Privacy Policy

Introduction

Serptools.ai is a trading name (DBA) of AngelPBX Limited ("we," "our," or "us"), a company registered in Hong Kong with its registered office at 2301, Bayfield Building, 99 Hennessy Rd, Wan Chai, Hong Kong[cite: 6]. We are committed to protecting your privacy and ensuring the security of your personal information[cite: 6]. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SEO tools and services[cite: 6].

We comply with applicable data protection laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), the Hong Kong Personal Data (Privacy) Ordinance (PDPO), and other relevant privacy regulations[cite: 6].

Information We Collect

We collect various types of information to provide and improve our services[cite: 6]:

Account Information

• Email address (required for account creation and communication)[cite: 6]
• Username and password (encrypted and stored securely)[cite: 6]
• Profile information you choose to provide[cite: 6]
• Account preferences and settings[cite: 6]
• Communication preferences[cite: 6]

Service Usage Data

• Keywords, URLs, and domains submitted for SEO analysis[cite: 6]
• Search engine results page (SERP) data and ranking reports[cite: 6]
• API requests and responses[cite: 6]
• Credit balance and transaction history[cite: 6]
• Feature usage patterns[cite: 6]
• Support ticket content and correspondence[cite: 6]

Technical Information

• IP address and geolocation data[cite: 6]
• Browser type, version, and language[cite: 6]
• Device information (operating system, device type)[cite: 6]
• Referral URLs and page views[cite: 6]
• Session duration and timestamps[cite: 6]
• Cookies and similar tracking technologies[cite: 6]

Payment Information

• Billing name and address[cite: 6]
• Payment method details (processed by secure third-party providers)[cite: 6]
• Transaction history and receipts[cite: 6]
• We do not store complete credit card numbers[cite: 6]

How We Use Your Information

We use your information for the following legitimate purposes[cite: 6]:

• Service Delivery: Process and fulfill SEO data requests and analyses, generate and deliver SERP reports and ranking insights, provide API access and manage rate limits, track analysis status and deliver results, and maintain and improve service performance[cite: 6].
• Account Management: Create and maintain your user account, process payments and manage billing, handle credit balance and transaction records, and verify identity and prevent unauthorized access[cite: 6].
• Communication: Send service-related notifications and updates, respond to support requests and inquiries, provide account and billing information, and send marketing communications (with your consent)[cite: 6].
• Improvement and Analytics: Analyze usage patterns to improve services, develop new features and functionality, monitor service performance and reliability, and conduct research and statistical analysis[cite: 6].
• Security and Compliance: Detect and prevent fraud and abuse, enforce our Terms of Service, comply with legal obligations, protect against security threats, and resolve disputes and troubleshoot issues[cite: 6].

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for marketing purposes[cite: 6]. We may share your information only in the following limited circumstances[cite: 6]:

Service Providers

We work with trusted third-party service providers who assist us in operating our platform[cite: 6]:

• Payment processors (Stripe, Cryptomus) for transaction processing[cite: 6]
• Cloud hosting providers for infrastructure and data storage[cite: 6]
• Email service providers for communications[cite: 6]
• Analytics platforms for usage insights[cite: 6]
• Customer support tools[cite: 6]

These providers have access only to necessary information and are contractually obligated to protect your data[cite: 6].

Legal Requirements

We may disclose information when required by law or to protect rights[cite: 6]:

• Comply with legal obligations, court orders, or subpoenas[cite: 6]
• Enforce our Terms of Service and other agreements[cite: 6]
• Protect the security and integrity of our services[cite: 6]
• Protect the rights, property, or safety of AngelPBX Limited, Serptools.ai, users, or the public[cite: 6]
• Investigate fraud, abuse, or illegal activity[cite: 6]

Business Transfers

If AngelPBX Limited or Serptools.ai is involved in a merger, acquisition, or asset sale[cite: 6]:

• Your information may be transferred as part of business assets[cite: 6]
• We will notify you before information is transferred[cite: 6]
• The acquiring entity will be bound by this Privacy Policy[cite: 6]

Aggregated Data

We may share aggregated, non-personally identifiable information[cite: 6]:

• Usage statistics and industry trends[cite: 6]
• Service performance metrics[cite: 6]
• This data cannot be used to identify individual users[cite: 6]

Data Security

We implement comprehensive security measures to protect your information[cite: 6]:

Technical Safeguards

• TLS/SSL encryption for data transmission[cite: 6]
• AES-256 encryption for data at rest[cite: 6]
• Secure password hashing (bcrypt)[cite: 6]
• API key encryption and secure storage[cite: 6]
• Regular security patches and updates[cite: 6]

Organizational Measures

• Role-based access controls[cite: 6]
• Multi-factor authentication for staff[cite: 6]
• Regular security audits and penetration testing[cite: 6]
• Employee training on data protection[cite: 6]
• Incident response and breach notification procedures[cite: 6]

Payment Security

• PCI DSS compliant payment processing[cite: 6]
• No storage of complete credit card numbers[cite: 6]
• Tokenization of payment information[cite: 6]
• Secure payment gateway integration[cite: 6]

Note: While we implement industry-standard security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security[cite: 6].

Your Privacy Rights

You have comprehensive rights regarding your personal information[cite: 6]:

• Access and Portability: View and download your account information, export your data in machine-readable format, and request copies of data we hold about you[cite: 6].
• Correction and Updates: Update your profile information anytime, correct inaccurate data, and modify communication preferences[cite: 6].
• Deletion (Right to be Forgotten): Request deletion of your account and data. We will delete data within 30 days unless legally required to retain it. Some information may be retained in backups for security purposes[cite: 6].
• Marketing Communications: Opt out of promotional emails anytime. Unsubscribe links are in all marketing emails. Service-related emails cannot be opted out[cite: 6].

To exercise these rights, contact us at privacy@serptools.ai. We will respond within 30 days[cite: 6].

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience[cite: 6]:

• Essential Cookies: Required for basic service functionality (login, sessions)[cite: 6]
• Analytics Cookies: Help us understand usage patterns and improve services[cite: 6]
• Preference Cookies: Remember your settings and preferences[cite: 6]
• Marketing Cookies: Track effectiveness of advertising (with consent)[cite: 6]

Managing Cookies: Most browsers allow you to control cookies through settings. You can block or delete cookies, but some features may not work. Essential cookies cannot be disabled for service functionality. Third-party cookie policies apply to their services[cite: 6].

Do Not Track Signals: We respect Do Not Track (DNT) browser settings. When DNT is enabled, we limit tracking and data collection[cite: 6].

Data Retention

We retain your information only as long as necessary[cite: 6]:

Active Accounts

• Account data retained while account is active[cite: 6]
• Usage data retained for service improvement and analytics[cite: 6]
• Transaction records retained for accounting and legal compliance[cite: 6]

After Account Closure

• Account data deleted within 30 days of closure[cite: 6]
• Backup copies deleted within 90 days[cite: 6]
• Financial records retained for 7 years (legal requirement)[cite: 6]
• Anonymized analytics data may be retained indefinitely[cite: 6]

Legal Holds: We may retain data longer if required by law, legal proceedings, or to resolve disputes[cite: 6].

International Data Transfers

Serptools.ai and AngelPBX Limited operate globally. Your information may be transferred to and processed in countries other than your own, including Hong Kong and the United States[cite: 6]:

• Data is primarily stored in secure data centers[cite: 6]
• We ensure appropriate safeguards are in place for international transfers[cite: 6]
• We comply with GDPR requirements for data transfers outside the EU[cite: 6]
• Standard Contractual Clauses are used where applicable[cite: 6]

Children's Privacy

Serptools.ai is not intended for children under 16[cite: 6]:

• We do not knowingly collect information from children under 16[cite: 6]
• If we learn we have collected such information, we will delete it promptly[cite: 6]
• Parents/guardians can contact us if they believe we have collected children's data[cite: 6]
• Users must be 18+ or have parental consent to purchase services[cite: 6]

Third-Party Services

Our service integrates with third-party providers who have their own privacy policies[cite: 6]:

• Payment Processors: Stripe, Cryptomus — for secure payment processing[cite: 6]
• Analytics: We may use analytics services to understand usage patterns[cite: 6]
• Email Services: For sending service notifications and communications[cite: 6]
• Cloud Hosting: For reliable infrastructure and data storage[cite: 6]

We encourage you to review the privacy policies of these third-party services. We are not responsible for their privacy practices[cite: 6].

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements[cite: 6]:

• Material changes will be announced with 30 days notice[cite: 6]
• We will notify you via email for significant changes[cite: 6]
• Updated policy will be posted with a revised "Last updated" date[cite: 6]
• Continued use after changes constitutes acceptance[cite: 6]
• Previous versions are available upon request[cite: 6]