Privacy Policy

Effective date: 9 October 2026

This Privacy Policy explains how JSFSI (“we”, “us”) collects, uses, shares and protects personal data when you use Bettereo, including the Bettereo console at console.bettereo.com, this website and the Bettereo visibility CDN (together, the “Service”).

1. Who we are

Bettereo is a visibility CDN operated by JSFSI, based in Portugal (European Union). Bettereo serves prerendered HTML and Markdown versions of our customers’ websites to search engines and AI assistants, while forwarding human visitors to the customer’s own site.

For personal data about our account holders (for example your name and email address), JSFSI is the controller. For data processed on behalf of our customers about requests to their websites, the customer is the controller and JSFSI acts as a processor on their instructions.

You can reach us about anything in this policy at support@jsfsi.com.

2. Data we collect

Account data

When you sign in to the console we use Firebase Authentication (a Google service). We receive and store your name, email address and, if your sign-in provider supplies it, your profile photo, together with a unique user identifier. We also store which tenants (workspaces) you belong to and your role in each.

Tenant and domain configuration

Information you enter into the Service, such as tenant names, the domains and origins you add, sitemaps, render schedules, notification preferences and integration settings.

Analytics about bot requests to customer domains

When a search engine crawler or AI assistant requests a page on a domain served by Bettereo, we record an analytics event containing the requested URL, the user agent, the country and language derived from the request, the detected bot name and the format served (for example HTML or Markdown). These events describe automated clients, are used to provide reporting to the customer, and are not used to identify individual people.

Rendered page caches

We render the public pages of customer domains with a headless browser and store the resulting HTML and Markdown so we can serve them to crawlers. These caches contain whatever the customer’s public pages contain.

Security and SEO analysis results

We analyse rendered pages and store the results of security checks (for example HTTP security headers) and SEO checks, as well as AI-assisted visibility (AEO) scores and improvement suggestions.

Billing data

Subscriptions and payments are handled by Stripe. Stripe collects your payment details directly; we do not see or store full card numbers. We receive and keep billing identifiers, subscription status, plan and invoice information.

Google Search Console data

Only if you choose to connect it. See Google user data.

Support correspondence

If you email us, we keep the messages and the contact details you include.

Technical logs

Our infrastructure records operational logs (such as timestamps, request paths, IP addresses and error details) to run, secure and debug the Service.

3. How we use data

We use personal data only to:

• provide the Service: authenticate you, manage tenants and domains, render and serve pages, and show analytics and reports (legal basis: performance of a contract);
• process payments and keep accounting records (contract; legal obligation);
• secure the Service, prevent abuse and fix problems (legitimate interests);
• send service emails such as sign-in links, alerts and notifications you configure (contract);
• respond to support requests (contract; legitimate interests);
• comply with legal obligations and enforce our Terms (legal obligation; legitimate interests).

We do not sell personal data, we do not use it for advertising, and we do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

4. Google user data

Bettereo can optionally connect to Google Search Console. This section describes how we handle data we receive from Google APIs.

• What we access. We request read-only access to Google Search Console through the https://www.googleapis.com/auth/webmasters.readonly scope, and only when you explicitly choose to connect Search Console from the console. We do not request this access when you sign in.
• How we use it. We use this access solely to show you your own search performance (such as clicks, impressions, click-through rate and average position) and indexing data for your properties inside Bettereo. We do not use it for any other purpose.
• How we store it. We store the OAuth refresh token encrypted at rest and use it only to fetch the data described above on your behalf.
• Disconnecting. You can disconnect Search Console at any time from the console. When you do, we revoke the token with Google and delete it, together with the Search Console data we hold for that connection. You can also revoke access at any time from your Google Account permissions page.
• No selling, advertising or unrelated transfers. We do not sell Google user data, we do not use it for advertising, retargeting or to build user profiles, and we do not transfer it to anyone except as necessary to provide or improve the feature you are using, to comply with applicable law, or as part of a merger or acquisition with notice to you.
• No human access. No person at JSFSI reads Google user data unless you give us explicit consent (for example to help with a support request), it is necessary for security purposes such as investigating abuse, or it is required to comply with applicable law.

5. Sharing and processors

We share personal data only with service providers that process it on our behalf under data processing agreements, and only as needed to run the Service:

We may also disclose data when required by law or to protect the rights, property or safety of our users, the public or JSFSI. If JSFSI is involved in a merger or acquisition, data may be transferred as part of that transaction, and we will tell you before it becomes subject to a different privacy policy.

6. International transfers

We primarily host data in the European Union. Some of our providers may process data outside the European Economic Area; where they do, we rely on safeguards recognised under the GDPR, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

7. Retention

• Account data and tenant configuration: for as long as your account is active, and deleted within 30 days after you ask us to close it.
• Bot analytics events, rendered caches and analysis results: for as long as the domain is configured in Bettereo, and removed when the domain or tenant is deleted. Caches are continuously replaced as pages are re-rendered.
• Google Search Console tokens and data: until you disconnect, as described above.
• Billing records: for the period required by Portuguese tax and accounting law.
• Technical logs: for a limited period, typically no longer than 30 days.

8. Security

We protect data with encryption in transit (HTTPS/TLS) and at rest, access controls based on least privilege, per-tenant isolation of data, and secret management for credentials. No system is perfectly secure; if we become aware of a personal data breach that affects you, we will notify you and the competent authority as required by law.

9. Your rights

Under the EU General Data Protection Regulation (GDPR) you have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time where processing is based on consent. To exercise any of these rights, email support@jsfsi.com. We will reply within one month.

You also have the right to lodge a complaint with a supervisory authority, in Portugal the Comissão Nacional de Proteção de Dados (CNPD), or the authority where you live or work.

If your data is processed by Bettereo on behalf of one of our customers (for example as part of requests to their website), please contact that customer first; we will assist them in responding.

10. Cookies and local storage

This website does not use cookies. The console uses only essential browser storage: the authentication session managed by Firebase Authentication, and a few small settings that remember interface state (for example whether you dismissed onboarding tips, or a temporary value used to complete the Search Console connection securely). We do not use advertising or third-party tracking cookies, so no consent banner is required.

11. Children

The Service is intended for businesses and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new effective date and, for material changes, notify account holders by email or in the console before the changes take effect.

13. Contact

JSFSI, operator of Bettereo
Email: support@jsfsi.com