Privacy Policy

Last updated: November 14, 2025 | Version 1.0.0

Introduction

Welcome to SEMKit ("we," "our," or "us"). SEMKit is owned and operated by Faktia Global Technologies Limited. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SEO toolkit platform and services.

This Privacy Policy complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

1. Information We Collect

1.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

  • Register for an account: Name, email address, password
  • Subscribe to a plan: Billing information, payment details (processed securely through Stripe)
  • Contact us: Name, email, message content
  • Use our services: Website URLs, keywords, content you create, audit data

1.2 Information Automatically Collected

When you access our services, we automatically collect certain information:

  • Device information: IP address, browser type, operating system
  • Usage data: Pages viewed, features used, time spent, click patterns
  • Cookies and tracking: See our Cookie Policy for details

1.3 Third-Party Data

We collect SEO data from third-party services on your behalf:

  • Search engines: Ranking data, SERP features, competitor information
  • Analytics providers: Website traffic, performance metrics
  • SEO APIs: Keyword research data, backlink information

2. How We Use Your Information

We use your information for the following purposes:

  • Provide services: Deliver SEO tracking, content generation, and audit features
  • Account management: Create and manage your account, process payments
  • Communication: Send service updates, security alerts, support responses
  • Improvement: Analyze usage patterns to improve our platform
  • Personalization: Customize your experience based on preferences
  • Security: Detect and prevent fraud, abuse, and security incidents
  • Legal compliance: Comply with legal obligations and enforce our terms

3. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

  • Contract performance: Processing necessary to provide our services
  • Consent: Where you have given explicit consent (e.g., marketing emails)
  • Legitimate interests: Improving our services, fraud prevention
  • Legal obligation: Compliance with laws and regulations

4. How We Share Your Information

We may share your information with:

4.1 Service Providers

  • Authentication: Clerk (user authentication and management)
  • Database: Convex (secure data storage)
  • Payments: Stripe (payment processing)
  • Email: Resend (transactional emails)
  • SEO data: SearchAPI, DataForSEO (keyword and ranking data)
  • AI services: OpenAI, Anthropic (content generation)

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent.

5. Data Retention

We retain your information for as long as necessary to:

  • Provide our services and maintain your account
  • Comply with legal obligations (e.g., tax records for 7 years)
  • Resolve disputes and enforce our agreements

Specific retention periods:

  • Account data: Retained while your account is active
  • Audit details: 90 days (summaries retained indefinitely for analytics)
  • Billing records: 7 years for tax compliance
  • Marketing consent: Until you withdraw consent

6. Your Privacy Rights

6.1 GDPR Rights (EU/UK Users)

  • Right to access: Request a copy of your personal data
  • Right to rectification: Correct inaccurate or incomplete data
  • Right to erasure: Request deletion of your data ("right to be forgotten")
  • Right to restriction: Limit how we use your data
  • Right to data portability: Receive your data in a structured format
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: Withdraw consent at any time
  • Right to lodge a complaint: File a complaint with your data protection authority

6.2 CCPA Rights (California Users)

  • Right to know: What personal information we collect, use, and share
  • Right to delete: Request deletion of your personal information
  • Right to opt-out: Opt-out of the sale of personal information (we do not sell data)
  • Right to non-discrimination: Equal service regardless of privacy choices

6.3 Exercising Your Rights

To exercise any of these rights, please:

We will respond to your request within 30 days.

7. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption: Data encrypted in transit (TLS 1.3) and at rest
  • Authentication: Secure authentication via Clerk with MFA support
  • Access controls: Role-based access and principle of least privilege
  • Monitoring: Continuous security monitoring and incident response
  • Compliance: Regular security audits and penetration testing

Learn more about our security practices on our Security page.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure adequate protection through:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions for countries with equivalent data protection
  • Your explicit consent where required

9. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. For detailed information, please see our Cookie Policy.

You can manage your cookie preferences at any time through our cookie banner or account settings.

11. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to read their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy with a new "Last Updated" date
  • Sending an email notification to your registered email address
  • Displaying a prominent notice on our platform

If changes require your consent, we will obtain it before the new policy takes effect.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us:

Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer at:dpo@semkit.com

EU Representative

If you are in the European Economic Area, you can contact our EU representative at:eu-rep@semkit.com

14. Supervisory Authority

If you are located in the EU/UK, you have the right to lodge a complaint with your local supervisory authority if you believe we have processed your personal data unlawfully.

Your Privacy Matters

We are committed to transparency and protecting your rights. If you have any concerns about how we handle your data, please don't hesitate to reach out.