Privacy Policy

1. Data we collect

• Account data: your name, email address, and authentication details (including data from Google sign-in if you choose it).
• Usage data: scans you run, locations and keywords you enter, settings, and product activity used to operate and improve the Service.
• Payment data: processed by Stripe, with Sold through Link, LLC as merchant of record. We receive transaction metadata (e.g. plan, amount, status) but do not store your full card details.
• Connected Google Business Profile data: when you connect a Google account, we access only the profile, reviews, and performance data you authorize, to display it back to you. OAuth tokens are stored encrypted.
• Support data: the questions you ask the support assistant and its answers, and the messages you send our team with “Talk to a human”, together with the conversation they came from.

2. How we use your data

• to provide, maintain, and secure the Service;
• to process payments and prevent fraud;
• to respond to support requests and communicate service updates;
• to analyze and improve product performance and reliability;
• to comply with legal obligations.

3. Service providers

We share data only with providers that help us run the Service, under appropriate safeguards. What each one receives and where it is located is set out in the Data Processing Addendum.

• Supabase. Primary database, authentication and file storage: the system of record.
• Vercel. Application hosting, edge routing and server-side execution.
• DataForSEO. Search-engine ranking data, keyword metrics and website crawling, and the questions SI Visibility asks answer engines (ChatGPT, Gemini, Perplexity and Google AI Mode), which DataForSEO puts to them on our behalf.
• Google (Maps Platform, Business Profile API). Map rendering, geocoding, and reading/writing the customer’s own Business Profile.
• Google (Gemini API). AI assistance: the support assistant, audit analysis and reading SI Visibility answers. The default provider, with Anthropic as the fallback.
• Anthropic. AI drafting and analysis (post drafts, review replies, audits, support assistance).
• Stripe (Sold through Link, LLC). Merchant of record: payment processing, invoicing and sales-tax handling.
• Twilio. SMS and WhatsApp messaging for CRM inbound and review requests.
• Resend. Transactional email delivery (notifications, reports, review requests).
• Sentry. Error monitoring and diagnostics.

We do not sell your personal data.

4. Cookies

We use strictly necessary cookies to keep you signed in and to operate the Service. We do not use advertising cookies. You can control cookies through your browser, though disabling essential cookies may break core functionality.

5. Data retention

We keep your data for as long as your account is active and as needed to provide the Service or comply with legal obligations. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where retention is legally required.

Support conversations are the exception. The questions you ask the support assistant, its answers, and the messages you send our team with “Talk to a human” are kept for 12 months and then deleted, even while your account is active.

If your account is deleted sooner, the content of those conversations and the email address on any message to our team are removed at the same time. What remains is a record that a conversation took place, with nothing in it that identifies you, which we use to count support requests and delete once it is 12 months old.

A message you send with “Talk to a human” also reaches our support inbox by email, together with the recent part of your conversation, so that we can reply. Those emails are not covered by the 12-month period and follow the general rule above.

We keep a security record of each password change on your account, so that a change you did not make can be traced. Each record is deleted once it is 12 months old.

Delivery records of your outbound webhooks, including the lead contact details they carry, are kept for 30 days and then deleted.

6. Your rights

Depending on your location (including under the GDPR and Türkiye's KVKK), you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to withdraw consent. To exercise these rights, email privacy@semwiser.com.

7. Security

We use industry-standard measures including encryption in transit, encrypted storage of sensitive tokens, and access controls. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.

8. Children

The Service is not directed to children under 18, and we do not knowingly collect their data.

9. Changes

We may update this Policy from time to time. Changes take effect when posted, indicated by the "Last updated" date above.

10. Contact

For privacy questions or requests, contact us at privacy@semwiser.com or via our contact page.