Serper

Serper Company's data collection and usage practices encompass multiple layers of information gathering across their website, applications, and social media platforms. From device-specific technical data to personal information obtained through user interactions, the company employs a comprehensive approach to monitoring and maintaining their digital ecosystem. This policy briefing examines the methods and purposes of data collection, processing, and sharing, as well as the measures implemented to protect user privacy while ensuring lawful business operations.

Data Collection Methods

The company collects personal information through various means, including account sign-ins and email/social updates. This information is obtained when users participate in online community activities or engage with the company's website, applications, and social media platforms.

Automatically collected data includes device-specific information such as IP addresses, device type, operating system, and browser type and version. The company also tracks usage patterns through page visits, visit times, and error data, which helps identify and troubleshoot technical issues. This technical data includes information about errors that occur during user interactions with the platform.

For API requests, the company collects additional data points such as the IP address, timestamp of the request, user agent information, API endpoint used, and any query parameters, including the search query parameter "q." To protect user privacy, the company offers the option to mask this search query data in logs through account preferences.

The company processes this collected data for several purposes, including monitoring and maintaining platform performance, identifying and troubleshooting technical issues, analyzing usage patterns, and improving user experience. Personal information is retained only as long as it remains necessary for these intended purposes, and any sensitive information is protected through commercial security protocols designed to prevent loss, theft, and unauthorized access.

Data Processing Purposes

Serper processes personal information for several core purposes, including enabling website access and user interactions across their applications and social media platforms. The company analyzes this data to improve platform performance, identify and address technical issues, and provide core features and services to users.

In addition to direct user interactions, the company processes data for transactions and payment processing, ensuring the smooth delivery of purchased products and services. Personal information is also used for customization purposes, allowing the company to provide tailored experiences for users based on their preferences and activity.

Serper collects and analyzes this data for research and development purposes, helping the company better understand their audience and improve their products and services over time. The company uses this information for marketing and business development activities, helping to refine their approach to communication and service improvement.

Data sharing is handled carefully to protect user privacy while meeting legal requirements. The company works with parent, subsidiary, or affiliate companies, third-party service providers, and legal entities as needed to maintain platform security and perform required functions. All shared data is protected through commercial security protocols designed to prevent unauthorized access, loss, or theft.

The company maintains strict controls over data retention, keeping personal information only as long as it is necessary for its intended purpose. When data is no longer needed, Serper deletes it or removes identifying details to ensure privacy while maintaining the necessary records for legal, accounting, or research purposes. This approach balances the need for business operations with the requirement to protect user privacy and security.

Data Sharing and Protection

The company implements strict data protection measures to safeguard personal information, employing commercial security protocols designed to prevent loss, theft, and unauthorized access, disclosure, copying, use, or modification. While acknowledging that no security method is 100% secure, the company maintains robust safeguards for personal information stored and processed in the United States, and ensures that international data transfers comply with applicable legal requirements and data protection standards.

Data sharing occurs primarily with parent, subsidiary, or affiliate companies, third-party service providers, employees, contractors, agents, or business partners, and legally required entities such as courts, law enforcement, and regulatory authorities. The company may also share data with third parties assisting in information collection, product delivery, direct marketing, or asset transactions, but all shared information receives the same rigorous security protections.

To manage data retention responsibly, the company maintains strict controls, deleting personal information when it is no longer needed for its intended purpose. When data must be retained longer, it is anonymized by removing identifying details where possible, ensuring privacy while maintaining the necessary records for legal, accounting, reporting, or research purposes.

The company shares data with third parties in accordance with specific legal requirements and data protection standards. For international transfers, the company utilizes standard data protection clauses approved by the European Commission, binding corporate rules, or other legally accepted mechanisms to ensure compliance with international data protection standards.

Children's Data and Cross-Border Transfers

The company does not target or collect personal information from children under 13 years old. Its privacy policy explicitly states that it does not collect information about children under this age, reflecting a commitment to protecting young users.

All data transfers involving personal information take place under strict compliance with applicable legal requirements and international data protection standards. Specifically, the company adheres to the European Commission's standard data protection clauses, binding corporate rules, and other legally accepted mechanisms for these transfers.

Data handling procedures include robust anonymization techniques for query data. Through account settings, users can enable a feature that masks their search queries in logs by removing or replacing the "q" parameter. This feature ensures that even if data is shared with third parties, sensitive information remains protected and private.

User Control and Privacy Settings

Users have the ability to enable privacy settings that mask their search queries in logs through account preferences. This feature allows for the removal or replacement of the "q" parameter within the company's data logs, ensuring that sensitive search query data remains protected while still maintaining transparency for users.

The company handles personal information based on four lawful bases: consent, performance of a contract or transaction, legitimate interests, and compliance with law. This information is collected through various means including account sign-ins, email/social updates, online community participation, and device/web access.

Personal information is processed for a wide range of purposes, including website and application access, core feature usage, transaction and payment processing, customization, and technical assessment. The company also uses this data for research and development, audience understanding, and security and fraud prevention purposes. All collected data is retained only as long as it is necessary for its intended purpose, with personal information being deleted or anonymized by removing identifying details when it is no longer needed.