Privacy policy

Privacy policy

Your privacy is critically important to us. At CrazySerp, we have a few fundamental principles:

• We are thoughtful about the personal information we ask you to provide and the personal information that we collect about you through the operation of our services.
• We store personal information for only as long as we have a reason to keep it.
• We aim to make it as simple as possible for you to control what information on your CrazySerp account is shared publicly (or kept private), indexed by search engines, and permanently deleted.
• We help protect you from overreaching government demands for your personal information.
• We aim for full transparency on how we gather, use, and share your personal information.

Below is our Privacy Policy, which incorporates and clarifies these principles.

Your Account and CrazySerp Site

Data Protection

CrazySerp is committed to protecting your personal data and respecting your privacy. We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Union.

Data We Collect

We collect the following types of data:

• Account Information: Email address, name, company name (if applicable)
• API Usage Data: API requests, endpoints accessed, parameters used, timestamps
• Billing Information: Processed securely through FastSpring, our payment processor
• Technical Data: IP addresses, browser type, device information for security and optimization
• Communication Data: Support tickets, emails, and other communications with us

How We Use Your Data

We use your data to:

• Provide and maintain our SERP API services
• Process payments and manage subscriptions
• Send service-related communications and updates
• Improve our services and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. This includes encryption of sensitive data, regular security audits, and restricted access to personal information.

General Data Protection Policy

Data Minimization

We follow the principle of data minimization, collecting only the personal data that is necessary for the specific purposes for which it is processed. We do not process personal data in a way that is incompatible with the purposes for which it has been collected.

Lawful Basis for Processing

We process your personal data based on the following lawful bases:

• Contract: Processing necessary for the performance of our services
• Legitimate Interests: Processing necessary for our legitimate business interests
• Legal Obligation: Processing necessary to comply with legal requirements
• Consent: Where you have given clear consent for processing

Third-Party Sharing

We do not sell, trade, or rent your personal data to third parties. We may share your data with:

• FastSpring: Our payment processor, for billing and subscription management
• OVH: Our hosting provider, for infrastructure and data storage
• Legal Authorities: When required by law or to protect our rights

All third-party processors are required to process your data in accordance with applicable data protection laws and our instructions.

International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses approved by relevant authorities.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Retention Periods

• Account Data: Retained for the duration of your account and up to 90 days after deletion
• API Logs: Retained for 30 days for debugging and security purposes
• Billing Records: Retained for 7 years as required by tax and accounting regulations
• Support Communications: Retained for 2 years after resolution
• Marketing Communications: Until you unsubscribe or request deletion

After the retention period expires, we will securely delete or anonymize your personal data. In some cases, we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

Rights of Access, Rectification, Deletion, Restriction and Opposition to Processing

Under data protection laws, you have rights regarding your personal data. These rights may vary depending on your location, but generally include:

Your Rights

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete personal data
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data in certain circumstances
• Right to Restriction: You can request that we restrict processing of your personal data in certain circumstances
• Right to Data Portability: You can request to receive your personal data in a structured, commonly used format
• Right to Object: You can object to processing of your personal data in certain circumstances
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@crazyserp.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

Please note that some rights are not absolute and may be subject to restrictions. For example, we may need to retain certain data for legal compliance or to establish, exercise, or defend legal claims.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with your local data protection authority. However, we encourage you to contact us first so we can try to resolve your concerns.

Delete an Account

You have the right to delete your CrazySerp account at any time. Account deletion is a permanent action that cannot be undone.

What Happens When You Delete Your Account

• Your API keys will be immediately revoked and cease to function
• Any active subscriptions will be cancelled
• Your personal data will be deleted or anonymized within 90 days
• Billing records will be retained as required by law (typically 7 years)
• Any remaining credits will be forfeited

How to Delete Your Account

To delete your account:

1. Log in to your CrazySerp account
2. Navigate to Account Settings
3. Click on "Delete Account"
4. Confirm your decision by entering your password
5. Click "Permanently Delete Account"

Alternatively, you can request account deletion by emailing support@crazyserp.com from your registered email address.

Data Export

Before deleting your account, you may want to export your data. You can request a copy of your personal data by contacting privacy@crazyserp.com. We will provide your data in a commonly used, machine-readable format within 30 days of your request.

Payment Processing

CrazySerp uses FastSpring as our Merchant of Record for all payment processing. This means that FastSpring handles all aspects of payment collection, processing, and management on our behalf.

Information Collected by FastSpring

When you make a purchase, FastSpring collects:

• Payment card details (processed securely and not stored by CrazySerp)
• Billing address and contact information
• Tax identification numbers (where required)
• Transaction history and invoices

Payment Security

FastSpring is PCI DSS compliant and uses industry-standard encryption to protect your payment information. CrazySerp never has direct access to your complete payment card details.

All payment pages are served over HTTPS to ensure your information is encrypted during transmission. FastSpring supports 3D Secure authentication for additional security on supported cards.

Payment Methods

FastSpring supports various payment methods including:

• Credit and debit cards (Visa, MasterCard, American Express, Discover)
• PayPal
• Wire transfers (for enterprise customers)
• Additional local payment methods depending on your region

Refunds and Disputes

Refund requests are processed through FastSpring according to our refund policy. For payment disputes or chargebacks, FastSpring will work with us to resolve the issue. You may be contacted for additional information during this process.

FastSpring Privacy Policy

For more information about how FastSpring handles your payment data, please review their privacy policy at https://fastspring.com/privacy/

Users and Personal Data

Types of Users

CrazySerp serves different types of users:

• Individual Users: Personal accounts for developers and researchers
• Business Users: Company accounts with team management features
• Enterprise Users: Large organizations with custom requirements
• Trial Users: Users evaluating our services with limited access

Personal Data We Process

Depending on your user type and interactions with our service, we may process:

• Identity Data: Name, username, title
• Contact Data: Email address, phone number (optional)
• Technical Data: IP address, browser type, device information, API usage logs
• Usage Data: How you use our services, API endpoints accessed, query parameters
• Profile Data: Preferences, feedback, survey responses
• Marketing Data: Preferences about receiving marketing from us

Special Categories of Data

We do not intentionally collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data).

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children under 18. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete such information.

Accuracy of Data

We take reasonable steps to ensure that the personal data we process is accurate, complete, and current. However, we depend on you to update or correct your personal data whenever necessary. You can update your account information at any time through your account settings.

Cookies and Tracking

CrazySerp uses cookies and similar tracking technologies to track activity on our service and hold certain information. Cookies are files with small amounts of data which may include an anonymous unique identifier.

Types of Cookies We Use

• Essential Cookies: Required for the operation of our service. These include authentication cookies and security cookies.
• Functionality Cookies: Remember your preferences and settings to enhance your experience.
• Analytics Cookies: Help us understand how visitors interact with our website to improve our services.
• Performance Cookies: Monitor site performance and identify issues.

Third-Party Cookies

We may use third-party services that use cookies:

• Google Analytics: To analyze website usage and improve our services
• FastSpring: For payment processing and subscription management
• Cloudflare: For security and performance optimization

Managing Cookies

You can control and manage cookies in various ways:

• Browser Settings: Most browsers allow you to refuse or accept cookies
• Cookie Preferences: Use our cookie consent tool to manage your preferences
• Do Not Track: We respect Do Not Track signals where legally required

Please note that disabling certain cookies may impact the functionality of our services.

Other Tracking Technologies

In addition to cookies, we may use:

• Local Storage: To store preferences and session data
• Session Storage: For temporary data during your session
• Pixel Tags: To understand email engagement
• API Logs: To monitor usage and ensure security

Updates to Cookie Policy

We may update our use of cookies from time to time. We will notify you of any changes by updating the "Last updated" date of this Privacy Policy. For significant changes, we may provide additional notice through our service or via email.