This policy explains what personal data SerpWatch (company name TBD) ("we", "us") collects when you use the SerpWatch desktop app and the website at serpwatch.smartcognis.com, why we collect it, and the choices you have. We have tried to keep it short and specific. We do not sell personal data and we do not show ads.
1. What we collect
Account data
- Your name and email address, and a hashed password (we cannot read your password).
- Whether your email address has been verified, and when you signed up.
Devices and the app
- A random install ID for each computer you sign in on, its name, operating system, the app version and when it was last seen. We use this to enforce your plan's device limit and to let you remove devices.
- When the app connects to our servers it may also send technical details such as your IP address, the device name and a hardware address (MAC address) used to recognise the installation, plus the app version. Your IP address also lets us choose the right country for search checks.
Subscription and billing
- Which plan you have, its status and renewal dates, and PayPal's subscription reference. Payments are handled by PayPal, so we do not see or store your card or PayPal login details.
Rank checks
- Your keyword list and ranking history are stored on your own computer by the app. Where a check is performed by our servers for your plan, the keyword and website being checked are sent to us to run that check.
- If you let the app run searches for the service (see our Terms), the app returns the search results to our servers. Those searches are not about you.
Logs
- Our servers keep routine logs (IP address, time, requested page, errors) to keep the Service secure and working.
2. Why we use it
- To run the Service: create your account, sign you in, apply your plan and limits, and provide rank checks.
- To take payment and manage your subscription.
- To email you what you need: email verification, password resets and important service or billing notices. These are not marketing emails.
- To keep the Service secure, prevent abuse and fix problems.
- To meet legal obligations such as tax and accounting rules.
Where the GDPR applies, our legal bases are performing our contract with you (running your account and plan), our legitimate interests in securing and improving the Service, and legal obligations.
3. Who we share it with
We only share data with service providers who help us run the Service, under agreements that protect it:
- PayPal - processes payments and subscriptions.
- Resend - delivers our emails (it receives your email address and the message).
- Our hosting provider - runs our servers, which are located in the United Kingdom.
We may also disclose data when the law requires it or to protect our rights and users' safety.
4. Where data is stored and for how long
Account data is stored on our servers in the United Kingdom, and may be processed by the providers above in other countries with appropriate safeguards. We keep account data while your account exists. If you delete your account we delete or anonymise your personal data, except what we must keep for legal or accounting reasons (such as payment records) and short-lived backups and logs.
5. Cookies and similar technologies
The website uses only what it needs to work: a session cookie and a security (CSRF) token that keep you signed in and protect forms, and a small browser setting that remembers your light or dark theme. We do not use advertising or analytics cookies. The desktop app stores your keywords, settings and sign-in on your computer; the sign-in token is encrypted using your operating system.
6. Your rights
Depending on where you live (for example under the GDPR) you can ask to access, correct, delete or export your personal data, object to or restrict certain processing, and complain to your data protection authority. You can correct your name and email and delete your account yourself from your profile; for anything else contact us below. We will reply within the time the law requires.
7. Security
We use encryption in transit (HTTPS), hashed passwords, short-lived access tokens and other safeguards. No system is completely secure, so please use a strong, unique password.
8. Children
The Service is not meant for children under 16, and we do not knowingly collect their data.
9. Changes
We may update this policy. When a change is significant we will tell you, for example by email or in the app. The date at the top shows when it was last updated.
10. Contact
Privacy questions or requests: support@example.com.
SerpWatch (company name TBD), [Company address TBD]