Draft for legal review. This text is a starting point, not legal advice, and must be reviewed and approved by qualified counsel before launch.

Privacy policy

Who we are

Searchlark is operated by AuPairly (Pty) Ltd, a company registered in South Africa. We are the controller of the personal data described here. Contact us at privacy@searchlark.com.

What we collect

  • Account data: your email address and workspace name.
  • Site data you connect: public pages of your website we read (respecting robots.txt), your business profile, competitors, keywords and the articles we create.
  • Integration data: Search Console performance data (read-only) and CMS connection settings. Access tokens and signing secrets are encrypted at rest.
  • Billing data is handled by Paddle, our reseller and merchant of record; we store your Paddle customer and subscription identifiers, not card numbers.
  • Free preview: the website address you enter and a salted hash of your IP address for abuse prevention, kept for 7 days.

Processors

  • Supabase (database, authentication, file storage) and Fly.io (hosting), in London, United Kingdom.
  • Resend (sign-in links, invitations and notification emails).
  • Anthropic (AI processing of your site content and article drafts), OpenAI (AI visibility checks), DataForSEO (keyword and search data), and Google (Search Console data you connect).
  • Paddle (checkout, payments and tax, as merchant of record), Cloudflare Turnstile (bot protection on the free preview).

Google user data

If you connect Google Search Console, we request read-only access (webmasters.readonly) and your Google account email. We use it only to import clicks, impressions and positions for the properties you choose, so we can show how your articles perform and suggest which ones to refresh.

  • We do not sell this data, use it for advertising, or share it with third parties.
  • We do not send it to AI providers and do not use it to train AI models.
  • Our staff do not read it, except with your permission, for security, or where the law requires.
  • You can disconnect at any time on the Analytics page. We then revoke our access with Google and delete the stored access token. You can also remove access in your Google account settings.

Searchlark's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

We only use cookies that are strictly necessary to keep you signed in and to protect sign-in flows. We do not use advertising or analytics cookies.

Your rights

You can export your workspace data and delete your account at any time under Settings, Account. Contact us for any other request about your personal data.

Retention

We keep your data while your account is active. When you delete your account, your workspace data is deleted; billing records are kept as required by law.