Privacy Policy

Information we collect

We collect the following categories of information:

• Account information — your name, email address, and password. Passwords are stored in hashed form by our authentication provider and are never visible to us.
• Sales inquiry information — when you ask to speak with our team, we collect the contact, company, role, expected usage, and message details you submit so we can respond to your request.
• Brand and project data — the websites, brands, competitors, topics, and prompts you choose to track, along with any settings you configure.
• Analytics we generate — the answers, brand mentions, citations, and visibility metrics produced when we run your tracked prompts against AI search engines.
• Connected Google data (optional) — if you connect Google Analytics or Google Search Console, we access the related traffic and search-performance data, the email address of the connected Google account, and the property or site identifiers you select. See "Google user data" below.
• Payment information — processed by our payment provider, Stripe. We receive limited billing details such as your plan, subscription status, and a Stripe customer identifier. We never receive or store your full card number.
• Usage and device data — your IP address, browser and device type, the pages you view, and server log data.
• Cookies and similar technologies — see "Cookies and tracking" below.

Google user data

If you choose to connect Google Analytics (GA4) or Google Search Console, you grant Searchly read-only access to certain Google account data. We request only the scopes needed to display your analytics inside the product: your basic profile email (to show which account is connected) and read-only access to your Analytics and Search Console data.

Searchly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google data solely to provide and display analytics features within Searchly.
• We do not sell Google user data.
• We do not use Google user data for advertising.
• We do not allow humans to read your Google data, except where you give explicit consent, where it is necessary for security or to comply with applicable law, or where the data has been aggregated and anonymized.

You can disconnect a Google integration at any time from your Searchly settings, or revoke Searchly's access directly at myaccount.google.com/permissions. When you disconnect, we delete the associated access and refresh tokens.

How we use your information

We use your information to:

• Provide, operate, and maintain the Service, including running your tracked prompts and generating visibility analytics.
• Authenticate you and secure your account.
• Process payments and manage your subscription.
• Provide customer support and respond to your requests.
• Monitor, troubleshoot, and improve the Service.
• Detect, prevent, and address fraud, abuse, and security issues.
• Comply with our legal obligations.
• Send you service-related communications and, where permitted, occasional product updates (which you can opt out of).

Legal bases for processing (GDPR)

Where the GDPR applies, we rely on the following legal bases to process your personal data:

• Performance of a contract — to provide the Service you have signed up for.
• Legitimate interests — to secure, maintain, and improve the Service and to prevent abuse, where these interests are not overridden by your rights.
• Consent — for optional cookies and marketing communications, which you may withdraw at any time.
• Legal obligation — where we are required to process data to comply with the law.

How we share information

We do not sell your personal data. We share it only in the following circumstances:

• Service providers (subprocessors) — companies that help us run the Service, such as hosting, database, payment, and analytics providers. See the list below.
• AI search engines — the prompts you configure are sent to third-party AI engines so we can measure how your brand appears in their responses. Avoid including sensitive personal data in your prompts.
• Legal and safety — where we believe disclosure is necessary to comply with the law, enforce our terms, or protect the rights, safety, and security of our users or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, in which case we will notify you of any change in how your data is handled.

Subprocessors

We rely on the following third-party providers to operate Searchly. Each processes personal data on our behalf and maintains its own privacy and security commitments:

• Supabase — database, authentication, and hosting
• Vercel — application hosting and performance analytics
• Stripe — payment processing
• Google — Analytics and Search Console integrations
• CookieYes — cookie consent management

In addition, the prompts you track are sent to third-party AI engine providers (such as OpenAI, Google, and Perplexity) to generate visibility results. Their use of that data is governed by their own terms and privacy policies.

International data transfers

Some of our providers are located outside the European Economic Area (EEA), including in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision — to protect your data.

Data retention

We retain your personal data for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Residual copies may remain in backups for a limited time before being overwritten.

Security

We take reasonable technical and organizational measures to protect your data. Connections to Searchly are encrypted in transit, sensitive integration credentials such as Google refresh tokens are encrypted at rest, and access to personal data is limited to what is necessary to operate the Service. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights (GDPR)

If you are in the EEA or the UK, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (the "right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at piotr@trysearchly.com. You also have the right to lodge a complaint with your local supervisory authority — in Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO).

California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it, to request access to or deletion of your personal information, to correct inaccurate information, and not to be discriminated against for exercising these rights.

Searchly does not sell or share your personal information as those terms are defined under the California Consumer Privacy Act (CCPA), as amended by the CPRA. To exercise your California rights, contact us at piotr@trysearchly.com.

Cookies and tracking

On our marketing website we use cookies and similar technologies for the following purposes:

• Essential cookies — required to sign you in and keep the Service working. These are always active.
• Analytics cookies — Google Analytics helps us understand how visitors use our site. These load only after you accept them.
• Performance analytics — Vercel Speed Insights measures page performance using privacy-friendly, aggregated metrics.

We use Google Consent Mode v2 together with a CookieYes consent banner, so analytics cookies stay disabled until you give consent. You can change or withdraw your choices at any time through the cookie banner or your browser settings.

Children's privacy

Searchly is not intended for children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of Searchly after an update means you accept the revised policy.

Contact us

If you have any questions about this Privacy Policy or how we handle your data, contact the Searchly data controller at:

• piotr@trysearchly.com