Privacy policy

Effective date: September 25, 2026

At SERP Cluster, managed by Bajrang (Sole Proprietorship, India), we prioritize the security of your proprietary SEO and search performance data. This policy outlines our commitment to transparency regarding the collection, processing, and retention of your information.

1. Information we collect

Authentication & Profile

We use Google OAuth via Supabase to manage user accounts. We access only your basic profile information (name, avatar, and email address) to authenticate your session, protect your workspace, and manage credit balances.

Usage & Keyword Data

We store cluster configurations, task logs, and job history to maintain your workspace dashboard. Raw uploaded keyword lists (CSVs) are held ephemerally in memory/cache during active processing and are purged upon job completion.

Google Search Console (GSC) Data

New

When connecting a GSC property, we request strictly read-only access (searchconsole.readonly). We temporarily ingest query logs, impressions, clicks, CTR, and average positions solely to generate your diagnostic audit reports. We never request or obtain write permissions, and we cannot alter your site configuration or sitemaps.

Site Audit & Crawl Data

New

When initiating a Site SEO Audit or AI Readiness Audit, our crawlers extract live on-page HTML, response headers, schema markup, and performance metrics. Audit payloads are stored securely in encrypted cloud storage buckets tied strictly to your unique account identifier.

2. Third-party processors

We process data on the basis of Contractual Necessity to provide our platform services. Your data is shared strictly with the following sub-processors:

  • Paddle: Our Merchant of Record for global transactions. They manage all PCI-compliant billing and personal payment data; SERP Cluster never sees or stores complete credit card numbers.

  • Supabase: Enterprise infrastructure for relational database hosting, secure user authentication, and encrypted cloud storage buckets.

  • Contabo: Provides dedicated, high-performance core compute power, proprietary crawler workers, and secure processing infrastructure.

  • Google APIs (PageSpeed & GSC): Directly queried to retrieve real-world Core Web Vitals lab data and first-party search performance analytics.

  • AI Model Providers (OpenAI / Anthropic): Used to synthesize executive summaries and generate cluster labels. Only anonymized, aggregated diagnostic facts are passed to synthesis endpoints.

3. Google API Services User Data Policy

SERP Cluster's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google Search Console user data to train generalized AI/ML models, nor do we sell, broker, or aggregate your private search performance metrics for competitive intelligence or cross-tenant advertising.

4. Data retention & account deletion

  • Ephemeral Processing: Raw keyword input files (CSVs) are purged from our working memory cache immediately after a clustering job reaches a "Completed" or "Failed" state.
  • Audit Payloads: Technical audit results, UI payloads, and generated PDF reports remain accessible in your private workspace until manually deleted or until account termination.
  • 30-Day Deletion Grace Period: If you request account closure, your data enters an immediate soft-delete state. All associated profile records, audit files, and cluster metadata are permanently destroyed after 30 days, maintaining compliance with global tax and billing reconciliation requirements.

Zero Model Training Guarantee

We do not utilize your proprietary SEO data, uploaded CSVs, GSC analytics, or audit results to train public AI models. You retain 100% intellectual property ownership of your data and generated reports.

5. Your rights

Under global data protection regulations (including GDPR and CCPA), you hold the right to access, rectify, export, or permanently erase your personal data. You may revoke SERP Cluster's read-only Google Search Console permissions at any time directly through your Google Account Security Settings.

Privacy inquiries

Bajrang — Delhi, India

contact@serpcluster.com

Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts in Delhi, India.