Data and privacy

What SerpPal stores about you and your work, who it is shared with, how to export your articles, get a copy of your data or delete your account.

This page sums up how SerpPal handles your data, in plain words. The full text is in our Privacy Policy and Terms of Service; if anything here seems different, those pages are what counts.

SerpPal is run by Fimuro, a software company in Dhaka, Bangladesh.

#What SerpPal stores

• Account details: your name, email address and a hashed (scrambled) password. Nobody, including SerpPal staff, can read your password.
• Your work: projects, keywords, analyses, articles and their versions, comments, chats, study sets, settings, and the images and videos you upload.
• Usage: how many analyses and AI words you use, sign-in times, and basic technical logs such as your IP address and browser, used for security and to keep the service running.
• Payments: the plan, amount, date and status of each payment. Card details are handled by Dodo Payments and EPS details by EPS. SerpPal never sees or stores your full card number or wallet details.
• Connections: the details for your connected sites (passwords, keys and tokens) and your API keys (stored only as a hash).
• Messages: what you send us through the contact page or by email.

#What SerpPal does not do

• We don't sell your personal information.
• We don't use your private articles or chats to train AI models.
• We don't use advertising cookies. There is one essential cookie to keep you signed in. Your browser also stores small preferences, such as light or dark mode.
• Text you paste into the public AI detector is not stored. It is checked and thrown away right away.

#Who your data is shared with

Only with the services that help run SerpPal, and only what they need:

We may share information if the law requires it.

#Things other people can see

• Team members in your projects see the articles, comments and settings of those projects, according to their role. See Team members.
• Share links let anyone with the link view an article. Turn sharing off to stop it. See Sharing.
• Media files have long, unguessable public addresses so that your sites can copy them. Anyone with an address can open the file. See Images and videos.

#Get your data out

• Articles: export any article from the editor (for example as HTML, Markdown or Word). See Import and export.
• Images and videos: open each file from the media library with Copy link and save it.
• A full copy: email [email protected] from your account's email and ask for a copy of your data. You can also ask us to correct it.

#Delete your account

You can stop using SerpPal and ask us to delete your account at any time:

1. If you pay by card, click Cancel renewal on Plan and billing first, so nothing renews (see Change, renew or cancel).
2. Export anything you want to keep.
3. Email [email protected] from the email address of your account and ask us to delete it.

We delete your data within 30 days, except records we must keep by law, such as payment records. Posts you published to your own sites stay on those sites.

Deleting a single project removes its articles and analyses too; the project owner can do that in Project settings. Deleting files from your media library frees storage right away.

#How your data is protected

• Connections use HTTPS.
• Passwords are hashed with a slow, salted algorithm. API keys and session cookies are stored only as hashes.
• Passwords and tokens for connected sites are kept on the server and never sent back to the browser, to team members or to AI assistants.
• Access to our systems is restricted.
• Changing your password signs out every other device.

No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you.

#Age

You must be at least 18 years old (or the age of majority where you live) to buy a plan. SerpPal is not meant for children under 13, and we don't knowingly collect their data.

#Questions

Write to [email protected] about anything privacy-related.