Privacy Policy

Our role and this policy

SEO RANK SERP LLC, 8 The Green, Dover, Delaware 19901, United States, operates Attriboo. We act as a controller for our own website, accounts, billing administration, communications, security, and support.

When a business uses Attriboo to measure its own website or match its own customer payments, that business generally controls the visitor and customer data. We process that data on its instructions under the Data Processing Addendum. Contact that business first about its tracking or your records; we can help route a request when appropriate.

Information you provide

• Account and team information, such as names, sign-in addresses, workspace membership, and account settings.
• Website addresses and configuration, integration permissions and credentials, and information needed to run the connections you authorize.
• Billing identifiers, subscription and payment status, invoice details, and transaction references received from Stripe. Stripe handles payment credentials; our application is not designed to receive complete card numbers or security codes.
• Support and privacy requests, including the reply address and message you submit through the form.
• Customer event, payment, campaign, and other records that an authorized business submits to the service.

Website activity and analytics data

On Attriboo's own website, optional measurement uses Attriboo's script, not Google Analytics. Optional analytics is disabled unless you choose to allow it. Our own-site installation disables the script's automatic capture of email fields in submitted forms.

The measurement data can include a random browser identifier, page paths, timestamps, referring source, campaign labels, device and browser categories, and approximate country or city derived from hosting request information. Hosting providers also receive network information such as IP addresses to deliver and secure requests. We do not describe a persistent identifier as anonymous merely because it is not a name.

On customers' websites, the standard Attriboo script can associate activity with an email address from a submitted form, identify calls, payment metadata, or a post-purchase answer when the customer enables or uses those features. Payment records may include buyer contact details, amounts, currency, order identifiers, refunds, and recurring-payment information. Customers must disclose and lawfully configure that processing. This website's cookie controls do not set preferences on a customer's separate website.

We do not use Google Analytics on this website. A Google site-verification meta tag verifies ownership for search tools; the tag itself is not a Google Analytics script.

Why we use information

We do not use customer analytics records to train a general-purpose AI model. If you connect an external AI assistant, its authorized requests and handling of results are governed by your permissions and that provider's terms. We do not claim to read people's private AI conversations.

Legal bases where required

Where European or UK data protection law applies to our controller activities, we rely on contract or steps you request before a contract for providing an account and purchased service; legal obligations for required records; legitimate interests for proportionate security, fraud prevention, support, and administration; and consent for optional tracking or marketing where required. You may object to legitimate-interest processing, and you may withdraw consent without affecting earlier lawful processing.

For customer-controlled analytics data, the customer determines the lawful basis and any required notices and consents. We act on its documented instructions. A privacy policy does not replace a required consent choice.

Who receives information

We use service providers for hosting, databases and authentication, payment processing, and email delivery. The list below explains their functions. We share only what is appropriate for those functions. Stripe may act as its own controller for payment, fraud prevention, and legal activities as described in its policy.

Authorized people in your workspace can access records according to their permissions. We may disclose information when lawfully required, to protect rights and security, to professional advisers under confidentiality, or as part of a genuine business transfer with appropriate safeguards and notice where required. We do not sell personal information or share it for cross-context behavioral advertising.

International processing

We are a United States business. Information may be processed in the United States and other places where our providers operate. Privacy rules can differ between countries. Where law requires a transfer safeguard, the relevant processing must be covered by an applicable adequacy decision, valid standard contractual clauses and required supplements, or another lawful mechanism. Contact support to request the safeguards relevant to your service configuration; this policy does not claim that publication alone establishes them.

How long information is kept

We keep account and customer records while needed to provide the service and for the purposes described here, subject to your plan, instructions, and applicable law. A reporting window is not a promise that older stored data has automatically been erased.

We keep billing, dispute, security, and support information only for the legitimate purpose and any legal retention duty that applies. When data is no longer needed, it should be deleted or de-identified. Backup copies can persist until their normal replacement cycle and must remain protected. Use the privacy form to request deletion or the retention details relevant to your account.

The Cookie Policy identifies browser-storage lifetimes, including the distinction between an expiring cookie and local storage that remains until removed.

Your privacy choices and rights

• Reject optional analytics or change your choice using Cookie settings. Global Privacy Control and Do Not Track signals disable optional analytics in our own-site consent controls.
• Depending on applicable law, request access, a copy, correction, deletion, restriction, or portability of your information; object to certain uses; withdraw consent; or appeal a denied request.
• If you are an authorized agent, explain your authority in the request. We may ask for proportionate verification, but do not send identity documents, account passwords, or payment credentials in the initial message.
• We do not discriminate for exercising applicable privacy rights. We respond within the period required by the law that applies and explain permitted extensions or refusals.
• You may complain to your competent privacy regulator. A support request does not prevent that. If you believe a request was wrongly denied, submit an appeal through the same form and identify the earlier reference.

US state privacy disclosures

Where an applicable US state privacy law covers our processing, the categories described above include identifiers, contact and account information, commercial/payment references, internet or electronic activity, approximate location, support content, and report-derived information. The sources are you, your browser, your organization, authorized integrations, and our service providers. Purposes and recipient categories are described above.

We do not sell personal information or share it for targeted cross-context advertising, and we do not use this service to make legally significant automated decisions about people. We do not ask customers to send sensitive personal information for these reports. Applicable access, correction, deletion, opt-out, and appeal requests can be made through the privacy form.

Children and security

Attriboo is a business service for adults and is not directed to children. We do not knowingly solicit children's information for our own accounts or marketing. Do not use the service to track children contrary to law. If you believe such data was submitted, contact support for investigation.

We use access controls and technical and organizational safeguards appropriate to the service, including controls supplied by our hosting and database providers. No online service can guarantee absolute security. Report suspected exposure through the Security topic on the support form; do not post credentials or exploit details publicly.

Changes and contact

We update this policy when practices change and give additional notice where required for a material change. Contact SEO RANK SERP LLC at the postal address above or through the support form.