Privacy policy

1. Who we are

SERPscope is an SEO tracking and reporting platform operated by JNY Software Ltd trading as SERPscope ("SERPscope", "we", "our", or "us").

For privacy-related questions, contact us at [email protected].

2. What this policy covers

This policy covers how we collect, use, and protect personal data when you use the SERPscope marketing website (this site) and the SERPscope application (the app). It applies to visitors and registered users. We process data in line with UK data protection law, including the UK GDPR.

3. Information we collect

We collect information you give us and information we get from your use of our services.

• Account information (app): When you sign up or use the app, we collect email address, name (if you provide it), and other details you submit. We use this to create and manage your account and to communicate with you about the service.
• Project and SEO data: We may also process keywords, tracked domains, reports, uploaded CSV files, and related project data that you submit through the app. This includes ranking history, audit results, and other SEO-related information needed to provide the features you use.
• Early access / waitlist: If you join the waitlist on the marketing site, we collect your email address to send launch-related updates and early access information. We process waitlist data using our email delivery provider (Resend) on our instructions.
• Usage and account logs: We collect basic analytics and usage information (e.g. how you use the app and, if you opt in to analytics cookies on the marketing site, how you use the website). This may include IP address, browser type, pages visited, and account activity logs. This helps us run, secure, and improve the service.
• Support and contact messages: If you contact us (e.g. via the contact form or email), we keep the content of your message and your contact details so we can respond and follow up.

4. How we use your information

We use the information above to provide, secure, and improve SERPscope; to process payments and enforce our terms; to send service-related and (where permitted) marketing communications; and to comply with legal obligations. We do not use your data for purposes incompatible with these without telling you.

5. Lawful bases for processing (UK GDPR)

Under UK GDPR we rely on: contract (to provide the service you signed up for); legitimate interests (e.g. security, analytics, improving the product); consent where we ask for it (e.g. marketing); and legal obligation where we must process data to comply with law. You can withdraw consent where it applies without affecting the lawfulness of earlier processing.

6. Cookies and similar technologies

We and our providers may use cookies and similar technologies (e.g. local storage) on the marketing site and in the app for essential operation and preferences. Essential cookies and local storage remain active so the site and app can function — for example, to keep you signed in or remember your settings.

Optional analytics cookies on the marketing site (e.g. Google Analytics) are not enabled by default. We only load them if you accept analytics via our cookie banner. Until then, those analytics cookies are not used. For more detail, see our Cookie policy.

7. Sharing and processors

We do not sell your personal data. We may use third-party service providers who process data on our behalf (processors). They only process data as necessary to provide the service. Examples include:

• Hosting: The marketing site is hosted on Cloudflare Pages; the app is hosted on DigitalOcean. These providers process traffic and app data as necessary to run the services.
• Payments: We use Stripe to process payments. Stripe handles payment and billing data in line with our instructions and its own policies.
• Email: We use Resend to deliver email on our behalf, including waitlist and early access signups from the marketing site and transactional or support email where applicable.
• SEO and AI providers: Certain features may rely on third-party providers such as OpenAI and DataForSEO to generate SEO insights, ranking information, audits, or AI-assisted outputs. These providers process only the data needed to deliver the relevant feature.

We choose processors that meet appropriate security and data protection standards. We require them to use data only for the purposes we specify and do not give providers unrestricted access to your account.

8. International transfers

Your data is primarily processed in the UK and the European Economic Area. Some of our providers may process data outside the UK or EEA. Where that happens, we use approved safeguards — such as adequacy decisions or standard contractual clauses — as required under UK law.

9. Data retention

We keep your data only as long as needed to provide the service, comply with law, and resolve disputes. Account and usage data are typically retained while your account is active and for a reasonable period after closure. Support and contact messages are kept as long as necessary to handle enquiries and any follow-up.

We may retain backups, logs, and limited account records for security, fraud prevention, legal compliance, and dispute resolution purposes. We may retain anonymised or aggregated data for longer. You may request deletion of your account data by contacting us.

10. AI-assisted features

Some features may use AI providers to generate summaries, recommendations, or SEO-related outputs. Information submitted to those features may be processed securely by our providers solely for the purpose of generating the requested output.

11. Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal data against unauthorised access, loss, or misuse. No system is completely secure; we cannot guarantee absolute security. You are responsible for keeping your account credentials safe.

12. Your rights (UK GDPR)

Under UK data protection law you have the right to: access your data; request a copy of the personal data we hold about you; have inaccuracies corrected; request erasure in certain cases; restrict or object to processing; data portability where applicable; and withdraw consent. You have the right to complain to the UK Information Commissioner's Office (ICO). To exercise any of these rights, contact us at [email protected]. We will respond within the timeframes required by law.

13. Children

SERPscope is not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete it.

14. Account deletion

You may request deletion of your account by contacting [email protected]. Some information may be retained where necessary for legal, security, fraud prevention, or accounting purposes.

15. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and change the "Last updated" date. If changes are material, we may notify users through the app or by email.

16. Contact us

For privacy questions, to exercise your rights, or to report a concern, contact us at [email protected].

Some third-party providers may change as we improve the service.