Privacy Policy

1. About this policy

This policy explains how SERPs.app ("SERPs," "we," "us") handles information when you visit our website, use ranking monitors, or connect an external service. For privacy questions or requests, contact managed-emails-for-clients@googlegroups.com.

2. Information we process

Account information includes your email address, username, authentication identifier, and subscription status. Monitoring information includes domains, keywords, target locations, settings, ranking results, ranking history, and page-inspection signals. We also process support messages you send us.

Our hosting and authentication providers may process technical information such as IP addresses, browser details, request logs, and session information for operation and security. Website analytics help us understand aggregate usage. Stripe processes payment details; SERPs does not store your full payment-card number.

3. How we use information

We use information to authenticate users, run scheduled monitors, display reports and insights, manage subscriptions, provide support, prevent abuse, and maintain the service. We may send account, billing, security, and service notices. We do not sell personal information.

4. Google Search Console

Connecting Google Search Console is optional and separate from signing in to SERPs. With your permission, we request read-only access to list your accessible properties and retrieve search-performance data for a property you select, including clicks, impressions, click-through rate, and average position. We do not receive your Google password or permission to edit your Search Console properties.

We use this data to show keyword performance and comparisons inside your account. We store your selected property association, an encrypted refresh token needed to maintain the connection, and temporary performance caches. Access tokens are handled on the server and are not exposed to the browser.

SERPs' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google data is not used for advertising, sold to data brokers, or used to train general-purpose AI models. Human access is limited to circumstances permitted by that policy, such as your explicit consent for support, security investigations, or legal obligations.

Disconnect in the Google Search Console panel to delete the locally stored connection credential and stop further access through that connection. Previously cached metrics expire within six hours and become inaccessible through the disconnected connection immediately. You can also revoke SERPs access in your Google Account connections.

5. Service providers and sharing

We use Clerk for authentication, Stripe for billing, Vercel for hosting and analytics, Upstash for storage, and Serpent for search-result checks. Search requests send the keywords, target location, and search settings needed to obtain results. Google processes requests when you connect Search Console. Providers process information needed for their respective services under their applicable terms and privacy policies.

We may disclose information where required by law, to address fraud or security threats, or as part of a business transfer subject to appropriate privacy protections. Connected Google data remains subject to the Limited Use commitments above.

6. Cookies and local storage

Authentication and security features use cookies to maintain sessions and protect connection requests. Browser storage may remember interface preferences. Blocking necessary cookies may prevent sign-in or connected features from working. Our site also uses Vercel Analytics to understand website usage.

7. Retention and security

We retain account and monitoring information as needed to provide your service, including the ranking-history period available with your plan. Billing and security records may be kept longer where needed for legal obligations, dispute resolution, or fraud prevention. Deleting a monitor does not itself cancel a subscription or delete your account.

We use access controls and encrypted storage for Google refresh tokens to help protect information. No service can guarantee absolute security. Providers may process information in countries other than your own.

8. Your choices and requests

You can manage monitors, disconnect Google, and manage billing through your account. To request access, correction, a copy of your information, or account and data deletion, email the contact above. We may verify your identity before acting. Applicable law may provide additional rights, including objection, restriction, or a complaint to a privacy regulator. We handle requests subject to applicable law and necessary record-retention obligations.

9. Children and policy changes

SERPs is intended for adults and business use, not children under 18. Contact us if you believe a child has provided personal information. We may update this policy as the service changes and will communicate material changes where appropriate. The date above identifies the latest version.