Privacy Policy

Last updated: 8 July 2026

Abhishek Shukla (sole proprietor, trading as DeepSERP) ("DeepSERP", "we", "us") operates https://deepserp.co and the DeepSERP SEO platform (the "Service"). This policy explains what personal data we collect, why, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR).

Data controller: Abhishek Shukla (sole proprietor, trading as DeepSERP), Krakow, Poland. Contact: contact@deepserp.co.

1. Data we collect

Account data — name, email address, and password (stored hashed) when you register.
Billing data — purchase and payment status. Card details are entered directly with our payment processor (Stripe); we never see or store full card numbers.
Usage data — the keywords, URLs, and queries you submit, plus the results generated for you.
Technical data — IP address, browser type, device, and log data, collected automatically.
Communications — messages you send us at contact@deepserp.co.

2. How we use your data (and legal basis)

Purpose	Legal basis (GDPR Art. 6)
Provide and operate the Service	Performance of a contract
Process purchases and payments	Performance of a contract
Send service/transactional emails (receipts, resets, notices)	Performance of a contract
Improve, secure, and troubleshoot the Service	Legitimate interests
Analytics and product usage measurement	Consent (via cookie banner)
Marketing emails (if you opt in)	Consent
Comply with legal/tax obligations	Legal obligation

We do not sell your personal data.

3. Sub-processors

We share data only with providers that help us run the Service, under data-processing agreements:

Provider	Purpose	Data involved
Stripe	Payment processing	Billing/contact data
Zoho (Zoho Mail, EU)	Business email	Communications
netcup	Application hosting	All service data
Supabase	Database & authentication	Account & usage data
Microsoft Clarity	Website/product analytics	Technical & usage data

4. International transfers

Some providers may process data outside the EU/EEA. Where that happens, transfers are covered by Standard Contractual Clauses or an adequacy decision.

5. Data retention

We keep account and usage data for as long as your account is active. After you close your account, we delete or anonymise personal data within a reasonable period, except where we must retain records (e.g. invoices) to meet legal or tax obligations.

6. Your rights

Under GDPR you can request to access, correct, delete, restrict, or port your data, object to certain processing, and withdraw consent at any time. To exercise any right, email contact@deepserp.co. You also have the right to lodge a complaint with your local data protection authority.

7. Cookies & tracking

We use cookies and similar technologies:

Essential cookies — required to log in and run the Service. Always on.
Analytics cookies — help us understand usage. Loaded only after you consent via our cookie banner.
Preference cookies — remember settings such as language.

You can accept or reject non-essential cookies through the banner shown on your first visit, and change your choice at any time. You can also block cookies in your browser, though the Service may not work fully without essential ones.

8. Data security

We use industry-standard measures (encryption in transit, hashed passwords, access controls). No system is perfectly secure, but we work to protect your data and will notify you and the relevant authority of a breach where legally required.

9. Children

The Service is not directed at anyone under 16. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy; the "Last updated" date shows the latest version. Material changes will be notified by email or an in-app notice.

11. Contact

Questions about this policy or your data: contact@deepserp.co.