Privacy Policy

SearchRush ("SearchRush," "we," "us," "our") provides local SEO, reputation, citation, AI visibility, and content syndication tools for businesses and agencies. This Privacy Policy applies to searchrush.com, our web application, our widgets, our APIs, and any service that links to this policy (collectively, the "Service").

For privacy questions, contact privacy@searchrush.com.

This policy covers personal information we process as a controller when you visit our site, create an account, or use the Service. When you use SearchRush to publish reviews, posts, or citations to third-party platforms (Google, YouTube, Facebook, etc.), those platforms also process the data under their own privacy policies — we are not responsible for their practices.

When we host content about your customers (for example, public reviews you import) on your behalf, we act as a processor and follow your instructions under your account's Terms.

3.1 You give us

• Account data: name, email, password (hashed), profile photo, agency / business name.
• Business data: business name, address, phone, website, hours, categories, photos, owner-supplied descriptions.
• Billing data: billing address and tax info; card numbers are entered into Stripe and never touch our servers.
• Content: reviews you import, posts you write, AI prompts, brand assets, ad creatives, blog drafts.
• Support data: messages you send us via email, chat, or forms.

3.2 We collect automatically

• Device & log data: IP address, browser, OS, pages viewed, timestamps, referrer.
• Usage data: features used, scans run, tokens consumed, error reports.
• Cookies: session cookies, auth tokens, and limited first-party analytics (see §10).

3.3 We receive from connected services

• Google Business Profile: location details, reviews, posts, insights, photos, Q&A — for the locations you connect.
• YouTube / Vimeo / Dailymotion / TikTok / Instagram / Threads: channel metadata and upload status for videos you publish.
• Social & blog platforms: account IDs, post URLs, and publish responses for the destinations you connect.
• Rank & citation data providers: SERP positions, keyword volumes, citation listings tied to your business.

We do not knowingly collect government IDs, health information, financial account numbers, biometric data, or precise geolocation from end customers.

• Operate, secure, and improve the Service.
• Authenticate you and protect against fraud and abuse.
• Sync, render, and publish the content you ask us to (reviews, posts, citations, ads, videos).
• Generate AI replies, summaries, and visibility scans you request.
• Process payments, send invoices, and manage subscriptions.
• Send service emails (receipts, alerts, security) and — with your consent or where permitted — product updates.
• Produce de-identified aggregate analytics to improve the product.
• Comply with legal obligations and enforce our Terms.

We do not sell personal information, and we do not use your private business data or your customers' review content to train foundation AI models.

• Contract: to provide the Service you signed up for.
• Legitimate interests: security, fraud prevention, product analytics, direct marketing to existing customers.
• Consent: non-essential cookies, marketing emails where required, optional integrations.
• Legal obligation: tax, accounting, and lawful requests.

You may withdraw consent at any time without affecting prior processing.

• Subprocessors: vendors that help us run the Service (see §7).
• Connected platforms you authorize: when you connect Google, Facebook, etc., we send the content you ask us to publish.
• Agency / team members: users you invite into your workspace can see the data in that workspace.
• Legal & safety: to comply with law, lawful requests, or to protect rights, property, and safety.
• Business transfers: in connection with a merger, acquisition, or asset sale, with notice.

We do not sell personal information for cash or share it for cross-context behavioral advertising.

The following vendors process data on our behalf. We may update this list as the Service evolves.

SearchRush uses third-party AI providers (e.g. OpenAI via the Lovable AI Gateway, Perplexity) to generate review replies, social posts, blog drafts, ad copy, video scripts, and visibility analyses. Prompts and the surrounding business context are sent to those providers strictly to fulfill your request and are not used by us or them to train public models.

AI output may be inaccurate. You are responsible for reviewing generated content before publishing it, especially when it mentions a person, customer, or competitor.

SearchRush's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We request only the OAuth scopes needed for features you enable (Business Profile read/write, YouTube upload, basic profile/email).
• Google data is used to display your locations, sync reviews and posts, and publish review videos at your request.
• We do not sell Google user data, do not use it for advertising, and do not let humans read it except for security, support you request, abuse investigations, or where required by law.
• You can disconnect Google access at any time from Settings → Integrations, or revoke it at myaccount.google.com/permissions.

We use a small set of strictly necessary cookies for authentication and security, plus first-party analytics to measure feature usage. We do not load third-party advertising trackers on the app. Where required, we surface a cookie banner and honor your choices.

You can clear cookies from your browser at any time; doing so will sign you out.

• Account data: kept while your account is active; deleted within 30 days of account closure unless retention is legally required.
• Business & syndication data: kept for the life of the workspace; deleted with the workspace.
• Billing records: retained for at least 7 years for tax and accounting.
• Logs & security events: typically 90 days; longer when needed to investigate incidents.
• Backups: rolling encrypted backups, purged within 35 days.

We use industry-standard safeguards: TLS in transit, encryption at rest for the database and file storage, role-based access controls, row-level security on customer data, hashed passwords, secret management for API keys, and audit logging of administrative actions.

No system is perfectly secure. If you believe you have found a vulnerability, please email security@searchrush.com. We appreciate responsible disclosure and will respond promptly.

SearchRush is operated from the United States and we use subprocessors in the US, EU, and globally. Where personal data of EEA, UK, or Swiss residents is transferred outside their region, we rely on Standard Contractual Clauses, the UK International Data Transfer Addendum, and additional safeguards where appropriate.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your information (subject to legal exceptions).
• Port your information to another provider.
• Object to or restrict certain processing.
• Withdraw consent and unsubscribe from marketing.
• Lodge a complaint with your data protection authority.

To exercise any of these rights, email privacy@searchrush.com from the address on your account. We respond within 30 days (or as required by local law).

SearchRush is a B2B tool and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

In the past 12 months we have collected the categories described in §3 for the purposes described in §4. We disclose those categories to the subprocessors listed in §7 strictly to provide the Service. We do not sell personal information and do not share it for cross-context behavioral advertising.

California residents may exercise the rights to know, delete, correct, and limit use of sensitive information by emailing privacy@searchrush.com. You may use an authorized agent; we will verify the request against your account.

We may update this policy from time to time. When changes are material, we will notify you by email or in-app notice and update the "Last updated" date above. Continued use of the Service after the effective date means you accept the revised policy.

SearchRush
Privacy questions: privacy@searchrush.com
Security reports: security@searchrush.com
General support: support@searchrush.com