Privacy Policy

This Privacy Policy explains what data Serpwize Technologies LLP ("we", "us") collects through AI Visibility (the "Service"), why, and how it's handled. It applies to anyone who visits our site or creates an account.

1. What we collect

Account data. Email address and authentication details when you sign up (handled by Supabase Auth), and your organization name.

Usage data. Domains you analyze, prompts you track, content you generate, and the AI engine responses returned for them — this is the core data the Service is built to collect on your behalf.

Billing data. Subscription plan, status, and renewal dates. Card and payment details are collected and processed directly by our payment processor, DodoPayments — we never see or store your full card number.

Connected CMS credentials. If you connect WordPress or Shopify for publishing, we store the resulting API credentials or OAuth tokens encrypted at rest (AES-256-GCM), used solely to publish content you initiate.

Technical data. Standard server logs (IP address, request timestamps, error traces) for security and debugging, and DataForSEO/AI-engine query costs logged per account for our own internal cost monitoring — this doesn't affect what you're billed, since every plan is a fixed monthly price regardless of usage within your plan's limits.

2. How we use it

• To operate the Service: run analyses, track prompts, generate content, and publish it where you direct.
• To bill you correctly and enforce your plan's limits.
• To send transactional email (billing confirmations, stalled-run alerts, password resets) — not marketing, unless you opt in separately.
• To debug and improve the Service, including investigating abuse or unusual usage patterns.

We do not sell your data. We do not use your domain analysis data to train third-party AI models — the Service queries third-party AI engines on your behalf, it doesn't hand your data over for their model training beyond however that provider's own API terms already govern a normal API request.

3. Who we share it with

We share the minimum necessary data with the vendors that make the Service work:

• Supabase — authentication and primary database hosting.
• DataForSEO — proxies our queries to ChatGPT, Gemini, Claude, Perplexity, and Google AI surfaces, and provides SERP/keyword data. Your prompt text and domain are sent to fulfill these queries.
• DodoPayments — payment processing and billing, acting as merchant of record.
• WordPress / Shopify — only for sites you explicitly connect, to publish content you approve.
• Email delivery (SMTP) — to send account and billing notifications.

We don't share data with advertisers or data brokers. We may disclose data if legally required (e.g., a valid court order) or to protect the Service and its users from fraud or abuse.

4. Cookies

We use a single essential session cookie (via Supabase Auth) to keep you signed in. We don't use third-party advertising or cross-site tracking cookies.

5. Data retention

We retain account and usage data for as long as your account is active, plus a reasonable period after cancellation in case you resubscribe or need historical reports. You can request deletion at any time (see Section 7); we'll remove your data except where we're required to retain billing records by law.

6. Security

Data is encrypted in transit (HTTPS) and sensitive credentials (CMS tokens) are encrypted at rest. Access to production data is limited to what's needed to operate and support the Service. No system is perfectly secure, and we can't guarantee absolute security, but we treat this seriously and patch known issues promptly.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to certain processing. To exercise any of these, email admin@serpwize.com — we'll respond within 30 days.

8. International transfers

Our infrastructure and vendors may process data outside your home country. Where required, we rely on standard contractual safeguards for these transfers.

9. Children

The Service is intended for business use and not directed at children under 16. We don't knowingly collect data from children.

10. Changes

We'll update the date at the top of this page when this policy changes materially, and where required, notify account holders directly.

11. Contact

Privacy questions or requests: admin@serpwize.com.