Política de Privacidade

The data controller responsible for your personal data is Pakaje, UAB, J. Basanavičiaus g. 26, Vilnius, Lithuania (VAT LT100019481311).

For any question about this policy or how your data is handled, you can reach us at privacy@isearchfrom.com.

We collect the following categories of personal data:

• Account data: your name, email address, hashed password, workspace or organization details, and role.
• Billing data: billing name, address, country, VAT identification number, and transaction records. Full payment card details are handled directly by our payment processor and are not stored on our systems.
• Search and usage data: the queries you run, the location, language, device, and SafeSearch parameters you choose, result metadata, saved searches, projects, tracked keywords, and API usage.
• Support and communications: messages you send us through contact forms, email, or support channels.
• Technical data: IP address, browser and device type, operating system, referring pages, and server log data.
• Product analytics data: pages viewed, features used, events, and, where enabled, session recordings and heatmaps used to understand and improve the product. Input fields are masked in session recordings.
• Cookies and similar technologies: see the "Cookies and tracking" section below.

We process personal data for the purposes below, each relying on a lawful basis under Article 6 of the GDPR:

• To provide, operate, and maintain the Service, including running searches and delivering results, necessary for the performance of our contract with you (Art. 6(1)(b)).
• To process payments, manage subscriptions, and keep accounting and tax records, under performance of a contract and compliance with a legal obligation (Art. 6(1)(b) and 6(1)(c)).
• To secure the platform, prevent fraud and abuse, apply rate limits, and ensure service integrity, our legitimate interests (Art. 6(1)(f)).
• To analyse and improve the product, develop new features, and understand usage, our legitimate interests, or your consent for non-essential cookies and analytics where required (Art. 6(1)(f) or 6(1)(a)).
• To communicate with you about your account, requests, security, and service changes, under performance of a contract and our legitimate interests.
• To send marketing communications where you have opted in, your consent, which you may withdraw at any time (Art. 6(1)(a)).
• To comply with legal obligations and respond to lawful requests, compliance with a legal obligation (Art. 6(1)(c)).

We use strictly necessary cookies to operate the website and keep you signed in. With your consent where required, we also use analytics and product-measurement technologies to understand how the Service is used and to improve it.

Session recording and heatmap features mask input fields and sensitive elements by default. You can manage non-essential cookies through your browser settings or any cookie controls we provide, and you can withdraw consent at any time.

We do not sell your personal data. We share it only with trusted service providers (processors) who help us run the Service, and only to the extent needed for them to perform their role. These providers act on our instructions under data-processing agreements. They fall into the following categories:

• Cloud hosting and infrastructure providers that store and serve product data.
• Analytics and session-replay providers that help us measure and improve product usage.
• Error-monitoring and performance providers that help us detect and fix issues.
• Payment processing providers that handle subscription payments securely.
• Bot-protection and security providers that protect forms and infrastructure from abuse.
• Email and communications providers used to send transactional and support messages.
• Content management providers used to operate our blog and marketing content.
• Search-data providers used to run localized searches and return results from target markets.
• AI model providers used to run AI visibility checks and related analyses.

Some features let you make campaigns, reports, or other content publicly accessible. If you choose to make content public, the data it contains becomes visible to anyone with the link, without an account. You can make it private again at any time, although copies made by others while it was public may persist.

We may also disclose personal data where required by law, to enforce our terms, or to protect the rights, safety, and property of iSearchFrom, our users, or others.

We aim to process personal data within the European Economic Area (EEA). Where a provider processes data outside the EEA, we ensure appropriate safeguards are in place, such as an EU adequacy decision or the European Commission’s Standard Contractual Clauses, so that your data remains protected.

We keep personal data only as long as necessary for the purposes described in this policy. In practice:

• Account and usage data are retained while your account is active and for a limited period afterwards, then deleted or anonymized.
• Billing and accounting records are retained for the periods required by Lithuanian and EU tax and accounting law.
• Analytics data is retained for a limited period in line with our analytics configuration.
• Backups are kept for a limited rolling window and then overwritten.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten").
• Request restriction of, or object to, certain processing.
• Receive your data in a portable format and, where technically feasible, have it transmitted to another controller.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@isearchfrom.com. You also have the right to lodge a complaint with a supervisory authority, in particular the State Data Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija), or the data protection authority in your country of residence.

We implement appropriate technical and organizational measures to protect personal data, including encryption of data in transit, access controls, and limiting access to the people and providers who need it to operate the Service, investigate incidents, and support customers. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any incident.

The Service is intended for business and professional use and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us so we can remove it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "last updated" date and, where appropriate, notify you through the Service or by email. Your continued use of the Service after an update means you acknowledge the revised policy.