Privacy Policy

1. Information We Collect

We collect information needed to provide search diagnostics, reports, billing, security, and support:

• Account information: Name, email address, workspace details, authentication identifiers, and subscription status. Stripe processes payment card details; SERPPatch does not store full card numbers.
• Google Search Console data: With your explicit consent, read-only property, page, query, clicks, impressions, CTR, and position data for the property you select.
• Public web data: Public HTML, titles, headings, metadata, and search-result information requested for an analysis.
• Usage and feedback: Reports, AI Action Brief inputs and outputs, feedback, support requests, security logs, and plan usage.

2. How We Use Information

• Analyze Search Console performance and identify content decay, quick-win, and CTR opportunities.
• Generate reports, priority scores, and AI Action Briefs when you request them.
• Operate accounts, subscriptions, quotas, customer support, security, and fraud prevention.
• Improve reliability and product quality using aggregated operational information and user feedback.

3. Google API Services User Data

Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. We request only the read-only scope required for Search Console analysis:

https://www.googleapis.com/auth/webmasters.readonly

We do not sell Google user data, use it for advertising, or transfer it except when necessary to provide a user-requested core feature, comply with law, or protect the service.

4. Service Providers and Security

Depending on the deployment environment and feature used, service providers may include Clerk for authentication, Stripe for billing, Google for Search Console access, Neon/PostgreSQL for application data, Vercel or Tencent Cloud International for infrastructure, and Firecrawl, Serper, or Gemini for user-requested analysis features. Providers process information only as needed to provide their services. OAuth credentials are encrypted at rest using AES-256-GCM, and data is transmitted over HTTPS/TLS.

5. Retention, Disconnection, and Deletion

You may disconnect Search Console or request account deletion at any time. When disconnected, SERPPatch stops making new requests for that connection and disables the stored authorization credential. After an account deletion request, we will begin deleting account, workspace, Search Console-derived data, AI brief history, and related personal data, targeting completion within 30 days. Records may be retained longer when required for billing, fraud prevention, security, legal obligations, or dispute resolution. Backups are removed according to the applicable backup cycle.

6. Your Choices and Contact

You may request access, correction, deletion, or clarification about your information, subject to applicable law. Contact the operator at:

DragonVerse Media Inc.
defhnhqf@gmail.com