Legal

Privacy Policy

Last updated: July 4, 2026

This Privacy Policy describes what we collect when you use Serplify and this website, why we collect it, the legal bases we rely on, and the control you have. We keep data collection to what we actually need to run the Service. This policy is part of our Terms of Service; capitalized terms have the meaning given there.

Roles. For your account and the website, Serplify is the data controller. For data you collect or generate through the Service — for example, public search results you request, or the pages you choose to test — you are the controller and Serplify acts as a processor on your instructions. You are responsible for having a lawful basis for that processing and for how you use the results.

What we collect

  • Account data — name, work email, company, and billing details when you sign up, top up, or contact us.
  • Usage data — API requests, campaign settings, targets and keywords you submit, and product activity, so we can deliver the Service, bill accurately, and improve reliability.
  • Technical data — IP address, browser, and device information from standard server logs, used for security, abuse prevention, and diagnostics.
  • Site analytics — privacy-respecting, aggregate analytics about how this website is used.
  • Communications — messages you send us through the contact form, email, or support.

What we do not collect

We do not seek out special-category personal data, and we ask that you not submit it through the Service. We do not use the SERP API to build profiles of individuals, and we do not access private, gated, or authenticated content on your behalf — the Service works with public information you direct it to.

How we use it

  • To provide, secure, operate, and improve the products.
  • To bill you and to detect, prevent, and investigate fraud, abuse, and violations of our Acceptable Use Policy.
  • To respond to support and sales requests.
  • To send service and security updates and, if you opt in, occasional product news. You can unsubscribe at any time.
  • To comply with legal obligations and to establish, exercise, or defend legal claims.

Legal bases

Where the GDPR or similar laws apply, we process personal data on the bases of: performance of our contract with you (to provide the Service); our legitimate interests (to secure, improve, and market the Service, balanced against your rights); your consent (where we ask for it, such as marketing email); and compliance with legal obligations.

What we don't do

We don't sell your personal data. We don't share it with advertisers for their own purposes. We use a small number of processors (payments, email, hosting, infrastructure, and analytics) strictly to operate the Service, and we require them by contract to protect your data and use it only on our instructions.

Sharing and disclosures

We may disclose data to our service providers as above; in connection with a merger, acquisition, or sale of assets (with continued protection); and when required by law, legal process, or a lawful government request, or to protect the rights, safety, and property of Serplify, our customers, or the public. Where personal data is transferred internationally, we use appropriate safeguards such as standard contractual clauses.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal data, to object to certain processing, and to withdraw consent. To exercise these rights, email support@serplify.io and we'll respond as required by law. You can unsubscribe from marketing at any time via the link in those emails. You also have the right to lodge a complaint with your local data-protection authority.

Retention & security

We keep data for as long as your account is active or as needed to provide the Service and meet legal, tax, and accounting obligations, after which we delete or anonymize it. We protect data in transit and at rest, limit internal access to those who need it, and maintain reasonable technical and organizational safeguards. No system is perfectly secure, so we cannot guarantee absolute security.

Children

The Service is for business use and is not directed to children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We'll post the new version here with an updated date and, for material changes, provide reasonable notice. Continuing to use the Service after changes take effect means you accept the updated policy.

Questions about this policy? Email hello@serplify.io or visit our contact page.