Privacy Policy

Updated: July 24, 2026

This policy explains what data SERP Checker processes while operating SEO checks, analytics, client workspaces, and public client reports.

1. What data we process

  • Account data: name, email, user role, profile settings.
  • Client data: domains, URLs, keywords, competitors, languages, regions, and check configuration.
  • Check results: rankings, answer-engine visibility, citations, technical and content metrics.
  • Report data: public tokens, link expiry, block visibility settings, and view counts.
  • Technical data: IP address, user agent, view timestamps, referrer, errors, and security events.
  • Billing data: legal name, billing address, country, tax identifier, invoice email, subscription status, payment references, invoices, and recorded acceptance of legal terms. Full card details are processed by the selected payment provider and are not stored by the service.
  • Commercial inquiry data: contact and company details, website, role, country, team or client scale, partner model, message, consent version, referral and campaign attribution, IP address, and user agent submitted through Sales or Partner forms.

2. How we use the data

Data is used to run checks, build reports, render analytics, manage access, protect public links, respond to and qualify commercial requests, measure their source, diagnose errors, prevent abuse, and improve service quality.

3. Public client reports

When a public client report is opened, the system may record the view and detectable rule violations: attempts to print, copy, save the page, open the context menu, or use Print Screen. These signals exist to protect confidential reports and investigate abuse.

4. Third-party processors

To operate the service we may use external providers for search, answer-engine visibility, analytics, payment processing, email delivery, and infrastructure. We share only the data required for each provider's function.

Google API Services Data

When a user connects Google Search Console, Google Analytics 4, Google Play Console or their Google Business Profile through OAuth, SERP Checker accesses only the scopes needed for the selected feature: Search Console performance data, Google Analytics reporting data, Google Play app or review data, and — for a Business Profile the signed-in user already owns or manages — the profile's locations, posts, reviews and performance metrics. This data is used only to display analytics, generate client reports, sync metrics, and operate the connected account features requested by the user.

For a connected Business Profile, SERP Checker writes only what the user has approved in the application: a post they approved, and a reply they approved to a review on their own profile. Nothing is published or answered automatically without that approval, and the connection can be removed at any time from the Business Profile screen.

SERP Checker does not sell Google user data, does not use it for advertising, and does not transfer it to third parties except as necessary to provide or secure the service, comply with law, or with the user's explicit direction. Use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Users can disconnect Google integrations in the application or revoke access from their Google Account permissions page.

Assistant connectors (ChatGPT, Claude and other MCP clients)

When a user connects an assistant such as ChatGPT or Claude to their SERP Checker account, they sign in on our site and approve the connection; the assistant receives an access token and never the user's password. It can read and change only what the user could in the application — projects, keywords, rankings, competitors and answer-engine results — within the user's plan, and it cannot reach passwords, payment details or API keys. We receive the tool calls the assistant makes and log them like any API call; what the user types in the assistant is processed by the assistant's provider under its own terms. The user can disconnect an assistant at any time under Profile → Connected assistants, which ends its access immediately.

The free website checks available to assistants without an account fetch only public pages of the site the user names (home page, a few internal pages, robots.txt, sitemap.xml, llms.txt) and store the result behind an unguessable link so it can be shared.

5. Storage and security

The service uses access controls, session management, public-link tokens, password-protected reports, and audit logs. Retention depends on system configuration, data-owner requirements, and the technical need to keep reports available.

6. Rights and requests

Users and client subjects can contact the service administrator to request access, correction, restriction of processing, or deletion, where applicable to their role and the contract with the service owner.

7. Policy updates

This policy may be updated. The current version is always published on this page.