Privacy Policy

1. Who we are

Serpify is a product of Scribbify Media LLP (“Serpify”, “we”, “us”), of 4A-4150, III FL, Sector 4 Resident, Vasundhara, Ghaziabad, Uttar Pradesh, India – 201012. This policy explains how we handle personal information when you visit serpifyapp.com, use the Serpify application at app.serpifyapp.com, or use its API or MCP server (together, the “service”).

We decide how and why your account, billing and website information is used. The content a customer adds to a workspace, such as the websites, keywords, competitors and report recipients it tracks, is added and controlled by that customer, and we process it to provide the service to them.

2. Information you give us

• Account details: your name, email address and password. We store passwords only as one-way hashes. If you turn on two-factor authentication or add a passkey, we store what is needed to verify it, with the two-factor secret and recovery codes stored encrypted. When you create an account, we record when you agreed to the Terms of Service and Privacy Policy, and which versions.
• Billing details: if you buy a paid plan or add-on, the billing name, address and country you give us, and your GSTIN if you have one. Your tax invoices and credit notes name them. When you change them, we keep the earlier versions until the workspace is deleted, so that each invoice names the details that applied when you paid.
• Workspace and team details: workspace names and settings, and for each person you invite, their email address, role and the projects you give them access to.
• Project content: the websites, keywords, AI questions, competitors, locations, tags and notes you add, and keyword files you import (we read the file and keep only the keywords).
• Branding and reports: the company name, colours, footer text and logo you add, report schedules, and the email addresses of report recipients.
• Alerts and integrations: alert rules, Slack incoming-webhook addresses, webhook endpoints and API tokens you create.
• Requests and free tools: on Serpify’s public pages you can request a free report or done-for-you help. We collect what you enter, such as your name, email address, website, brand, budget and notes, and whether you ticked the box to receive tips by email.
• Messages: what you send us when you email us.

3. Information we collect automatically

• Sign-up checks: when you create an account, we keep a keyed one-way hash of your IP address (not the address itself) to limit repeated trial sign-ups and abuse. Public free tools and request forms keep the same kind of hash.
• Login security: we use your email address and IP address briefly to limit repeated login attempts.
• Sign-up source: if you allow it in the cookie banner on Serpify’s public pages, we remember how you arrived (campaign tags, advert click identifiers, the referring site and the page you landed on) and save it with your account or request. If you decline, we don’t.
• Usage records: which features use your plan’s allowances, such as research credits and checks, so we can apply plan limits and manage costs. These records are kept as counts and costs.
• Administration: when a Serpify administrator changes an account, we record the change and the administrator’s IP address.
• Server and security logs: our hosting and network providers, and our own application logs, record technical information about requests, such as IP addresses, times and errors, to operate and secure the service.

4. Search and AI data we collect for you

To provide the service, we collect information from public sources for the keywords, questions, websites and businesses you track:

• Google and Bing search results, including positions, page titles, addresses and Google AI Overview references;
• Google Maps results and Google Business Profile information, such as ratings, review counts and categories;
• keyword and website research data, such as search volumes and the pages that rank;
• the answers that AI assistants (ChatGPT, Gemini, Google AI Mode, and on some plans Perplexity and Claude) give to the questions you add, with the sources they cite and the brands they mention;
• the content of web pages you ask us to check, such as your own site or a prospect’s, which we fetch directly.

This information can include the names of people and businesses that appear in public search results or AI answers. We use it only to show you results, measure visibility and produce your reports.

5. Connected Google accounts

You can connect a Google account to import data from Google Search Console and Google Analytics 4. When you do:

• we ask Google for read-only access to Search Console and Analytics, and for your Google account’s email address. We can’t change anything in your Google accounts;
• we store the access credentials encrypted, and the connected account’s email address so you can see which account is linked;
• for the properties you choose, we import Search Console search queries, devices, pages, clicks, impressions and average positions (up to 16 months back, then daily), and from Google Analytics the number of sessions, engaged sessions and key events, including how many came from AI assistants (up to 14 months back, then daily). We don’t import information that identifies individual visitors to your site;
• this data is shown only to people with access to the workspace, and in the reports and share links that workspace creates.

When you disconnect Google, we ask Google to revoke our access and delete the stored credentials. Data already imported stays in your projects until you delete them or your account. When you delete your account, we revoke access and delete the credentials as part of the deletion.

Serpify’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don’t use Google user data for advertising, we don’t sell it, and we don’t send it to AI providers.

6. Payments

Paid plans are processed by Razorpay. You enter your payment details with Razorpay, and Serpify does not receive or store your full card details. To set up a subscription we send Razorpay your name and email address (to pre-fill checkout) and internal workspace and subscription references. We receive and keep subscription and payment identifiers, amounts, currency and status, and the notifications Razorpay sends us about your subscription, which can include contact and payment-method details. Razorpay handles your payment information under its own privacy policy.

Tax invoices for payments, and credit notes for refunds, are issued in the name of Scribbify Media LLP. Each records your billing details, the plan or add-on, the amount, the tax and the Razorpay payment, subscription and refund references, and you can download them from your billing settings.

7. Cookies and analytics

This website (serpifyapp.com)

This marketing website’s own server does not set cookies. For visitors outside the European Economic Area, the United Kingdom and Switzerland, the site loads Google Tag Manager, which runs one tag: Google Analytics 4. For visitors in those countries, or whose country we can’t determine, it loads neither. Google Analytics uses cookies (such as _ga) to count visits and show us how visitors find and use the site, for example which pages are viewed, the referring website and the type of device. Google receives your IP address and browser details when the tag loads.

You can block or delete cookies in your browser settings, or use an extension that blocks analytics. The site works normally without them.

Email addresses on this website, such as on the Contact page, are hidden from automated scrapers by Cloudflare and revealed in your browser by a small Cloudflare script. It sets no cookies.

The Serpify application (app.serpifyapp.com)

Forms on Serpify’s public pages are protected by Cloudflare Turnstile, which checks that a person is submitting the form and receives your IP address and browser details to do so.

8. How we use information

• to provide the service: run rank and AI answer checks, imports, research and reports, and show you the results;
• to send service emails: account verification, password resets, invitations, a welcome message and setup tips, trial reminders, alerts, and the reports you schedule;
• to bill you and manage subscriptions, plan limits and usage;
• to keep accounts and the service secure, and to prevent fraud and abuse;
• to answer your messages and requests;
• to understand how visitors find and use this website and, if you allow it, where sign-ups come from;
• to meet legal obligations, and to protect our rights and those of our users.

We don’t sell personal information. We don’t send marketing newsletters. Some AI features, such as drafting articles and proposals and classifying the tone of AI answers, send the relevant business details and answer excerpts to our AI provider (see section 9); they never include your connected Google data.

9. Service providers

We use these providers to run Serpify. Each receives only what it needs for its task, under its own terms and privacy policy.

10. Who else can see information

• Your workspace: owners and admins can see the workspace’s data and its members. Members and view-only clients see the projects they’re given.
• Share links and reports: anyone with a report share link can view that report while sharing is on. Scheduled reports go to the addresses you choose. You can turn a share link off or replace it at any time.
• Your own integrations: alerts go to the Slack channels and webhook endpoints you configure.
• Serpify staff: a small number of administrators can access accounts to provide support, operate billing and keep the service secure.
• Legal reasons: we may disclose information if the law requires it, or where needed to protect Serpify, our users or others.

11. Where information is processed

Serpify’s application, database and stored files are hosted in the United States, and this website is also served from the United States. Cloudflare delivers our sites through its global network. Our other providers may process information in other countries, including India and the United States. If you use Serpify from another country, your information is transferred to and processed in these countries.

12. How long we keep information

These periods are applied automatically:

Everything else in your account, including rank history, AI answers and imported Google data, is kept while your account exists so that you can see trends over time. A project you delete is removed from your workspace straight away, and its data is permanently erased when you delete your account.

Some records are kept after the account they relate to is deleted:

• the payment notifications Razorpay sent us, which can include the payer’s contact and payment-method details, for accounting, tax and dispute purposes (Razorpay also keeps its own records of your payments);
• tax invoices and credit notes, including the billing details they name, for as long as tax law requires us to keep them;
• a record that the deletion took place, without your name or email address;
• records of administrator actions, with your name and email address replaced;
• done-for-you requests, with the requester’s name, email address and notes removed;
• technical logs and records of failed background tasks, which can contain an email address.

Copies of our databases are kept as backups so that we can recover from failures, and deleted information can remain in backups until they are replaced.

13. Exporting and deleting your data

• Export: you can download a copy of your account and workspace data from your profile settings (you’ll be asked for your password), and export keywords and other tables as CSV or Excel files from the pages that show them.
• Delete your account: you can delete your account from your profile settings. We sign you out everywhere, then cancel your paid subscription and add-ons with Razorpay, revoke Google access, delete your API tokens, webhooks and stored files (logos and report PDFs), and permanently delete the workspaces you own with all their projects, data, billing details (including earlier versions), subscriptions and payment history, and then your user account. Records described in section 12 as kept after deletion are kept for those reasons.
• Workspaces you belong to: if you’re a member of someone else’s workspace, deleting your account removes your access; the workspace and its data belong to its owner.

Cancelling or deleting doesn’t automatically refund a billing period you have already paid for; see our Cancellation and Refund Policy and Terms of Service.

14. Your privacy rights

Depending on where you live, you may have the right to ask us to:

• confirm whether we hold information about you and give you a copy of it;
• correct information that is inaccurate or incomplete;
• delete your information;
• give you your information in a portable format;
• restrict or object to some uses of your information;
• withdraw a consent you have given, without affecting what was done before.

You can do much of this yourself in the application (section 13). For anything else, email [email protected]. We may need to confirm your identity before acting on a request. If you aren’t satisfied with our answer, you may be able to complain to your local data protection authority.

If your information is in a workspace that belongs to someone else (for example, you were invited to a workspace or receive its reports), we may refer your request to that workspace’s owner.

15. Security

We protect accounts and data with measures that include hashed passwords and checks against known breached passwords, optional two-factor authentication and passkeys, limits on login attempts, encrypted storage of connected-service credentials and webhook secrets, API tokens stored only as hashes, signed webhooks, encrypted connections to our websites, and role-based access within workspaces. No method of storage or transmission is completely secure, and we can’t guarantee absolute security.

If you believe your account has been accessed without your permission, change your password and contact us straight away.

16. Children

Serpify is a service for businesses and professionals and is not directed at children. You must be at least 18 years old to create an account, and we don’t knowingly collect information from anyone younger. If you believe a child has given us information, contact us and we’ll delete it.

17. Changes to this policy

We may update this policy as Serpify changes. The date at the top shows when it last changed. If a change is significant, we will tell account holders by email or in the application before it takes effect.

18. Contact us

For questions about this policy or your information, email [email protected], or write to Scribbify Media LLP, 4A-4150, III FL, Sector 4 Resident, Vasundhara, Ghaziabad, Uttar Pradesh, India – 201012.