1. Who we are
SerpBeats is a search-engine ranking and AI visibility tracking platform. This policy explains what data we collect when you use SerpBeats, why we collect it, and the choices you have.
The controller responsible for processing your personal data: SerpBeats. Contact: [email protected]
If you are in Türkiye, see our disclosure under the Personal Data Protection Law No. 6698 (KVKK) on the KVKK Disclosure Notice page.
2. Information we collect
We collect information in three ways:
- Account information — name, email address, and billing details you provide when you register or subscribe.
- Project data — the domains, keywords, and competitor sites you add for tracking, and the ranking and visibility data our systems collect on your behalf.
- Usage data — log data such as IP address, browser type, and pages visited, collected automatically to keep the service secure and understand how it is used. The keywords, domains and IP address you enter in the free rank checker and the free SEO analysis are kept to apply the daily limit and prevent abuse; records of the free SEO analysis are deleted after 30 days.
- Google account and Search Console data — what we receive from Google if you sign in with Google or connect Search Console yourself. Section 5 explains what we receive, how we use it and how it is deleted.
- Acceptance records — the date you accepted the Terms of Service and the Privacy Policy and confirmed that you read the KVKK notice at sign-up, and the version of the texts.
3. How we use your information
We use the information we collect to:
- Provide, maintain, and improve the SerpBeats platform.
- Process payments and manage your subscription.
- Send service-related communications such as billing receipts, ranking reports, and product updates.
- Detect, investigate, and prevent fraudulent or unauthorized use.
- Comply with our legal obligations.
We do not sell your personal data.
4. Third-party services
To deliver ranking and AI-visibility tracking, SerpBeats relies on third-party data providers for search results, search volume, and AI-platform checks, plus infrastructure providers for hosting, email, and payment processing. These providers receive only the data needed to perform their function and are bound by their own data-protection obligations.
5. Google account and Search Console data
If you sign in with Google, we receive only your name, email address and Google account ID from Google. Whether to connect Search Console is up to you; if you do, you grant a read-only permission on Google's consent screen. The details:
- Permissions we ask for — read only: sign-in identity (openid), your email address, and permission to view Search Console data (webmasters.readonly). We cannot change anything on your site or in your Search Console account.
- What we receive — your Google account's email address and ID, the list of Search Console properties your account can read, and, for the property you pick, the search queries of the last 90 days with each query's clicks, impressions, click-through rate and average position (filtered to your project's market, that is its country).
- What we use it for — only to list the search queries your site already shows up for and let you add the ones you want to track as keywords. We do not use this data to show ads, to profile you or for any other purpose.
- How we store it — the refresh token we receive from Google is stored encrypted, and the query data is stored only against the project it belongs to. The data is read again every night; queries Google no longer returns are deleted. Queries you mark “do not suggest again” are kept until you disconnect, so they are not suggested again.
We do not sell or rent your Search Console data, we do not give it to third parties for advertising or profiling, and we do not use it to train general-purpose AI models. Only the infrastructure providers needed to run the service can technically reach it; our team views it only with your permission (for example in a support request), for security or abuse review, or when the law requires it.
SerpBeats' use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
SerpBeats' use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect at any time. In the Search Console tab of the add-keywords window, “Detach from this site” deletes that site's queries; “Remove account” revokes the access at Google and deletes everything read with that account. You can also remove the permission from the third-party access page of your Google Account. When you delete your account, linked Google accounts and Search Console data are deleted too.
6. Data retention
We retain account and project data while your account is active. Ranking history is retained for trend charts and reports; older raw data may be aggregated into summaries while preserving historical trends. You may request deletion of your account and associated data at any time (see Section 9). Your acceptance records are kept with your account. Section 5 sets the rules for Search Console data.
7. Data security
We use industry-standard technical and organizational measures, including encrypted connections, access controls, and regular security review, to protect your data. No transmission or storage method is 100% secure, and we cannot guarantee absolute security.
9. Your rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at [email protected] .
If you are in Türkiye, your rights under Article 11 of the KVKK, how to apply and the time limits are set out in the KVKK Disclosure Notice.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or through the platform before they take effect. Continued use after a change takes effect constitutes acceptance of the revised policy.
11. Contact
Questions about this policy or how we handle your data can be sent to [email protected] .