Privacy Policy

Account Information: When you register, we collect your name, email address, and password (stored as a secure hash). If you sign in via Google OAuth, we receive your name, email, and profile picture from Google.

Payment Information: We do not store your card or bank details. All payment data is processed and stored by Razorpay. We retain only transaction references (order IDs, payment IDs) and subscription status.

Usage Data: We collect information about how you use the Service, including pages visited, features used, keywords and projects you create, and actions taken within the dashboard.

Technical Data: We collect your IP address, browser type, operating system, referring URLs, and device information to operate and improve the Service.

Communications: If you contact our support team, we retain records of that correspondence.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process payments and manage your subscription
• Send transactional emails (receipts, password resets, plan expiry notices)
• Respond to support requests and inquiries
• Send product updates and promotional communications (you may opt out at any time)
• Analyse usage patterns to improve the Service
• Comply with legal obligations under Indian law
• Detect and prevent fraud or misuse of the Service

We do not sell, trade, or rent your personal information to third parties. We may share information with:

Service Providers: Trusted third-party vendors who assist us in operating the Service, including:

• Razorpay — payment processing
• Supabase / PostgreSQL — database hosting
• Google — OAuth authentication and Analytics

All service providers are contractually bound to keep your information confidential and to use it only for the purposes of providing their services to us.

Legal Requirements: We may disclose your information if required to do so by law, court order, or government authority in India.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service.

We use cookies and similar technologies to maintain your session, remember your preferences, and analyse Service usage. You may control cookie settings through your browser preferences, but disabling certain cookies may affect Service functionality.

We use:

• Essential cookies — required for authentication and session management
• Analytics cookies — to understand how users interact with the Service (Google Analytics)

We implement industry-standard security measures to protect your personal information, including:

• TLS/HTTPS encryption for all data in transit
• Passwords stored using bcrypt hashing (minimum cost factor 12)
• JWT tokens with 7-day expiry for session management
• Database access restricted to authorised application servers only
• Regular security reviews and dependency updates

However, no method of transmission over the internet is 100% secure. If you believe your account has been compromised, please contact us immediately at security@serpobserver.io.

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law (e.g., financial records must be retained for 8 years under Indian tax law).

Under applicable Indian law and our policy, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your account and associated data
• Portability — request an export of your data in a machine-readable format
• Opt-out — unsubscribe from marketing communications at any time

To exercise any of these rights, email privacy@serpobserver.io. We will respond within 30 days.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you become aware that a minor has provided us with personal information, please contact us and we will delete it promptly.

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy periodically. We will notify you of material changes by email or by posting a notice on the Service at least 7 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the name and contact details of the Grievance Officer are:

For any questions about this Privacy Policy, please contact us at privacy@serpobserver.io or visit our Contact page.