Privacy Policy

1. Overview & Scope

This Privacy Policy explains how Serplora ("we", "our", or "us") collects, stores, processes, and protects personal information gathered through our website (serplora.com), online SEO utilities (/online-tools/), customer account dashboards, and related software applications including CheapCrawler.

By accessing or using Serplora's website or tools, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of our services.

2. Information We Collect

We collect information in three ways: information you provide directly, data gathered automatically through platform usage, and permissions granted via third-party integrations.

A. Information You Provide Directly

• Account & Sign-In Data: When you sign in to Serplora or access your client workspace, we collect your email address. We use a passwordless One-Time Password (OTP) system; we never store user passwords.
• Support & Communications: If you open a support ticket or contact our help desk at /support, we collect your name, email address, Client ID or software license identifier, and any attachments or messages you provide.
• Billing & Transaction Details: For subscription services (such as CheapCrawler or agency retainers), billing transactions are handled directly by PCI-compliant payment gateways (e.g., Stripe). Serplora does not collect or store full credit card numbers or banking secrets.

B. Information Collected Automatically

• Audit & Telemetry Input: URLs, domains, or sitemap links that you submit to tools like our Bulk Status Code Checker or Sitemap URL Extractor are processed in real-time to return HTTP status codes, headers, and metadata.
• Local Browser Storage: To prevent data loss when you refresh or navigate between tools, Serplora stores audit history and interface state (e.g., sidebar collapse preferences) locally on your device via localStorage. This data remains on your machine until you manually click "Clear History" or purge your browser data.
• Log & Network Data: Our edge infrastructure (hosted via Cloudflare) automatically logs standard network requests, including IP address, browser type, referring URLs, operating system, and request timestamps to prevent abuse and DDoS attacks.

3. Google User Data & OAuth Limited Use Policy

Serplora offers an automated integration allowing users to export audit rows and status reports directly into their personal or Google Workspace accounts via Google Sheets.

Specifically regarding Google OAuth credentials and scopes:

• Exact Purpose: We request Google OAuth permissions strictly to create a new spreadsheet in your Google Drive and write the output records (such as HTTP response codes, redirect chains, and URLs) requested by you.
• No Secondary Use: Serplora does not read, access, modify, or delete any other files, folders, or spreadsheets in your Google Drive. We do not use Google user data for advertising, machine learning model training, or unauthorized analytics.
• No Data Sharing: Your Google tokens are maintained client-side in memory during the export sequence and are never stored in a central Serplora database, transferred to third parties, or sold.

4. How We Use Your Information

We process your information strictly for legitimate commercial and operational purposes, including:

• Authentication & Account Management: Issuing one-time login codes to verify account ownership and sync your subscribed tools and services.
• Service Delivery: Running requested crawls, status checks, sitemap parsing, and spreadsheet generation.
• Customer Support: Responding to client service requests, technical debugging, and campaign inquiries.
• Security & Abuse Prevention: Enforcing rate limits on public tools, mitigating malicious automated scraping, and securing edge servers.
• Compliance: Fulfilling accounting, tax, and legal obligations related to commercial software and client retainers.

5. Data Storage & Retention

We retain personal account records only for as long as your account remains active or as required by applicable commercial and tax regulations.

• Account Records: Email records and active subscription seats are retained until you request account deletion.
• Client-Side Audit Cache: Telemetry lists, crawl queues, and historical runs displayed in the "Recent Audits" modal are stored in your device's browser memory. You can permanently erase this data at any time by clicking "Clear History" inside the modal.
• Edge Logs: Transient server access logs are automatically discarded within standard rotation cycles (typically 30 days) unless retained for ongoing security investigations.

6. Third-Party Sub-Processors

We work with trusted third-party service providers to deliver infrastructure, analytics, and billing:

7. Your Privacy Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction (including the European Economic Area, United Kingdom, and California), you hold specific statutory rights regarding your personal information:

• Right of Access & Portability: You may request a machine-readable copy of the personal data we hold about you.
• Right to Rectification: You may ask us to update or correct inaccurate or incomplete account records.
• Right to Erasure ("Right to Be Forgotten"): You may request that we delete your account and associated personal data, subject to legal recordkeeping obligations.
• Right to Restrict or Object to Processing: You may object to the processing of your data under specific conditions.
• Non-Discrimination: We will never discriminate against you, alter pricing, or deny service quality for exercising your privacy rights.

To exercise any of these rights, please open a ticket through our Support Help Desk or email our compliance team at [email protected]. We respond to all verified requests within statutory timeframes (30 days for GDPR).

8. Data Security

We implement enterprise-grade technical and organizational safeguards to protect your information. All traffic between your browser and Serplora is encrypted using modern TLS/HTTPS. Authentication operates via short-lived, cryptographically secure OTP tokens. Our infrastructure uses isolated Cloudflare edge workers with strict origin isolation.

9. Contact & Data Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data protection practices, please contact us:

• Support Desk: serplora.com/support
• Email: [email protected]
• Website: https://serplora.com