Policies · Last updated October 14, 2026

Privacy Policy

This policy describes the public SEO Goblin website and our current private research application, operated by Highpoint Labs LLC.

Public website and contact

This website has no sign-in, upload form, advertising, analytics scripts, or tracking cookies added by us. Our hosting provider, Namecheap, may process standard server logs, including IP addresses, request times, requested pages, and browser information, to deliver and secure the website.

If you email us, we receive your email address and the information you choose to send. We use correspondence to respond to your request and maintain relevant business records. Please do not email passwords, API keys, or service-account key files.

Private research application

The application is currently operated privately and is not available for public registration. It stores imported keyword CSV data, project details, shortlists, saved provider responses, research results, and request and cost records in its local database. These records support keyword research and preserve the evidence behind results. Research is not published on this website.

Google data and planned integration

Today, Google Keyword Planner data is imported from CSV files supplied by the operator. Direct Google Ads API keyword fetching is not implemented. The private application can store Google connection settings, including a service-account key and account identifiers, in preparation for that integration. Secret credential fields are encrypted in the database; keyword research records are not covered by that credential encryption.

The intended integration will request keyword ideas and aggregate search-volume metrics for authorized keyword research. It is not intended to create campaigns or change advertising spend. We will update these disclosures before enabling additional data access or materially different uses. Saving connection settings does not itself contact Google.

Sharing and use

We do not sell research or Google user data or use it for advertising targeting. Hosting and email providers process website requests and correspondence to provide their services. In the private app, authorized provider requests send the necessary query parameters to the selected provider. The operator can export research files and controls their distribution. Information may also be disclosed when required by law or to investigate security incidents.

Retention, deletion, and access

Research is retained until deliberately removed by the operator. Deleting a project does not automatically delete reusable provider responses or charge history. Saved credentials can be removed in connection settings; Google access can also be revoked through the Google account or Cloud project. Removing a credential does not erase previously collected research or backup copies.

Contact us to request access, correction, or deletion of information you have provided. We will verify the request and explain any records that must be retained for legal or security reasons. Hosting logs and backups follow the applicable provider or operator retention arrangements; immediate removal from every backup cannot be promised.

Changes and contact

We will revise this page when our practices change. Material changes to Google data use will be disclosed before the new use begins.

Privacy questions: hello@highpointlabsllc.com. Operator: Highpoint Labs LLC.