Privacy Policy

1. Data Controller

The data controller for personal data collected through serpvox.co is:

2. Personal Data We Collect

Serpvox collects the following personal data:

• Registration data: name, email address, encrypted password or Google profile (name, email, photo)
• Usage data: keywords searched, search history, saved keyword lists
• Billing data: handled entirely by Stripe — Serpvox does not store credit card information
• Technical data: IP address (anonymised), browser type, pages visited, session duration
• Cookies: essential technical cookies and analytics cookies (only with consent)

3. Purposes and Legal Basis

4. Third-party Services

Serpvox uses the following third-party services. Each provider processes data according to its own privacy policy:

5. Cookies

This site uses two categories of cookies:

• Essential technical cookies — required for the site to function (authentication session, preferences). No consent required.
• Analytics cookies (Google Analytics) — collected only with your explicit consent via the banner. You may withdraw consent at any time by clearing browser data or declining via the banner on your next visit.

6. Data Retention

• Account data: retained until the account is deleted
• Search history: retained for 12 months
• Billing data: retained for 10 years (statutory obligation)
• Analytics logs (GA): 14 months (Google Analytics default setting)
• Redis cache: maximum 7 days

7. International Data Transfers

Some services (Google, Stripe, Vercel, Resend) may transfer data to the United States. Such transfers occur in compliance with GDPR safeguards (adequacy decisions, Standard Contractual Clauses, or the EU-US Data Privacy Framework).

8. Your Rights

Under GDPR (Arts. 15–22), you have the right to:

• Access — obtain a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — limit processing in certain circumstances
• Portability — receive your data in a structured format
• Objection — object to processing based on legitimate interest
• Withdrawal of consent — revoke consent at any time without affecting prior processing

To exercise these rights, contact us at alextaipi@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure: HTTPS encryption, bcrypt-hashed passwords, restricted database access, and signed JWT session tokens.

10. Minors

Serpvox is not intended for users under 16 years of age. We do not knowingly collect data from minors. If you become aware of any such data being processed without consent, please contact us at alextaipi@gmail.com.

11. Changes to This Policy

This Privacy Policy may be updated periodically. Material changes will be notified by email to registered users or via a notice on the site. The date of the last update is shown at the top of this page.