store full HTML, passwords, or unnecessary data

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data (subject to legal/operational requirements)
• Portability: Receive your data in a structured, machine-readable format (CSV/JSON exports)
• Object: Object to processing based on legitimate interests
• Restrict: Request restriction of processing in certain circumstances
• Withdraw consent: Where we rely on consent (e.g., marketing emails, optional cookies), you can withdraw it at any time
• Lodge a complaint: Contact your data protection authority (if in EU/UK/EEA)

Specific actions:

• Revoke GSC access: Via your Google account permissions (google.com/permissions)
• Export data: Use our CSV/JSON export features in the app
• Delete account: Contact us with your request
• Unsubscribe from emails: Click unsubscribe link in emails

Our services are not directed to children under 13 (or 16 in the EU, or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we've inadvertently collected information from a child, please contact us immediately so we can delete it.

We may update this Privacy Policy from time to time. We will update the "Last updated" date above, and if changes are material we will provide additional notice (such as a banner, email, or in-app notification, where appropriate). Continued use of the service after changes take effect constitutes acceptance of the updated policy.

For privacy questions, data requests, or security concerns, contact us here: