Privacy Policy

This Privacy Policy explains how SerpNex (“SerpNex,” “we,” “us”) collects, uses, discloses, and safeguards information when you visit serpnex.com or use our keyword rank tracking service (the “Service”). By using the Service you agree to the practices described here.

1. Information we collect

Account data. When you sign up we collect your name, company (optional), email address, and a hashed password. We never store your raw password.

Billing data. Subscription payments are processed by PayPal. We receive a subscription identifier, plan, and status from PayPal — we do not see or store your card number, PayPal password, or bank details.

Project data. The keywords, projects, target URLs, tags, notes, competitor domains, uploads, and reports you create in the Service.

Usage data. Basic logs (IP address, browser type, timestamps, requested endpoints, error events) used to secure the Service, debug issues, and analyze aggregate usage.

Communications. When you contact us, we retain the email address and content of the message so we can respond and improve support.

2. How we use your information

• Provide, operate, and secure the Service (authentication, rank checks, PDF exports, alerts).
• Process payments and manage your subscription with PayPal.
• Send transactional email (login, password reset, scheduled reports, alerts) via Resend.
• Diagnose crashes, prevent abuse, and improve reliability.
• Comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use your project data to train AI models.

3. Third-party sub-processors

We share the minimum information needed with these providers under written data-protection commitments:

• PayPal — subscription billing and webhook processing.
• DataForSEO — retrieves search-engine ranking data for the keywords you track. Only keyword text, country, language, device, and engine are sent — never your account credentials.
• Resend — transactional email delivery.
• Emergent Cloud — hosting infrastructure (Kubernetes) and managed MongoDB.

4. Cookies & local storage

We use cookies and browser local storage to keep you signed in, remember your dashboard preferences (e.g., column visibility, focus filters), and to run basic analytics. Local storage stores your login token (JWT) so you don't have to log in on every visit. You can clear cookies and local storage at any time via your browser settings — doing so will log you out.

5. Data retention

We retain account and project data for as long as your account is active. If you cancel, we retain the data for up to 90 days to allow for reactivation and legal recordkeeping. You may request earlier deletion by emailing contact@serpnex.com. Billing records may be retained longer as required by tax and financial regulations.

6. Security

We use HTTPS end-to-end, bcrypt-hashed passwords, JWT access tokens, and role-based authorization. Infrastructure secrets live in environment variables, not source code. No system is 100% secure — if you believe your account has been compromised, email contact@serpnex.com immediately.

7. Your rights

Depending on your jurisdiction (e.g., GDPR in the EU/UK, CCPA in California), you may have the right to access, correct, export, or delete personal information we hold about you, and to object to or restrict certain processing. Email contact@serpnex.com to exercise these rights. We will respond within 30 days.

8. International transfers

Our servers and sub-processors may be located outside your country of residence. Where required, we rely on Standard Contractual Clauses or equivalent safeguards for cross-border data transfers.

9. Children

The Service is not directed at children under 18 and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, please contact us and we will delete it.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be signaled by updating the “Last updated” date and, where appropriate, by email or in-app notice. Please review this page periodically.

11. Contact

Questions or requests about privacy? Email contact@serpnex.com.