Privacy Policy

What we collect

Account data: your name, email address, password (stored as a hash) and language, and your team members if you invite them.

Project data: the websites, apps, keywords and competitors you add, and the rankings, reviews and reports we collect for them.

Billing data: plan, invoices and billing address. Card details are handled by our payment providers (Paddle and iyzico); we never see or store card numbers.

Usage data: which features you use and basic technical logs (IP address, browser) to keep the service secure and working.

Accounts you connect

You can connect App Store Connect, Google Play Console, Apple Ads, RevenueCat and Google Search Console. We store the keys or tokens encrypted and use them only to provide the features you turned on: reading your reviews, publishing replies you approve, sending metadata you choose, and reading popularity, revenue and search performance data.

You can disconnect any account at any time in Settings › Connections; we then delete the stored key or token.

Google user data

When you connect Google Search Console, Searvia requests read-only access to your Search Console data. We use it only to show your clicks, impressions, queries and pages inside your Searvia account.

Searvia’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, do not use it for advertising, and do not use it to train AI models. People at Searvia read it only with your permission, for security, or when the law requires it.

Service providers

We use trusted providers to run Searvia: hosting and content delivery (our servers and Cloudflare), search and store data (DataForSEO), AI features (Anthropic; your prompts and outputs are not used to train their models), email delivery (Google Workspace) and payments (Paddle, iyzico). They process data only on our instructions.

How long we keep data

We keep your data while your account is open. When you delete a project or an account, its data is removed from our systems within 30 days, except records we must keep by law (such as invoices).

Your rights

You can access, correct, export or delete your data, and object to or restrict its processing. Most of this is available in your account settings; for anything else, email us and we will answer within 30 days.

Security

Connections use HTTPS, passwords are hashed, connected-account keys are encrypted, and two-factor sign-in is available. Access to production systems is limited.

Contact

Questions about privacy: [email protected]. We will tell you here and by email before any material change to this policy.