Privacy Policy

Information We Collect

We collect information to deliver and improve SERPFlow. This includes:

• Account details: name, email address, agency information, and authentication data.
• Workspace content: projects, keywords, audits, reports, and other assets you create.
• Integration data: data retrieved from connected services like Google Analytics, Google Search Console, and DataForSEO strictly for features you enable.
• Usage & device data: log files, diagnostics, browser type, and event information for security, product analytics, and support.
• Billing information: payment method and transaction details processed securely by our payment partner (Stripe).

How We Use Your Data

We use collected data to:

• Operate, maintain, and secure your SERPFlow workspace.
• Provide support, onboarding guidance, and product updates.
• Deliver automated reporting, rank tracking, audits, and other requested features.
• Improve performance, identify product gaps, and develop new capabilities.
• Comply with legal obligations, billing requirements, and enforce our Terms of Service.

Data Sharing & Disclosure

We never sell customer data. Limited sharing occurs only when necessary to operate SERPFlow:

• Trusted subprocessors (e.g., hosting, analytics, email delivery, payment processing) under strict confidentiality and data protection agreements.
• Connected integrations such as Google Analytics or DataForSEO, but only for properties and projects you explicitly authorize.
• Regulators or law enforcement when required to comply with the law or enforce our agreements.

When possible, data is aggregated or anonymized before sharing.

Data Retention & Security

We retain workspace data for as long as your account remains active or as needed to provide services. When you delete projects or close an account, associated data is removed or anonymized within a reasonable timeframe unless legal obligations require longer retention.

Security measures include encrypted storage, HTTPS everywhere, role-based access controls, audit logging, and periodic reviews of our infrastructure and subprocessors.

Your Rights & Choices

• Access, update, or delete your profile information at any time.
• Export or delete project data from the workspace dashboard.
• Disconnect third-party integrations through the Integrations panel.
• Contact us to exercise rights under GDPR, CCPA, or other applicable regulations.
• Opt out of marketing emails using the unsubscribe link in each message.

International Data Transfers

We operate globally using secure infrastructure located in the United States and other regions. When transferring personal data internationally, we implement safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms.

Changes to This Policy

We may update this Privacy Policy to reflect product or regulatory updates. When changes are material, we will provide notice via email or in-app alerts. Continuing to use SERPFlow after changes become effective means you accept the updated policy.