Privacy Policy

1. Scope, operator and current service

This policy concerns the Searchscope website at https://keywordsandbanners.com, its member accounts, keyword research, demonstration advertising tools and related support. “We” means the operator of Searchscope (legal business name awaiting confirmation). Our public contact is admin@keywordsandbanners.com. The legal operator identity, registered state and mailing address remain to be confirmed in this review draft.

Account and profile information is real even though payments, deposits, automatic refills, orders and campaign delivery are demonstrations. No real advertising payment is collected by the present website, and simulated traffic does not describe visits from real people. This policy does not describe a future publisher tracking system, audience database or live payment integration that has not been deployed.

This policy explains information handling. It does not ask you to consent to every use of information, waive privacy rights, or consent to marketing, personalized advertising or automatic payments. Those permissions, where needed, must be obtained separately.

2. Information collected

3. Information you should not submit

Do not enter real card numbers, security codes, bank login credentials, wallet private keys, seed phrases, personal government identifiers, health records or information about children. Payment setup is simulated. Do not place secrets or personal information in search queries, landing-page URLs, ads or review messages. A URL can reveal information through its path or query string.

You must have authority to provide any other person’s contact details or copyrighted material. If information we did not request is sent to us, it may still be present in the submitted record, email or backup until handled under the applicable retention and request process.

4. How information is used

• Provide research, account access, profiles, carts, orders, creative storage, review messages and demonstration reports.
• Calculate planning estimates and CPC prices. These calculations evaluate keywords and budgets; they are not personal credit scores or guarantees of inventory, conversions or financial returns.
• Send account-recovery and necessary service/security communications. We do not run a marketing-email subscription feature in the reviewed website. A future marketing program needs its own notices and opt-out process.
• Investigate misuse, maintain reliability, enforce service rules, resolve disputes and meet applicable legal obligations.
• Test and improve the service using operational records and simulated campaign data. Any future use of identifiable customer information for a materially different purpose requires an updated assessment and notice, and consent where required.

5. Disclosures and external services

Authorized administrators and technical maintainers can access records as needed for operation, campaign review, troubleshooting, backup and support. Your account records are not a public directory. Uploaded ads and destinations would be disclosed to the public and relevant delivery partners only if live advertising is later enabled under final terms.

The current server infrastructure is provided by OVHcloud. Infrastructure providers process connection and hosted information to provide their services. Operators may maintain protected development or recovery copies and access systems remotely; those locations and provider contracts must be confirmed before international commercial launch.

The research service sends the keyword, domain or URL necessary to obtain research results to SpyFu. It uses our server connection and does not need your account password, profile or payment information for the query. The provider receives the query and connection information and applies its own privacy practices. If you follow a link to SpyFu or another external website, that website receives your browser connection under its own policies.

Password-recovery and support emails are handled by our self-hosted mail system and the recipient’s email provider. Mail delivery necessarily discloses addressing and message information to the systems involved. Stripe, PayPal, banks, Zelle, crypto networks and other names in the demo catalogue are not currently connected payment recipients. Installing their real integrations would change this notice.

We may disclose necessary information to professional advisers, a prospective or actual business successor subject to appropriate protections, or authorities where required by law or reasonably needed to protect rights and safety. We do not provide a blanket permission for unrelated third-party use of account information.

6. Cookies, sale/sharing and privacy signals

The reviewed application uses a sign-in cookie and first-party browser storage for carts and choices. It has no installed marketing pixel, third-party behavioral-advertising tag or cross-site audience-tracking feature. See the Cookies & browser storage notice for names, purposes and duration. Visiting external services can introduce those services’ separate technologies.

In the reviewed test service, we do not sell account information or share it for cross-context behavioral advertising. We do not use sensitive personal information to infer personal characteristics for advertising. These are statements about present operations, not a determination that every state privacy law applies or an exemption for a future ad network.

Do Not Track and Global Privacy Control signals do not switch off necessary sign-in or requested cart functions. Because the reviewed site does not perform sale/sharing or targeted advertising, there is currently no such processing for these signals to disable. Before adding it, we must implement applicable opt-outs, recognition of legally required signals and any required consent. This notice is not a claim that a consent-management platform is already installed.

7. Retention and deletion

Account, profile, order, campaign, ad, activity and billing records remain stored until an operator handles deletion or a justified retention decision. There is currently no automatic account-deletion feature or fixed automatic purge of these business records. We use the information for service, support, security, recordkeeping and disputes, and review retention against those purposes and applicable obligations.

The sign-in cookie and session authorization last up to seven days unless ended earlier. Reset links are valid for 20 minutes and cannot be reused; expired reset/session records are cleaned during relevant authentication operations, so expiration does not mean immediate physical erasure from every database or backup. Short-lived abuse counters are removed during subsequent cleanup operations. Browser cart storage has no application-set automatic expiry.

Backups and recovery copies can contain earlier records. Deleting a live record does not instantly remove every backup. Retained copies must remain restricted, be removed through the applicable backup-retention process and not be restored into ordinary use without reapplying completed deletion requests. Legal holds, security investigations and legally required records may justify limited retention. We will explain relevant exceptions when responding to a request.

8. Security

The current design uses HTTPS, restricted server/database access, salted password hashes, session/reset-token digests, account ownership checks and abuse limits. These measures reduce risk; no service or email channel can guarantee perfect security. We do not claim that every stored database or backup is encrypted at rest or that the system holds an independent security certification.

Report a suspected account compromise or vulnerability using Contact & complaints. Do not send passwords, private keys or exploit other accounts. We assess incidents and provide legally required notifications; this notice does not replace applicable incident-response duties.

9. Your choices and privacy requests

You can edit available profile fields in My account and contact admin@keywordsandbanners.com to request access or a copy, correction, deletion, restriction, portability, an objection or withdrawal of consent where applicable. Privacy choices & requests provides an email request builder and browser-cart controls. Sending an email request is not an automatic deletion or an account closure.

Rights and lawful exceptions depend on your location and our role. We verify identity in proportion to the request and avoid requesting unnecessary sensitive documents. An authorized agent may need evidence of authority. We respond within the deadlines that apply to the request, explain a denial or permitted extension, and provide an appeal route where the law requires one. Use the same contact with ‘Privacy appeal’ if you dispute our response. Exercising applicable rights will not result in unlawful discrimination.

California and other U.S. residents may have access, correction, deletion, portability, sale/sharing or targeted-advertising opt-out rights and, where provided by law, rights relating to sensitive information and appeals. The exact scope depends on the relevant statute and its applicability; not every listed right automatically applies to every visitor. You can also contact your state attorney general or appropriate regulator.

10. International visitors and applicable legal bases

Our planned business is U.S.-based. Hosting, maintenance, email routing and recovery access can involve different countries. We have not yet finalized an international transfer schedule, an EU/UK representative, or a set of signed transfer safeguards for the future advertising network. A public website being reachable abroad is not proof that those arrangements have been completed.

Where EU/UK data-protection law applies, account delivery may rely on contractual necessity for the individual customer; managing business contacts and necessary security may rely on documented legitimate interests subject to balancing; specific duties may rely on applicable law; and optional activities requiring consent must rely on valid, withdrawable consent. We must confirm these bases for each actual use and role, rather than use consent as a substitute for all of them.

Where applicable, you may object to legitimate-interest processing, withdraw consent without affecting earlier lawful processing, and complain to a competent supervisory authority. We must put any required processor contracts, transfer mechanism and supplementary safeguards in place before making a restricted international disclosure. No certification, adequacy coverage or signed standard contractual clauses are claimed by this draft.

11. Children and future advertising audiences

Advertiser accounts are intended for adults acting for businesses, not children. Do not create an account if you are under 18 or otherwise lack authority to contract. We do not knowingly solicit personal information from children under 13; contact us if a child’s information may have been provided so we can investigate and handle it appropriately.

An adult advertiser rule does not establish that future publisher audiences are adults. Child-directed placements, teen profiling, sensitive targeting and audience-data collection need a separate assessment and controls before launch. They are not authorized by this policy.

12. Updates and contact

We will identify the revision and effective date of a finalized policy. Material changes require suitable notice and any further consent required by law. A later notice will not retroactively authorize incompatible information use. Contact details and request options are available through the Legal center.

Contact admin@keywordsandbanners.com. Legal business name, registration state and mailing address must be confirmed before this draft takes effect.