سياسة الخصوصية

1. Introduction

Welcome to SERPHub ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you understand exactly how your information is used. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our SEO platform, or connect SERPHub to an AI assistant (together, the "Service"). This Privacy Policy complies with the personal data protection laws of the Kyrgyz Republic.

2. Information We Collect

A. Personal Data

When you register for SERPHub, we collect personal information such as your name, email address, and password. If you make a purchase, we collect billing information through our payment processors; we do not store your full card details.

B. Search Engine and Google User Data (API Integrations)

SERPHub integrates with Google services (Google Search Console, Google Analytics 4, Google Business Profile), Bing Webmaster Tools and Yandex Webmaster to provide SEO insights. When you connect one of these accounts, we access:

• Google Search Console: Verified sites list, search performance data (clicks, impressions, queries, pages, positions) and index status.
• Google Analytics 4: Property lists, traffic statistics, and session data.
• Google Business Profile: Location lists, reviews (including reviewers' public display names), and the search terms people used to find your business.
• Bing Webmaster Tools and Yandex Webmaster: Verified sites and search performance data.

We do NOT store your Google, Bing or Yandex password. Access is managed via secure OAuth 2.0 tokens, which you can revoke at any time.

C. Website Data

For the websites you add, we crawl their public pages to produce SEO audits, and we record uptime checks, backlinks, and the competitors you choose to track.

D. Usage Data

We automatically collect information about how you interact with our Service, such as your IP address, browser type, and pages visited.

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain our Service.
• Generate SEO reports, audits, and analytics dashboards for your websites.
• Generate the AI features you request, such as content briefs and SEO recommendations for your own sites.
• Send you updates, security alerts, and support messages.

We do not use data from your connected Google, Bing or Yandex accounts to train general-purpose AI models.

4. AI Assistants and Connected Apps

You can connect your SERPHub account to AI assistants such as ChatGPT, Claude and Cursor through the Model Context Protocol (MCP). You sign in with your SERPHub account and approve the connection yourself. The assistant then receives an access token that lasts 24 hours and a refresh token that lasts up to 90 days. You can revoke a connection at any time in Account Settings → MCP.

When the assistant uses a SERPHub tool, SERPHub sends it only the data needed for that request, and only for websites in your own account. Depending on what you ask, this can include:

• SEO audit results, issues, page and internal-link data;
• search performance from Google Search Console, Bing Webmaster Tools and Yandex Webmaster, and Google Analytics sessions;
• uptime checks, backlinks and the competitors you track;
• content briefs, and SEO tasks, including the names of the teammates they are assigned to;
• your Google Business Profile reviews (including reviewers' public display names) and search terms;
• your SERPHub notifications.

SERPHub never sends your password, payment details or API keys to an assistant. Once the data reaches the assistant, how it is used and stored is governed by that assistant provider's own terms and privacy policy.

Some tools make changes when you ask them to: adding a site, creating or updating a task, starting an audit or check, or marking notifications as read. Assistants are told to confirm these actions with you first.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

• Service Providers: Third-party vendors who perform services for us, such as cloud hosting, email delivery, and payment processing.
• AI Providers: To provide AI features, we send the content each feature needs, such as a keyword, page text or your tracked prompts, to AI providers acting on our behalf. Content briefs and AI readiness checks use Google (Gemini). AI mention tracking sends your tracked prompts to the assistants whose answers are being checked: OpenAI (ChatGPT), Google (Gemini and AI Overviews), Anthropic (Claude), Perplexity, xAI (Grok) and Microsoft (Bing Copilot). These providers never receive your account credentials.
• AI Assistants You Connect: As described in Section 4, only when you connect them and only for the requests you make.
• Legal Requirements: If required by law or to protect our rights.

6. Data Security

We use industry-standard security measures, including encryption in transit, encrypted storage of access tokens, and secure servers, to protect your data.

7. How Long We Keep Data

• Audits: we keep the most recent audits your plan allows for each site (from 2 to 36, depending on plan); older audits are deleted automatically.
• Search performance history: monthly page metrics are kept for 14 months, and query-level metrics for 7 months.
• Uptime checks: 90 days.
• Operational logs: 7 days.
• AI assistant connection tokens: 24 hours for access tokens and up to 90 days for refresh tokens; expired or revoked tokens are deleted within about a day.
• Backups: kept for up to about six months, then deleted.

8. Your Rights

You have the right to access, correct, or delete your personal data, and to revoke access you have granted. You can disconnect Google, Bing or Yandex from your SERPHub dashboard or your Google Account settings, and disconnect AI assistants in Account Settings → MCP.

You can delete your account at any time from your profile settings. When you do, we immediately cancel your subscription, sign you out everywhere, revoke every access token (including AI assistant connections and your Google, Bing and Yandex connections), and hand any site a colleague also works on to that colleague. Thirty days later, your account and all remaining data, including your sites, are permanently erased. We keep invoices, as required for accounting. To have your data erased sooner, email support@serphub.io.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last changed.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@serphub.io.