Legal
Privacy Policy
This policy explains what personal data Logan Meyer, sole proprietor doing business as serp.cloud ("we") collects when you use serp.cloud (https://serp.cloud), why, who processes it for us, and the choices you have. We collect as little as we can and never sell personal data.
1. What we collect
- the search queries and page addresses you send to the API, the results returned, and when each call was made, so that we can show your usage and let you cite archived results
- an opaque identifier you may attach to a call to tell your own end users apart; we ask you never to put an email address or name in it
- Billing data: Stripe processes your card; we receive the card brand, last four digits, expiry month, billing country and payment status — never the full card number. Purchases are sold through Link, Stripe's merchant-of-record service, which collects your payment details, billing address and tax information as an independent controller under its own privacy policy (stripe.com/privacy and link.com/privacy) and shares with us only what we need to provide serp.cloud.
- Messages you send to support.
2. Why we use it
- To provide serp.cloud: sign-in, your content and settings, billing and receipts (performance of our contract with you).
- To keep it secure and prevent fraud and abuse, including card testing (legitimate interest).
- To understand and improve the product using aggregate usage measures (legitimate interest; consent where the law requires it).
- To send service emails such as receipts, renewal and trial reminders and security notices. Product news only if you opt in; every such email has a one-click unsubscribe.
- To meet legal, tax and accounting obligations.
3. Who processes it for us
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services | Hosting, storage, sign-in (Cognito) and service email (SES) | United States |
| Optional sign-in with Google; website analytics (Google Analytics) | United States | |
| PostHog | Product analytics | United States |
| Stripe (Link) | Payments, fraud prevention; merchant of record for purchases (Stripe Managed Payments: sales tax / VAT, receipts) | United States |
Each provider processes data only on our instructions under a data-processing agreement. We do not sell or rent personal data, and we do not share it for cross-context behavioural advertising.
4. How long we keep it
Account data is kept while your account is open and deleted within 30 days after you close it, except records we must keep by law (for example invoices, usually for up to 7 years). Backups roll off on their normal cycle.
5. Your rights
You can access, correct, export or delete your personal data, object to or restrict some processing, and withdraw consent at any time. Email support@serp.cloud from your account address; we answer within 30 days. If you are in the EU, UK or a US state with a privacy law, you may also complain to your data-protection authority.
6. Cookies and similar storage
We use only what the service needs: a sign-in session and your light/dark preference stored in your browser.
We also use analytics to see how people use serp.cloud and where they get stuck: PostHog (product analytics, set on serp.cloud) and Google Analytics (_ga cookies). Visitors in the EEA, the UK and Switzerland are measured without analytics cookies. Google Analytics advertising features, Google signals and ad personalisation are turned off; you can also opt out with Google's opt-out add-on. The data is pages viewed, clicks, sign-up and purchase steps, device and browser type, an approximate location derived from your IP address, and a pseudonymous ID (your account ID once you sign in — never your email or name). We do not use advertising trackers and do not sell or share your personal information for advertising. Analytics data is kept for up to 14 months.
7. Security and transfers
Data is encrypted in transit and at rest and access is limited to people who need it. Our providers may process data in the countries listed above; where data leaves the EU or UK we rely on standard contractual clauses or an equivalent safeguard.
8. Children
serp.cloud is not for children under 18, and we do not knowingly collect their data. If you think a child has given us data, contact us and we will delete it.
9. Changes and contact
We will email account holders about material changes before they take effect. Controller: Logan Meyer, sole proprietor doing business as serp.cloud, 930 North Ogden St., Denver, CO 80218, USA. Questions: support@serp.cloud.