Privacy Policy

Last updated: October 23, 2026

This policy explains what data Semhack (“Semhack”, “we”) collects when you use semhack.com, our free tools and the Semhack service, and how we use it. Questions: hello@semhack.com.

Data we collect

Waitlist

When you join the waitlist we store your email address, the role you select (optional), the page you signed up from, and the time. We use it only to contact you about Semhack.

Free tools

When you check a URL, our server fetches that URL to produce the result. We don't store the URLs you enter or the results. Your IP address is held in memory for up to a minute to apply rate limits, and may appear in standard server logs that we keep for security and debugging for up to 30 days.

Accounts (when available)

For accounts we will store your name, email address, organization details, and billing status. Payments are handled by our payment provider; we never see or store full card numbers.

Google user data

If you connect Google Search Console, Semhack requests read-only access (https://www.googleapis.com/auth/webmasters.readonly). We use it to import search performance data (queries, pages, clicks, impressions, CTR and position) and site lists for the properties you choose, so we can show you reports and recommendations.

• We store OAuth tokens encrypted and use them only to fetch your data on your behalf.
• We don't sell Google user data, use it for advertising, or share it with third parties except service providers needed to run Semhack, as described below.
• We don't use Google user data to train general AI models. When an AI feature summarizes your data, it is sent to the AI provider only to generate that output for you, under terms that prohibit the provider from training on it.
• No person at Semhack reads your Google data unless you ask us to for support, it is needed for security, or the law requires it.
• You can disconnect Google at any time in your settings or at myaccount.google.com/permissions. When you disconnect or delete your account, we delete the imported data within 30 days.

Semhack's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers

We use providers for hosting, email delivery, payments, error monitoring and AI processing. They process data only on our instructions. We will list them on this page before accounts launch.

Cookies

The marketing site and free tools don't use advertising or tracking cookies. Signed-in accounts will use a strictly necessary session cookie.

Your rights

You can ask us to access, correct, export or delete your data, or object to how we use it. Email hello@semhack.com and we'll respond within 30 days. If you are in the EU, UK or Turkey, you can also complain to your data protection authority.

Retention

We keep waitlist entries until you ask us to remove them or the beta ends. Account data is kept while your account is active and deleted within 30 days after you close it, except where we must keep records by law (such as invoices).

Changes

If we make material changes, we'll update the date above and notify account holders by email.