1. What we collect
When you use SerpNames, we collect:
- Account data: name, email, password (hashed), Telegram username (if provided)
- Order data: domains purchased, prices, payment method, billing details
- Usage data: pages visited, search queries, saved domains, IP address, browser type
- Communication data: messages you send us via Telegram or email
2. How we use it
We use your data to:
- Process orders and transfer domains
- Send order updates, payment confirmations, and transfer notifications
- Notify you of new domains matching your interests (if you opt in)
- Respond to support requests
- Prevent fraud and abuse
- Improve the marketplace based on aggregated usage patterns
3. Third parties we share with
We share limited data with:
- Payment processor — card data goes directly to them; we don't store full card numbers
- Email service — to deliver transactional emails (orders, password resets)
- Telegram — if you message us, Telegram processes that conversation under their terms
- Domain registrars — when transferring domains, registry data is shared as required
- Analytics — privacy-respecting analytics (no individual tracking, no profile building)
We don't sell your data to advertisers or data brokers. Ever.
4. Cookies
We use minimal cookies for login sessions and basic preferences. We don't use third-party advertising cookies or cross-site tracking.
5. Data retention
We keep account data while your account is active and for 12 months after closure (for legal/tax records). Order records are kept for 7 years for tax compliance. Sourcing inquiries are deleted 90 days after resolution.
6. Your rights
You can:
- Access the data we hold about you
- Correct inaccurate data
- Delete your account (subject to legal retention requirements above)
- Export your data in a portable format
- Opt out of marketing emails (transactional emails are required for service)
To exercise any of these rights, message us on Telegram or email — we respond within 30 days.
7. Security
Passwords are hashed (bcrypt). Payments are processed by PCI-compliant providers. Site files are stored on encrypted object storage with access tokens that expire. We use HTTPS everywhere.
8. Children
SerpNames is not for users under 18. We don't knowingly collect data from minors.
9. International users
If you're in the EU, UK, or California, you have additional rights under GDPR / UK GDPR / CCPA. We honor all such requests.
10. Changes
We'll notify active users of material changes via email.
11. Contact
Questions about privacy: @serpnames on Telegram.