Privacy Policy

1. Architectural Scope & Product Separation

SearchNexa operates two distinct architectural products that are independently maintained:

• SearchNexa Cloud: Our multi-tenant SaaS platform that ingests search engine signals, computes keyword cluster matrices, conducts competitive SERP audits, and generates structured content recommendations.
• SearchNexa WordPress SEO Plugin (Connector 1.17.0): An open-source, GPLv2-compliant WordPress plugin running autonomously within your self-hosted WordPress environment. The plugin operates standalone without requiring cloud connectivity.

2. WordPress Connector Telemetry & Bridge Security

When you choose to link your WordPress site to SearchNexa Cloud via our secure Sync Bridge:

• All communication is encrypted via TLS 1.3 over HTTPS and authenticated using cryptographic HMAC-SHA256 signatures with millisecond replay-window verification.
• Secret keys are generated locally and stored exclusively in your local WordPress wp_options table. SearchNexa Cloud never stores full private key material.
• The plugin does not transmit user passwords, customer billing records, or private database tables. Telemetry is strictly limited to published post metadata, canonical URLs, and SEO schema tags.

3. Information Collected in SearchNexa Cloud

To provide Cloud intelligence services, we process:

• Account Information: Name, work email address, team role, and workspace authorization tokens.
• Connected Domain Properties: Domain names, target keyword clusters, and crawl schedule configurations.
• Search Console Integration: If you connect Google Search Console (GSC), we read click, impression, position, and query aggregates through official OAuth 2.0 scopes. This data is never shared with third parties or aggregated across tenants.

4. Data Storage, Isolation & Retention

All SearchNexa Cloud data is stored in enterprise-grade cloud infrastructure featuring Row-Level Security (RLS) and cryptographic tenant isolation. Data is retained for the active lifecycle of your workspace and can be permanently purged upon account termination through your dashboard or by written request.

5. Your Rights & GDPR/CCPA Compliance

Regardless of your jurisdiction, SearchNexa adheres to core privacy principles:

• Right to access and export your workspace datasets in structured JSON format.
• Right to rectify incorrect organization or user profiles.
• Right to complete erasure of personal and property telemetry (“Right to be Forgotten”).
• Right to unlink WordPress installations at any time with one click in wp-admin.