Legal
Privacy policy
Last updated
This policy explains what personal data LinkedSerp collects, why we collect it, who we share it with, and what you can do about it. LinkedSerp is responsible for your data (the data controller). Our Terms of service cover the rest of our agreement with you.
1. Summary
We collect what we need to run your account, bill you, and produce your searches and articles, and nothing more. We share data only with the providers that run the service, and we never sell it. You can download or delete everything from Settings at any time.
2. What we collect
- Account details. Your email address and a hash of your password, stored by Supabase. If you sign in with Google, we receive the email address of your Google account and nothing else from Google. If you use a sign in link sent by email, we only need your email address.
- What you type. The niches, website addresses and notes you enter when you run a search or generate an article.
- What we produce for you. The keywords, search volumes, ranking results, website profiles and articles the service creates for your account.
- Payment details. Stripe handles payment. We store your Stripe customer id, your subscription id, your plan and your credit balance. We never see or store card numbers.
- Usage data. When you use the free sample on the home page, we store a hash of your IP address and the date, not the address itself, so we can limit samples per day. We also store the niche you entered and the result. Vercel, our hosting provider, keeps server logs that include IP addresses and request details for a limited period.
We do not use advertising trackers, analytics pixels or fingerprinting.
3. How we use it
- To provide the service: run your searches, check rankings, generate articles, and show you your history.
- To bill you and manage your subscription and credits.
- To prevent abuse, for example by enforcing credit limits, rate limits and the free sample limit.
- To answer your support requests.
- To improve the product, using aggregated data that does not identify you, such as how many searches run each day or which countries are chosen.
If you are in the EEA or the UK, our legal bases are: performing our contract with you (providing and billing the service), our legitimate interests (preventing abuse and improving the product), and our legal obligations (keeping payment records).
4. Who we share it with
We share data only with the companies that help us run the service, and only what each one needs.
- Supabase. Authentication and the database that stores your account, searches, keywords and articles.
- Vercel. Hosting and server logs.
- Stripe. Payments, invoices and the customer portal. Stripe receives your email address and your payment details.
- DataForSEO. Keyword and search data. We send them the niche phrases you enter, your website domain, and the keywords being checked. We never send your email address.
- Anthropic. Article and website profile generation. We send them the keyword, the search results for it, text from the pages of your website, and the note you wrote. We never send your email address. Under Anthropic's commercial terms, data sent through their API is not used to train their models.
- Google. Only if you choose to sign in with Google. Google then knows that you signed in to LinkedSerp.
We do not sell personal data, and we do not share it with advertisers. We may disclose data if the law requires it, or to protect the rights and safety of our users.
5. Cookies
We set one kind of cookie: the session cookie that keeps you signed in. It is strictly necessary for the service to work, so no consent banner is needed for it. We do not set third party cookies, and we do not use cookies for advertising or tracking. Stripe's checkout and customer portal pages run on Stripe's own domain and are covered by Stripe's policy.
6. Retention
- We keep your account data for as long as your account exists.
- Deleting your account from Settings removes your profile, searches, keywords and articles from our database. Copies may remain in database backups for a short period before they are overwritten.
- Stripe keeps invoices and payment records for as long as tax and accounting law requires.
- Vercel keeps server logs for a limited period and then deletes them.
- Free sample records are not linked to an account. We keep them to operate the daily limit and to spot abuse.
7. Your rights
You can access, correct, delete and export your data.
- Settings in the app has a Download my data button that gives you a copy of your searches, keywords and articles, and a Delete account button that removes your account and its data.
- For anything you cannot change yourself, email support@linkedserp.com and we will help. We may ask you to confirm that the request comes from the address on your account.
- If you are in the EEA or the UK, you have rights under the GDPR and the UK GDPR: to access your data, correct it, delete it, restrict or object to how we use it, and receive a copy in a portable format. You can also complain to your data protection authority. In the UK that is the Information Commissioner's Office.
- If you live in California, you have rights under the CCPA: to know what personal information we collect and how we use it, to delete it, to correct it, and to opt out of its sale. We do not sell personal information, and we will not treat you differently for using your rights.
- We respond to requests within one month.
8. Security
- All traffic between your browser and the service is encrypted with HTTPS, as is traffic between the service and our providers.
- The database uses row level security, so each account can only read and change its own rows.
- Passwords and sign in links are handled by Supabase. We never see your password.
- No system is perfectly secure. If a security breach affects your data, we will tell you as the law requires.
9. International transfers
The providers listed above process data in the United States. If you are in the EEA, the UK or Switzerland, your data is transferred there. We rely on the safeguards these providers offer for such transfers, such as standard contractual clauses.
10. Children
The service is not for anyone under 18. We do not knowingly collect data from children. If you believe someone under 18 has created an account, email us and we will delete it.
11. Changes to this policy
We may update this policy. The date at the top shows when it last changed. For material changes we will email you or show a notice in the app before they take effect.
12. Contact
Questions or requests about your data go to support@linkedserp.com.
LinkedSerp