SERPpost Privacy Policy
Effective Date: December 1, 2025
This Privacy Policy ("Policy") describes how SERPpost ("The Company" or "we") collects, uses, stores, and protects your personal information. Your privacy is important to The Company, and The Company is committed to handling your data in a transparent and secure manner, consistent with international standards like the GDPR.
1. Information We Collect
To provide and optimize the Services for you, The Company may collect the following information:
1.1 Account Information & Voluntarily Provided Information
When you create an account or interact with The Company, The Company collects information you knowingly and actively provide, such as your email address, first name, last name, and physical address (for invoicing/transactions).
1.2 Transaction Information
When you purchase Services, The Company collects necessary personal information for the transaction (name, email, payment reference). Sensitive payment details (like credit card numbers) are handled directly by third-party payment service providers like Stripe; The Company does not store them.
1.3 Log Data and Usage Records
When you use The Company's API services, The Company's system automatically collects and stores certain information:
- Request time, API Key, IP address, Response status code, Credits consumed.
- Query content, browser type, and operating system information.
Log Data and Evidence
The Company is entitled to collect and retain your service usage records (log data). These records will be used primarily and solely for security auditing, system maintenance, and as evidence provided by The Company to resolve disputes, refund claims, fraud, or legal action.
2. How We Collect and Use Your Personal Information (Lawful Bases)
The Company only collects and uses your personal information when The Company has legitimate reasons (known as "lawful bases" under the GDPR) for doing so. The Company's reasons for collecting and using your information include:
| Lawful Basis | Purpose |
|---|---|
| Performance of a Contract | To verify your identity, process API requests, manage your account/credits, and deliver the Services you purchased. |
| Consent From You | Where you give The Company consent (e.g., to send marketing emails). You may withdraw consent at any time. |
| Our Legitimate Interests | For security (monitoring fraud/abuse), service improvement (analyzing usage patterns), and operating The Company's services efficiently. (e.g., using log data for debugging). |
| Compliance with Law | To comply with legal obligations, including court orders, government requests, or to retain information for tax/accounting purposes. |
3. Disclosure of Personal Information to Third Parties
The Company does not sell your personal information. The Company only shares it in the following situations:
3.1 Third-Party Service Providers
The Company may disclose personal information to reputable third-party service providers for the purpose of enabling them to provide their services:
- Payment Processing: Stripe
- Security Verification: CAPTCHA services
- Email Communication: SiteGround (for sending transactional and marketing emails)
- Analytics & Performance: Google Analytics (for tracking website usage)
- Hosting: Tencent Cloud (our main cloud hosting service)
3.2 Legal and Compliance
The Company may disclose your personal information to courts, regulatory authorities, or law enforcement officers, as required by law, or if you violate the Terms of Service.
4. International Data Transfers and Storage
4.1 Data Storage Location
The personal information The Company collects is stored and/or processed in California, United States, where The Company maintains facilities, or with its third-party providers globally.
4.2 International Transfers (EEA/UK)
If The Company transfers personal information from countries in the European Economic Area (EEA) or the United Kingdom (UK) to countries outside the EEA/UK (such as the United States), The Company will ensure those transfers are protected by appropriate safeguards, such as by using Standard Contractual Clauses (SCCs) approved by the European Commission or other legally accepted means.
5. Data Controller / Data Processor
The Company, SERPpost, is considered a Data Controller with respect to the personal information you provide to The Company, as The Company determines the purposes and means of processing that information.
6. Your Rights and Controlling Your Personal Information
You have the following rights over your personal information. To exercise any of these rights, please contact The Company at support@serppost.com.
| Right | Description |
|---|---|
| Access & Portability | You may request details of the personal information The Company holds about you and request a copy of this data in a readable format (e.g., CSV). |
| Correction | If you believe the information The Company holds about you is inaccurate, out of date, or incomplete, The Company will take reasonable steps to correct it. |
| Deletion ("Right to be Forgotten") | You may request that The Company delete the personal information The Company holds about you. This right is subject to exceptions (e.g., legal, accounting, or security requirements). |
| Withdraw Consent | You may withdraw your consent for a specific purpose (e.g., marketing emails) at any time. |
| Restriction of Processing | You have the right to request that The Company temporarily restrict the processing of your personal information (e.g., while The Company verifies its accuracy). |
| Objection to Processing | You have the right to object to the processing of your personal information that is based on The Company's legitimate interests or public interest. |
| Non-Discrimination | The Company will not discriminate against you for exercising your privacy rights. |
7. Cookie Policy
The Company uses "cookies" to collect information about you and your activity across The Company's site for purposes including essential site functionality, user login, and analytics (via Google Analytics). A cookie is a small piece of data that The Company's website stores on your device.
- Types of Cookies Used: The Company uses Essential Cookies (for login/account management), Performance Cookies (for anonymous site usage analysis), and Targeting/Advertising Cookies (for relevant content delivery).
- Refusal: If you do not wish to accept cookies, you should instruct your browser to refuse cookies from SERPpost. In such a case, some parts of the service may be unavailable.
- Third-Party Cookies: The Company uses third-party services (like Google Analytics) which may also set cookies. The Company is not responsible for the content and policies of those third Parties.
8. Policy Changes
The Company may update this Policy at any time. Any changes will be posted on this page. If required by law, The Company will obtain your consent or give you the opportunity to opt-out of any new uses of your personal information.
9. Contact Us
If you have any questions or concerns about this Policy or wish to exercise your rights, please contact The Company at:
support@serppost.com