Privacy Policy

1. Introduction

FluxSerp ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly:

• Account Information: Name, email address, password
• Payment Information: Billing address, payment method (processed securely by Stripe)
• Profile Information: Company name, website URL, preferences
• Communication Data: Messages sent through our support system

2.2 Automatically Collected Information

• Usage Data: Pages viewed, features used, time spent
• Device Information: Browser type, IP address, operating system
• Cookies: Session cookies, preference cookies (see Cookie Policy)
• Analytics Data: Aggregated usage patterns and statistics

2.3 Website Analysis Data

When you analyze a website, we collect:

• Website URL and metadata
• SEO metrics and scores
• Keyword rankings and search data
• Competitor information (publicly available)

3. How We Use Your Information

We use collected information to:

• Provide Services: Generate SEO reports, process analyses
• Account Management: Create and maintain your account
• Payment Processing: Process subscriptions and billing
• Customer Support: Respond to inquiries and resolve issues
• Service Improvement: Analyze usage patterns to enhance features
• Communications: Send service updates, security alerts, promotional content (opt-out available)
• Legal Compliance: Comply with applicable laws and regulations

4. Data Sharing and Disclosure

We may share your information with:

4.1 Service Providers

• Clerk: Authentication and user management
• Stripe: Payment processing
• Convex: Database and backend services
• Anthropic/OpenAI: AI processing (anonymized data)
• Vercel: Hosting and infrastructure

4.2 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal process or government requests
• Enforce our Terms of Service
• Protect our rights, property, or safety
• Prevent fraud or security issues

4.3 Business Transfers

In the event of a merger, acquisition, or sale, your information may be transferred. We will notify you before your information becomes subject to different privacy practices.

5. Data Retention

We retain your information:

• Account Data: Until you delete your account + 30 days
• Reports: For the duration of your subscription + 90 days
• Payment Records: 7 years (tax compliance)
• Analytics: Aggregated data retained indefinitely

6. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Revoke consent for data processing

To exercise these rights, contact us at privacy@fluxserp.com

7. Data Security

We implement security measures including:

• Encryption in transit (TLS/SSL) and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Secure data centers with physical security
• Regular backups and disaster recovery procedures

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure adequate safeguards through:

• Standard Contractual Clauses (SCCs)
• Privacy Shield (where applicable)
• Adequacy decisions by relevant authorities

9. Children's Privacy

Our Service is not intended for children under 13 (or 16 in the EU). We do not knowingly collect data from children. If you believe we have collected information from a child, contact us immediately.

10. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to delete personal information
• Right to equal service and price

Note: We do NOT sell your personal information.

11. GDPR Compliance (EU)

For EU residents, our lawful basis for processing includes:

• Contract: To provide services you requested
• Consent: For marketing communications (opt-in)
• Legitimate Interest: To improve our services
• Legal Obligation: To comply with laws

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via:

• Email notification to registered users
• Prominent notice on our website
• In-app notification

Continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or concerns:

• Email: privacy@fluxserp.com
• Data Protection Officer: dpo@fluxserp.com
• Address: [Your Business Address]