Legal
Privacy policy
What we collect, why, who processes it and your rights under UK GDPR.
Updated
Draft for review. To be finalised with the data protection lead before publication.
What we collect
- Account data: name, email, hashed password (held by Supabase Auth), 2FA factors.
- Billing data: handled by Stripe. We store the customer and subscription references, never full card numbers.
- Product data: websites, search terms, run logs and settings you create.
- Contact form messages: name, email, topic, message and a hashed IP for abuse prevention.
Sub-processors
Supabase (database, auth), Vercel (hosting), Stripe (payments), our email provider (transactional email over SMTP), Browserless (hosted browsers for runs).
Your rights
You can access, correct, export or delete your data. Email support@serpfull.com. You can also complain to the ICO.
Cookies
The marketing site sets no non-essential cookies. The app uses essential authentication cookies. See the cookie policy.