1. Why this notice exists
Under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and the Communiqué on the Procedures and Principles of Fulfilling the Disclosure Obligation, we explain who processes your personal data when you use SerpBeats, for what purposes and on which legal grounds, to whom it may be transferred, and what your rights are.
This is an information notice, not a consent form. At sign-up you only confirm that you have read it.
2. Data controller
Data controller: SerpBeats. Contact: [email protected]
3. The personal data we process
Depending on how you use the service, we process these groups of data:
- Identity and contact — name, email address; your Google account ID if you sign in with Google.
- Account and usage — your language, country and currency; the domains, keywords, competitors and reports you add for tracking; your support messages.
- Customer transactions — your subscription and payment status and billing details. Your payment details, including your card number, never reach us; Paddle (merchant of record) processes the payment.
- Transaction security — IP address, browser information, session and sign-in records, records that help prevent abuse.
- Ad source — if you came from one of our ads, the ad campaign information (kept for the session; written next to your record if you create an account).
- Google Search Console data — only if you connect it: your Google account's email address, the properties you can read, and the search queries of the property you pick with their clicks, impressions and average position.
- Acceptance records — the date you accepted the Terms of Service and the Privacy Policy and confirmed that you read this notice, and the version of the texts.
4. Purposes and legal grounds
We process your data for these purposes, on these legal grounds:
- Creating your account, providing the service, tracking rankings and visibility, sending service messages (verification code, reports, invoices) and giving support — KVKK Art. 5/2-c (establishment and performance of a contract).
- Carrying out payment, invoicing and subscription operations and meeting obligations under tax and commercial law — KVKK Art. 5/2-c and 5/2-ç (legal obligation).
- Keeping the service secure, preventing fraudulent or unauthorised use and abuse, and applying the daily limit of the free tools — KVKK Art. 5/2-f (legitimate interest).
- Reading your Google Search Console data and offering you query suggestions — when you connect it yourself; KVKK Art. 5/2-c and the permission you give on Google's consent screen. You can withdraw the permission at any time.
- Ad measurement (Google Ads tag) — only if you choose “Accept” in the cookie choice shown when you first visit the site; KVKK Art. 5/1 (explicit consent).
- Establishing, exercising and protecting our rights, keeping acceptance records as proof, and answering requests from the competent authorities — KVKK Art. 5/2-e and 5/2-ç.
5. How we collect it
We collect your data through the sign-up form, the panel, the free tools, Google sign-in and the Search Console connection, electronically, automatically and partly automatically.
6. Transfers, including abroad
We do not sell your personal data. To the extent needed to provide the service we share it with these groups of recipients: hosting and network infrastructure providers, the email delivery provider, the payment provider (Paddle), search-result and search-volume providers (the keywords and domains you add for tracking) and, only if you connect it, Google. Where the law requires it, we may also share it with the competent public authorities.
Some of these providers' servers are abroad. Transfers abroad are made within the framework of KVKK Art. 9 and only as far as the service requires.
7. Retention
We keep your data while your account is active. When you delete your account, your account and project data are deleted; records that must be kept for a legal period, such as invoice and payment records, are kept for that period. Records of the free SEO analysis are deleted after 30 days. How Search Console data is kept and deleted is described in Section 5 of the Privacy Policy.
8. Your rights and how to apply
Under KVKK Art. 11 you have the right to:
- Learn whether your personal data is processed,
- Request information if it has been processed,
- Learn the purpose of processing and whether it is used in line with that purpose,
- Know the third parties to whom it is transferred, at home or abroad,
- Request correction if it is incomplete or inaccurate,
- Request its deletion or destruction within the framework of KVKK Art. 7 and have this notified to the third parties it was transferred to,
- Object to a result against you that arises from analysis of the data exclusively by automated systems,
- Claim compensation if you suffer damage because of unlawful processing.
You can send your application from the email address registered to your account to [email protected]. We conclude it free of charge as soon as possible and at the latest within 30 days, depending on its nature; if the process needs a separate cost, the fee in the tariff set by the Personal Data Protection Board may be charged. If you find the answer inadequate or receive none in time, you can complain to the Personal Data Protection Board within 30 days of learning the answer and in any case within 60 days of your application.
9. Your confirmation
Ticking “I have read and understood the KVKK Disclosure Notice” on the sign-up form shows that you have read this notice; it does not mean explicit consent to the processing of your personal data. The date of the confirmation and the version of the text are kept with your account.