--- title: "Serpwise Privacy Policy and Data Practices" description: "Learn what personal and service data Serpwise processes, why it is used, how long it is retained, and the rights available to customers and website visitors." url: "https://serpwise.ai/legal/privacy/" source: "https://serpwise.ai/legal/privacy/" --- # Privacy policy **Effective date: August 2026** Welcome to Serpwise AI. We respect your privacy and are committed to protecting it. This privacy policy explains how we collect, use, and safeguard your data when you use our website, dashboard, and edge proxy infrastructure services. Because we provide a business-to-business platform, there is an important distinction in how we handle data: 1. **Data controller:** When you create an account to use the Serpwise AI dashboard, we act as the data controller for your account information. 2. **Data processor:** When your end-users visit a website routed through the Serpwise edge proxy, we act as a data processor on your behalf. ## 1. Information we collect as a data controller When you register for a Serpwise account, we collect the information needed to provide and manage our service: - **Account details:** Your name, email address, company name, and secure authentication credentials. - **Billing information:** We use secure third-party payment processors (such as Stripe) to handle subscriptions. We do not store full credit card numbers on our own servers. - **Platform usage:** We log how you interact with our web dashboard to improve the user experience, monitor system health, and troubleshoot bugs. ## 2. Information we process as a data processor Serpwise acts as a reverse proxy sitting between your website visitors and your origin server. In this capacity, we process web traffic in real-time to apply SEO and Generative Engine Optimization (GEO) modifications. - **Proxy logs:** We temporarily process IP addresses, User-Agent strings, and request URLs. This data is strictly used to serve the request, apply your configured edge rules, and provide traffic analytics within your dashboard. - **No end-user tracking:** We do not track or identify individual visitors across different websites. We do not inject tracking cookies into your end-user traffic unless you explicitly configure a custom rule to do so. - **Data retention:** Raw proxy request logs are retained for a maximum of 12 months, after which they are automatically and permanently deleted. Your subscription plan determines how much of that history is queryable in your dashboard. The plan governs access, not the deletion schedule. Aggregated analytics derived from these logs (counts and totals, containing no IP addresses or User-Agent strings) may be retained for longer. ## 3. Connected Google accounts and Google user data Serpwise integrates with several Google products. These integrations are always opt-in: you connect them yourself from the Serpwise dashboard, you choose which Google account and which properties to authorize, and we only access Google data after you have granted permission through Google’s own consent screen. **What we access** - **Google Search Console** (`auth/webmasters.readonly`) — read-only. We read search performance data (queries, impressions, clicks, average position) and index coverage for the properties you select, to power keyword, content, and technical SEO opportunity reporting in your dashboard. - **Google Analytics** (`auth/analytics.readonly`) — read-only. We read traffic and conversion metrics from the GA4 properties you select, so that SEO reporting reflects real session and conversion outcomes alongside Search Console data. We never modify your Analytics configuration, which is why we request only the read-only scope. - **Google Merchant Center** (`auth/content`) — read and write. We read your product listings and their status and disapproval reasons, and we create and update product data and API data sources on your behalf, so that catalog and feed problems can be surfaced and corrected. - **Google Ads** (`auth/adwords`) — read and write. We upload the offline and server-side conversion events you have configured in Serpwise, and read the account and conversion-action metadata required to route those uploads to the correct destination. **How we use it** Google user data is used solely to provide the specific Serpwise feature you connected it for, and solely for your own organization. We do not use it for advertising, we do not use it to build cross-customer profiles, and we do not use it to develop, improve, or train generalized AI or machine learning models. **How we share it** We do not sell Google user data, and we do not share it with third parties for their own purposes. It is never exposed to other Serpwise customers. Where a Serpwise feature is powered by an AI model, the relevant content may be processed by our AI subprocessors under contract, solely to generate the output you requested; those providers are contractually prohibited from using it to train their models. Access inside Serpwise is limited to members of your organization and to the personnel who operate and support the service. Serpwise’s use and transfer of information received from Google APIs to any other app will adhere to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. **Storage, revocation, and deletion** We store the OAuth credentials needed to keep the integration working, together with the data returned by that integration. You can disconnect any Google integration at any time from the Serpwise dashboard; this stops all further access and deletes the stored credentials. You can also revoke Serpwise’s access directly from your Google Account at [myaccount.google.com/permissions](https://myaccount.google.com/permissions). Deleting your Serpwise account removes all connected Google credentials and the data imported through them. ## 4. How we use your information We strictly use the data we collect to: - Operate, maintain, and secure the Serpwise AI edge proxy platform. - Process subscription payments and send automated billing notices. - Communicate important product updates, security alerts, and technical support. - Analyze platform usage to build better SEO and AI agent optimization features. - Detect and prevent malicious activity, DDoS attacks, or abuse of our infrastructure. ## 5. Data sharing and subprocessors We do not sell your personal data. We only share information with trusted third-party service providers (subprocessors) who are strictly necessary to run our infrastructure: - Cloud hosting and edge network providers - Payment processors (Stripe) - Transactional email delivery services - AI model providers, used to generate the outputs you request from AI-powered features. These providers are contractually prohibited from using your content to train their models. - Google, only for the integrations you explicitly connect (see section 3). Data flows from Google to Serpwise for Search Console and Analytics; for Merchant Center and Google Ads, Serpwise also writes data back to your own Google accounts on your instruction. All our subprocessors are vetted for strict security and privacy standards. ## 6. Your rights and GDPR compliance Serpwise is proudly based in Denmark. We operate in full compliance with the General Data Protection Regulation (GDPR). As a user of our platform, you have the right to: - Access the personal data we currently hold about you. - Request immediate corrections to any inaccurate data. - Request the complete deletion of your account and all associated personal data. - Export your account data in a structured, portable format. If you wish to exercise any of these rights, simply email us using the contact details below. ## 7. Security measures We implement security measures designed to protect both your account data and the proxy traffic flowing through our edge nodes. Traffic is encrypted in transit using TLS, and we use access controls, operational safeguards, and provider-level security controls for stored platform data. If you have specific encryption-at-rest, data residency, or enterprise security requirements, contact us directly so we can review the current status and available arrangements. ## 8. Contact us If you have any questions, concerns, or requests regarding this privacy policy or how we handle your data, please reach out to us directly. **Email:** [hello@serpwise.ai](mailto:hello@serpwise.ai) **Address:** Serpwise AI Åbogade 15 8200 Aarhus Denmark