Privacy Policy — SerpCue

This policy explains what data SerpCue ("we") collects, why, and how we store it. We aim to collect only what's necessary for the tool to work.

1. Account data

When you register, we store your name, email address and password (the password is stored cryptographically hashed — we never see it or keep it in readable form). We use this data for sign-in, account communication and billing (when active).

2. Sites and analyses

We store the domains you add, the competitors you enter, and analysis results (on-page audit, content gap, technical audit). These analyses are based on publicly available pages that we crawl while respecting robots.txt rules.

3. Google Search Console data

This is the most sensitive part and we want it to be completely clear:

When you connect a Google account, we receive an access token that we store encrypted in our database. The token is tied to a specific project.
We use the token only to read data from Search Console (positions, impressions, clicks, CTR) for the sites you've verified with Google.
We never change anything in your Google account or site, and we don't access any other Google service (Gmail, Drive, etc.).
You can revoke access at any time — with the "Disconnect" button in the app (which deletes the token on our side) or by revoking access in your Google account at myaccount.google.com/permissions.
SerpCue's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not allow humans to read it except with your consent, for security purposes, or where required by law.

4. Third parties

For some features we use external services: Google (PageSpeed Insights, Search Console) and AI providers for text generation. We send them only the data necessary for that feature (e.g. a page URL or text to process). We do not sell your data to anyone.

5. Retention and deletion

We keep your data while your account is active. You can delete your account at any time from your profile settings — deleting the account permanently removes your data, projects, analyses and all stored Google tokens.

6. Cookies

We use only essential cookies: a session cookie to keep you signed in and a CSRF token that protects forms. We don't use advertising or cross-site tracking cookies.

7. Changes

If we make material changes to this policy, we'll announce them in the app or by email and update the date at the top of this page.

8. Contact

For any privacy questions, email us at uros@serpcue.com.