Privacy Policy

Last updated: April 7, 2026

SearchBrief ("we", "us", or "our") operates the website searchbrief.io and the SearchBrief service. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch law.

1. Who we are

SearchBrief is operated by Tim Meuleman, based in the Netherlands. For privacy-related questions, contact us at contact@searchbrief.io.

2. What data we collect

Email address — collected when you sign up or join the waitlist. Used to send your weekly digest and service emails.
Google Search Console data — keyword performance data (clicks, impressions, positions) from your connected GSC property. We request read-only access. We never modify your data.
Payment information — processed by Stripe. We never store your credit card details. We receive a customer ID and subscription status from Stripe.
Usage data — basic server logs (IP address, request timestamps) for security and debugging purposes. These are not used for tracking or advertising.

3. How we use your data

To deliver your weekly Search Console digest every Monday
To send service emails (welcome, billing, cancellation)
To manage your subscription and billing via Stripe
To generate AI-powered action items using your GSC data (processed via Anthropic's API — no data is retained by Anthropic for training purposes)
To maintain security and prevent fraud

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described below.

4. Third-party services

We use the following sub-processors to operate the service:

Supabase — database hosting (EU region). Privacy policy
Stripe — payment processing. Privacy policy
Resend — transactional email delivery. Privacy policy
Anthropic — AI processing for action items. Data is not used for model training. Privacy policy
Google — Search Console API access (OAuth). Privacy policy
Railway — server infrastructure. Privacy policy

5. Cookies

SearchBrief does not use tracking cookies or advertising cookies. Stripe may set cookies during the payment process to prevent fraud. No cookie consent banner is required for our own operations, as we do not place non-essential cookies ourselves.

6. Data retention

We retain your account data for as long as your subscription is active. If you cancel, your data is retained for 90 days and then permanently deleted. You can request immediate deletion by emailing contact@searchbrief.io.

7. Your rights (GDPR)

As a user in the EU, you have the right to:

Access — request a copy of the data we hold about you
Rectification — correct inaccurate data
Erasure — request deletion of your data ("right to be forgotten")
Portability — receive your data in a machine-readable format
Object — object to processing of your data
Withdraw consent — disconnect your Google Search Console at any time from your dashboard

To exercise any of these rights, contact us at contact@searchbrief.io. We will respond within 30 days.

8. Legal basis for processing

Contract performance — processing your email and GSC data to deliver the service you signed up for
Legitimate interest — server logs for security purposes
Consent — connecting your Google Search Console account (can be revoked at any time)

9. Data security

All data is transmitted over encrypted HTTPS connections. Access tokens for Google Search Console are stored encrypted. We follow industry-standard security practices and limit access to personal data to what is strictly necessary.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Email us at contact@searchbrief.io.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl.

SearchBrief · Home · Terms of Service