GDPR & CCPA COMPLIANT • ZERO DATA BROKERING

Privacy Policy

Last Updated: September 2026 • Effective Version 2.5

Executive Privacy Summary (TL;DR)

AnalyzeSERP is architected around a strict client-side privacy philosophy. Here are our non-negotiable data commitments:

Transient URL Parsing

Audited URLs are parsed in volatile server RAM and discarded immediately. We do not retain competitor query logs.

No Data Brokering

We never sell, trade, or monetize your search queries, keyword gaps, or competitor lists to third-party ad networks.

Zero Tracking Pixels

LocalStorage is used strictly for theme mode and daily audit rate limits. No invasive ad tracking cookies.

Quick Navigation:

1. Architecture & Scope 2. Transient URL Parsing 3. Data We Collect 4. Cookies & LocalStorage 5. White-Label PDF Rights 6. Sub-Processors 7. GDPR & CCPA Rights 8. Security Safeguards 9. Data Retention 10. Legal & DPO Contact

01.Scope & Operating Philosophy

This Privacy Policy explains how AnalyzeSERP ("AnalyzeSERP", "we", "us", or "our"), operated under the leadership of Senior SEO Strategist Sarfraj Yusuf, collects, processes, and protects information when you visit and use analyzeserp.com ("Platform" or "Service").

AnalyzeSERP provides high-speed, non-AI technical search diagnostics, multi-URL competitor audits, Core Web Vitals checks, and white-label vector PDF reports. Because search optimization queries often involve confidential commercial strategy, our technical architecture is built to minimize data collection by default.

02.Transient Server-Side URL Processing

When you enter a website address into our audit dock or any single-purpose tool, AnalyzeSERP makes an on-demand, stateless HTTP request to fetch the publicly accessible HTML markup of that webpage using our Node.js Cheerio crawler:

No Long-Term Content Storage: The extracted DOM nodes, title tags, heading hierarchies, word counts, and metadata are processed in volatile server RAM to calculate diagnostic scores and return the JSON response to your browser.
No Scraping Archives: We do not archive or index scraped webpage content in persistent data warehouses for commercial resale or training generative AI models.
Transient In-Memory Caching: To protect audited third-party servers from denial-of-service impacts when users refresh pages, lightweight result payloads may be cached in temporary volatile memory for up to 60 minutes before automatic garbage collection.

03.Data We Collect vs. Data We Never Collect

Data We Process (Minimal)

• Publicly submitted webpage URLs for live analysis
• Anonymized IP hash used strictly for 120s cooldown limits
• User email and name if submitted via our Contact or Auth forms
• Browser technical headers (user-agent, screen size) for rendering

Data We Never Collect

• Credit card or billing info during Public Beta ($0/mo)
• Internal analytics tracking or third-party pixel beacons
• Competitor search lists sold to data brokers
• Cross-site user tracking or behavioral advertising profiles

04.Cookies & LocalStorage Architecture

AnalyzeSERP does not use tracking cookies for cross-site behavioral retargeting. We use modern client-side localStorage exclusively for user convenience:

analyzeserp_theme: Remembers whether you prefer Dark or Light interface mode.
daily_audit_quota: Tracks your client-side daily audit counter locally.
analyzeserp_consent_accepted: Remembers when you dismiss the consent notification banner.

You can clear your browser LocalStorage at any time through your browser settings to reset these preferences completely.

05.White-Label PDF Client Data Rights

When marketing agencies and SEO consultants use our White-Label PDF Engine (/pdf-reports), you may input custom agency branding, consultant names, client URLs, and confidential advisory notes:

100% Client-Side Assembly: The vector PDF document is assembled directly within your client browser using jspdf. Custom agency logos, consultant observations, and unbranded templates are not stored on AnalyzeSERP servers. You maintain complete intellectual property rights over all generated reports.

06.Infrastructure & Sub-Processors

AnalyzeSERP partners strictly with enterprise-grade hosting providers that maintain ISO/IEC 27001, SOC 2 Type II, and GDPR compliance:

Sub-Processor	Purpose	Data Location
Vercel Inc.	Edge Network & Serverless Compute	United States / Global Edge
Cloudflare Inc.	DNS & DDoS Security Filtering	Global Anycast Network

07.GDPR (EU) & CCPA/CPRA (California) Rights

Regardless of your geographic location, AnalyzeSERP extends comprehensive global privacy rights to all visitors:

Right of Access: You may request confirmation of any personal data processed by us.
Right to Erasure ("Right to be Forgotten"): You may request complete deletion of your account or contact records at any time.
Right to Opt-Out of Data Sales: We do not sell personal data. Therefore, we do not require a "Do Not Sell My Info" opt-out link.
Non-Discrimination: We will never degrade service quality or deny access based on the exercise of your privacy rights.

08.Security Safeguards & Responsible Disclosure

We enforce strict transport security (HSTS), TLS 1.3 encryption across all API endpoints, Server-Side Request Forgery (SSRF) validation on user-submitted domains, and automated rate-limiting to prevent malicious misuse.

Security researchers who identify potential vulnerabilities are encouraged to report them responsibly to security@analyzeserp.com.

09.Data Retention & Deletion Schedule

Standard server connection access logs (containing client IP and user-agent) are retained for a maximum of 14 days for cybersecurity analysis, DDoS mitigation, and firewall telemetry, after which they are permanently purged.

10.Legal & Data Protection Officer Contact

For legal inquiries, GDPR data requests, or privacy clarifications, you may reach our Data Protection team directly:

AnalyzeSERP Legal & Privacy Office

Attn: Sarfraj Yusuf (Data Protection Lead)

Email: legal@analyzeserp.com

Official Portal: https://analyzeserp.com