Trust
Security & data protection
The specifics an agency needs to send to a client’s procurement team (encryption, processors, ownership, refunds, and liability), in plain English. These are the same commitments set out in our Privacy Policy and Terms of Service.
AEO methodology and our 14+ automated audit checks were last reviewed 1 Jun 2026. Every connected site is re-audited and re-checked for AI visibility weekly.
Encrypted in transit and at rest
Every connection between your browser and Serply uses TLS 1.2+. CMS credentials are encrypted at rest with AES-256-GCM using a key that is never stored alongside the data it protects.
Every one of them, named
11 companies receive some part of your data, and all of them are named in the table below with what they do and what reaches them. Each handles it under its own data-processing agreement. We do not sell your data. For the DPA itself, email hello@serply.ai.
Your content goes to the engines
Measuring AI visibility means asking the engines, so your brand name, your tracked questions, and your public site content are sent to OpenAI, Anthropic, Google, and Perplexity through their business APIs. Your password, CMS credentials, and billing details are not. If you are running Serply for a client, this is the paragraph they will ask you about.
You own everything Serply writes
You own all content generated for your sites: articles, content plans, and every other output. Serply claims no intellectual-property rights over them, and anything already published stays live on your CMS if you leave.
Cancel in one click, 14-day refund
Start with a free trial, no card required. Cancel any time from Settings. Cancellation takes effect at the end of the current billing period. Refunds are available within 14 days of your first paid charge.
Plain-English limits
Serply is provided on an “as is” basis; we do not guarantee specific SEO or AI-visibility results. Our liability is limited to the amount you paid for the service in the 12 months preceding any claim, stated openly rather than buried.
Lawful cross-border handling
Some processors operate outside the UK/EU (for example, in the United States). Where your data is transferred internationally it is protected by appropriate safeguards such as Standard Contractual Clauses.
Export and delete, yourself
From Settings in the dashboard you can download a JSON export of your account data and delete your account outright, without asking us and without waiting on a support queue. For anything else, including access requests on behalf of a client, email hello@serply.ai. UK/EU users may also lodge a complaint with their local data protection authority.
The sub-processor list
Complete as of 2026. We add a row here before an integration ships, not after.
| Processor | What it does | What it receives |
|---|---|---|
| OpenAIAI | Article writing, content planning, and AI-visibility checks | Your site content, brand and business context, target keywords, and the questions you track |
| AnthropicAI | AI-visibility checks and the free audit | Your brand name, business context, and the questions you track |
| GoogleAI | Gemini for AI-visibility checks, PageSpeed Insights for the technical audit, and Search Console plus Google sign-in if you connect them | Your brand name, the questions you track, your site URLs, and, if you connect them, your Google account identity and Search Console metrics |
| PerplexityAI | AI-visibility checks and the free audit | Your brand name, business context, and the questions you track |
| DataForSEO | Search volume, keyword difficulty, and AI Overview data | Your domain and the keywords in your content plan |
| Firecrawl | Reading your website to build your site brain | The public pages of the sites you add to Serply |
| Resend | Sending transactional and report email | Your email address and the contents of the emails we send you |
| Supabase | Managed Postgres database and file storage | Everything in your account: it is the database Serply runs on |
| Stripe | Payments and subscription billing | Your email address and billing details. Card numbers go to Stripe directly and never reach Serply's servers |
| Railway | Hosting the Serply API and background workers | Everything your account sends to the Serply API |
| Vercel | Hosting and delivering the Serply web app | Your IP address and standard web request logs |