Opera browser required.
Privacy policy
INTRODUCTION This Privacy Policy explains how Semrush collects, uses, stores, discloses and otherwise processes the personal data we collect about individuals who use and interact with our websites and apps that display or link to this Privacy Policy, register for an account and use our Services, visit our branded social media pages, register for, attend or take part in our events, webinars, or contests, or otherwise interact with us in person and/or by email, text message, instant messaging, telephonically, and by other electronic means. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, you should not use our website and the Services or otherwise provide us with your personal data. By using and/or accessing our website and the Services or otherwise providing us with your personal data, you acknowledge that you have read and understood this Privacy Policy. Your use of our websites and the Services is also governed by our Terms of Service. This Privacy Policy is effective as of the date first set forth above. We may update this Privacy Policy from time to time. If we make changes, we will post the updated Privacy Policy on this page or another page that links to this page and change the date at the top of this webpage. We encourage you to look for updates and changes to this Privacy Policy by checking this date when you access our website. We will notify you of any modifications to this Privacy Policy that might materially affect the way we use or disclose your personal data prior to the change becoming effective by means of a message on this website, unless another type of notice is required by the applicable law. Your continued use of the website and our Services after we have posted changes to this Privacy Policy or notified you, if applicable, is deemed to be your acceptance of those changes. KEY DEFINITIONS "Affiliates“ means entities in our group who are listed in this Privacy Policy (please read the Affiliates section). “European Data Protection Law” means the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable national legislation implementing the GDPR and, if applicable, the UK data Protection Act 2018 and the UK GDPR. “Privacy Policy” refers to this Privacy Policy. “Semrush”, “we”, “us” and/or “our” refers to SEMrush Inc. and its Affiliates, unless specified otherwise. “Services” refers to our Software as a Service professional service made available via our websites. “You” and “your” refers to the individual to whom personal data covered by this Privacy Policy relates. INFORMATION WE COLLECT We may collect data, including personal data, about you as you use our websites and Services or request our Services, and otherwise interact with us. Some of our website’s functionality can be used without providing any personal data, though for using some features of the Services, personal data is required. We process three broad categories of personal data: Information provided directly by you; Information received from third parties Information collected automatically. Information Provided Directly by You Account registration. If you register with the Services through our website at https://www.semrush.com/, or through a separate subscription agreement with us, then as part of such registration we will ask you to provide certain personal data, including your name, your company name, your email address and password. If you create an account or log into the Services using third-party services, such as Google, Facebook or LinkedIn, we will receive your name and email address and/or phone number as permitted by your profile settings on the third-party service in order to authenticate you. The information we receive when you authenticate through a third-party service depends on the settings, permissions and privacy policy controlled by that third-party service. You should always check the privacy settings and notices in the relevant third-party services to understand what data may be disclosed to us or shared with our Services. Communication with Semrush. We collect personal data that you voluntarily give us when you contact us with inquiries (including by filling out relevant forms on our websites), engage with our chat bot on the website, respond to one of our surveys, contact our customer support regarding a problem you are experiencing with the Services or otherwise contact us regarding the website or the Services. Transactions. We collect details of transactions you carry out using the Services including information you provide to enable us to fulfill your orders, which may include financial information such as your credit card number. As a paying user of the Services, we will receive your payment transaction details (for example, your name, the amount paid and the date of payment). Payment Information. We collect payment and billing information when you register for certain paid Services. For example, upon registration we ask you to designate a billing representative, including name and contact information. You may also provide payment information, such as payment card details, which we collect via secure payment processing services. If you sign-up for a free trial account, you are not required to enter your credit card information unless and until you decide to continue with a paid subscription to the Services. Additional Payment Information. You may choose to provide additional information such as your VAT, additional billing address or name of the entity that you represent. Identity Verification. In some cases (for example if you request a refund) we may ask you to provide us information such as your billing information (name, transaction ID, last 4 digits of the credit card associated with the account, billing date, etc.), email address, login name, and if needed, information that verifies your identity, in accordance with applicable law. Use of our blog, requesting content or creating a Public Profile. If you use our blog, request content or would like to participate in our webinars or events, we may ask you to provide us with information such as your name, job title, your photo or other information. By posting any information on publicly accessible blogs or other areas of our websites you acknowledge and agree that the data you provide on our websites - including information provided to create your public profile (hereinafter "Public Profile") - would be visible to any member of the public who accesses the websites. You can change the information in your Public Profile whenever you want. Testimonials. We collect and display personal testimonials of satisfied customers and users on the Services in addition to other endorsements. With your consent, we may post your testimonial, along with your name, on the Services. If you wish to update or delete your testimonial, you can contact us at privacy@semrush.com. Information Received From Third Parties We may combine personal data we receive from you with personal data we obtain from other sources, such as: Our authorized resellers or distributors, for example, if you purchase access to the Services through one of these partners. The personal data we may receive includes business contact information, including mailing addresses, job titles, email addresses, and phone numbers. Other third parties, such as email campaigns, marketing partners, publicly-available sources and data providers. The personal data we may receive includes company information, location information, demographic information, and business contact information, including mailing addresses, job titles, email addresses, and phone numbers. We may use this information to enhance the information that we already maintain about you and to improve the accuracy of our records, in addition to other purposes described in this Privacy Policy. Information Collected Automatically Like many other commercial websites, we use certain technologies, such as tools for collecting usage data, cookies, web beacons, pixels, and similar technologies, to automatically collect information that may contain personal data as you navigate our websites or use our Services or interact with communications we send to you, subject to your consent. Device and Usage Data. When users come to our websites, we may track, collect, and aggregate information indicating, among other things, which pages of our websites were visited, the order in which they were visited, when they were visited, and which hyperlinks were clicked. We also collect information from the URLs from which you linked to our websites. Collecting such information may involve logging the IP address, operating system and browser software used by each user of the websites. We may be able to determine from an IP address a user’s Internet Service Provider and the geographic location of his or her point of connectivity. Third-Party Widgets. Some of our Services contain widgets and social media features, such as the Facebook or LinkedIn button. You are the only person who decides if you would like to press this button and share your personal data with the respective third-party operators of widgets or social media. These widgets and features collect your IP address, the information about the page you are visiting during your use of the Services and may set a cookie to enable the feature to function properly. Widgets and social media features are either hosted by a third party or hosted directly within our Services. Your interactions with these features are governed by the privacy policy of the company providing it and we recommend that you read them prior to sharing your data with such third parties. Mailbox integration Mailbox integration means an integration of Semrush tools with Gmail and/or Microsoft (Outlook, Exchange Online, Office365) accounts (jointly and individually referred to as “Mailbox account”) via API. Some of our tools may ask your permission to integrate your Mailbox account with. In order to enhance your removal requests or outreach emails experience for your productivity and monitoring purposes you can grant us access to your Mailbox account via API only if you voluntarily decide to give us the permission to integrate our tools with your mail account and to choose which email account you would like to connect with our tools. With this integration: you will be able to compose, send, read and process outreach email via a tool’s interface; you will be able to send removal requests regarding backlink(s) which looks unnatural or harmful via a tool’s interface; we will provide you with the information related to your emails sent via tool’s interface. We will show you if your emails were received, opened, if there are any replies to your emails. We will demonstrate your replies to your email via our tool interface. After the integration we will be able to store in our database in the encrypted way the following information related only to outreach emails sent by you via tool interface: Initial email’s subject and body text; Replies email’s subject and body text; API token; Thread and message ids; Recipient(s) and sender of emails; Metadata: time/day of email sending, delivering, opening, replying, email status. Notwithstanding anything herein to the contrary, we will use the data received via Mailbox integration only to provide you with the features mentioned above in order to enhance your email experience for productivity purposes and for monitoring purposes. We may also transfer data received via Mailbox integration as necessary to comply with applicable law or as a part of a merger, acquisition, or sale of assets with notice to users. All other transfers or sales of the user data received via Mailbox integration are prohibited. We will not use the data received via Mailbox integration for any other purposes except providing you with services inside of our tools, specifically we will not use the data received via Mailbox integration for any advertising purposes, including retargeting, personalized or internet-based advertising. All the data received via Mailbox integration will be processed only at the software level. We will allow a person to read the data received via Mailbox integration only if: You first give us affirmative agreement for specific messages; It is necessary for security purposes (such as investigating a bug or abuse); It is necessary to comply with applicable law; or Our use is limited to internal operations and the data received via Mailbox integration (including derivations) have been aggregated and truly anonymized. You can revoke your permission and access to your Mailbox account at any time by clicking the “bin” icon next to the mailbox mention inside the tool. You can delete all your previous emails available due to the integration by deleting the project in the tool during the revocation process, or sending us the relevant request. As soon as you revoke the access, we will remove your Mailbox token which allowed us to carry out the functions mentioned above and stop monitoring your emails immediately. For the purposes of this clause the data received via Mailbox integration means the raw data, aggregated data, anonymized data or derived data. In a case of any conflict between the terms of this clause and terms of the Privacy Policy, the provisions of this clause regarding the data received via Mailbox integration shall prevail. Cookies and Similar Technologies. Google Analytics. The Services use Google Analytics, a web analytics service of Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). The use includes the "Universal Analytics" operating mode. This facilitates the assignment of data, sessions and interactions across several devices to a pseudonymous user ID and thus the analysis of a user's activities across devices. API YouTube. Semrush uses YouTube API Services. If you are using our Services, by agreeing to our Privacy Policy you hereby also certify that you have read and agree to YouTube’s General Terms of Service (https://www.youtube.com/t/terms) and Google’s Privacy Policy (https://policies.google.com/privacy?hl=en). In addition to normal procedure for deleting stored data, you can revoke access to your data via the Google security settings page at https://myaccount.google.com/permissions?pli=1. Google Maps API. Semrush uses Google Maps API Services. If you are using our Services, by agreeing to our Privacy Policy you hereby also certify that you have read and agree to Google Maps/Google Earth Additional Terms of Service at https://maps.google.com/help/terms_maps/; and Google Privacy Policy at https://www.google.com/policies/privacy/. In addition to normal procedure for deleting stored data, you can revoke access to your data via the Google security settings page at https://myaccount.google.com/permissions?pli=1. Conversion Tags. If you reach our website via our partner’s Reference Link as described in our Affiliate program, we may use conversion tags, provided by Conversant LLC (“CJ Conversion Tags”), for the purposes of correct attribution of our partner’s marketing activity and the performance of our Affiliate program. You will receive the notice about our use of the Cookies and similar technologies during your first visit of our partner’s website including request for your consent with use of CJ Conversion Tags. You are the only person who decides if you would like to provide this permission, and you can revoke your permission any time by contacting us at privacy@semrush.com. CJ Conversion Tags collect the following data relating to the order and/or the form completed on our website: unique order ID; quantity of each product purchased; price of each product purchased; currency of the transaction; discount amount (if any); coupon code used (if any); marketing channel the sale is attributed to and a last click timestamp; dynamic CJ event click token captured on landing page URL. The processing of such data is also subject to Conversant Privacy Policy. You can revoke your permission to process the data for the purposes described above by sending an e-mail to privacy@semrush.com. We and our partners may use other cookies and similar technologies to gather information about the use of our websites and the Services, and for other business purposes as disclosed in our Cookie Policy. For more information on our use of cookies and similar technologies, and your choices with respect to such use, please refer to our Cookie Policy. HOW WE USE YOUR INFORMATION We use the personal data we collect, described above, as follows: To provide the Services and related support, process transactions, manage your user account and respond to your requests. This is necessary to perform the contract we are about to enter into or have entered into with you. To the extent permitted by applicable law, and for certain legitimate interests, including: If we have not entered into a contract with you, to operate and administer our websites, to provide you with content you access and request (e.g., to download content from our websites), and to respond to your requests for our Services (including sharing your personal data with our resellers as necessary to respond to your request for the Services in an efficient manner and facilitate the sale of our Services, as described in the ‘How We Share Your Personal Data’ section below); To manage our relationship with you, which includes sending administrative information to you, for example, information regarding the website and changes to our terms, conditions, and policies, information on our own products and services that may be of interest to you and responding to your requests or communicating with you; To analyze your preferences, interests and behavior (such as your usage of and interactions with our websites and Services) to identify insights, trends and correlations. This enables us to improve your experience with our Services by providing you with more relevant content and service offerings and helps us improve our Services (including our Service’s functionality, product features, and user-friendliness) and develop new products and services. For other internal business purposes, such as data analysis, benchmarking, audits, conducting research, analysis, studies or surveys and identifying usage trends. To prevent fraud or criminal activities, misuse of our products or services and ensure the security of our IT systems, architecture and networks; To (a) comply with legal obligations and legal process; (b) respond to requests from public and government authorities, including public and government authorities outside your country of residence; (c) enforce our Terms of Service; (d) protect our operations; (e) protect our rights, privacy, safety of property, and/or that of you or others; and (f) allow us to pursue available remedies or limit the damages that we may sustain. If you ask us to delete your data or to be removed from our marketing lists and we are required to fulfill your request, to keep basic data to identify you and prevent further unwanted processing. For marketing and advertising, including sending you updates and information about our new products and services, upcoming events or other promotions or news, including by email or push notification, as permitted by law. Where required by law we will only send you marketing information if you consent to us doing so at the time you provide us your personal data. You may opt-out of receiving such emails by following the instructions in each promotional email we send you or by updating your user settings. In addition, if at any time you wish not to receive future communications or you wish to have your name deleted from our mailing lists, please contact us at privacy@semrush.com. We will continue to contact you via email regarding the provision of our Services and to respond to your requests. HOW WE SHARE YOUR PERSONAL DATA Semrush will not sell, rent, lease or otherwise provide your personal data to others, except in order to provide you with the products and services you request and as further described below, or with your permission or as required by applicable law. Service Providers. We may engage other companies and people to perform tasks on our behalf - meaning they are helping us provide our Services. In particular, we use third party providers of payment processing, fraud prevention, and risk assessment, hosting and other information technology services, email communication and customer support services, analytics and data providers, marketing, advertising and investor relations. Following our instructions, these parties may process your personal data in the course of providing the relevant services to us. Affiliates. We may share your data with our affiliates for administrative purposes; to help provide our Services (such as providing engineering services), and related customer support or to conduct sales and marketing activities on our behalf. For example, if you request information about a company or a service from a Semrush company, then we may pass your personal data relevant to such request onto another Semrush company to enable them to appropriately respond to your request. Resellers or Distributors, Affiliates or other third parties. When you request Services from us or inquire about the Services, we may share your personal data such as name, last name and email address with our authorized resellers distributors, Affiliates and other third parties as necessary to respond to your request for our Services in an efficient manner and facilitate the sale of our Services and for those third parties’ own marketing services. These third parties will process your personal data as separate data controllers and in accordance with their privacy policies. Please refer to the privacy policy of the applicable reseller for information on the reseller’s privacy practices. Social networking websites. Where permissible according to applicable law and subject to your consent we may use certain limited personal data about you, such as your email address, to hash it and to share it with social network websites, such as Facebook, LinkedIn or Google, to generate leads, drive traffic to our websites or otherwise promote our products or Services. The social network websites with which we may share your personal data are not controlled or supervised by us. Therefore, any questions regarding how your social network websites service provider processes your personal data should be directed to such provider. Business Transfers. If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of all or a portion of our assets, or transition of a service to another provider, your personal data and other information may be transferred to a successor or affiliate as part of that transaction. Legal Requirements. We may share your personal data so that we can comply with a legal obligation to which we are subject, protect and defend the rights or property of Semrush, act in urgent circumstances to protect your personal safety or that of the public, or protect Semrush against legal liability. For example, where we are obliged to share your personal data with regulatory bodies which govern our work and services; government departments such as law enforcement, courts orders; financial institutions; external auditors; etc. DATA RETENTION We retain your personal data for as long as reasonably necessary to provide the Services and fulfil the transactions you have requested, complying with our legal obligations or for other legitimate business purposes, such as maintaining business and financial records, resolving disputes, maintaining security, detecting and preventing fraud and abuse, and enforcing our agreements. After the applicable retention period has elapsed, your personal data will be anonymized and deleted. HOW WE PROTECT YOUR PERSONAL DATA We will use industry standard physical, technical, and administrative security measures to keep your personal data confidential and secure, and will not share it with third parties, except as otherwise provided in this Privacy Policy. The Internet, however, cannot be guaranteed to be 100% secure, and we cannot ensure or warrant the security of any personal data you provide to us. It is your responsibility to protect the security of your login information. If you know or suspect that your personal data have been lost, stolen, misappropriated, or otherwise compromised, or in case of any actual or suspected unauthorized use of your Semrush account, please immediately contact us by email at privacy@semrush.com. ADDITIONAL SEMRUSH WEBSITES If you are purchasing our products at swag.semrush.com or some other website we make available to you, we might collect some additional personal data that you provide to us to complete your order, such as your billing address, delivery address, email address, telephone number, details about payments to and from you and other details of products you have purchased from us. The Lawful basis for such processing is the performance of the contract between you and Semrush. We may share your Personal Information collected during the course of your usage of online stores we make available, with providers of hosting, payment and delivery services. For example, we use the service Shopify to power our online store https://swag.semrush.com and ShipBob for the delivery of goods. UPDATING AND ACCESSING YOUR PERSONAL DATA You may access, review, modify and delete your account profile information by going to your account and editing your information. However, if you want to update, delete, limit the use or disclosure of, or access the personal data we hold about you in our systems, you will need to email your request to us at privacy@semrush.com. Please also read the “European Users” section for more information which may be applicable to you. CHILDREN Our Services are not directed to children who are under the age of 16. We do not knowingly collect personal data from children under the age of 16. If you have reason to believe that a child under the age of 16 has provided personal data to us through the Services, please contact us at privacy@semrush.com and we will endeavor to delete that information from our databases. COUNTRY AND STATE SPECIFIC DATA PRIVACY INFORMATION California Consumer Privacy Act If you are a California resident, please review our Privacy Notice for California Residents for information regarding your California privacy rights. European Users This section applies to individuals in the EEA or the UK. Who Controls My Personal Data? SEMrush Inc., SEMrush CZ c.r.o. are joint controllers for your personal data collected when you use our websites and the Services. For the purposes of the GDPR and equivalent provisions of other applicable data protection laws, SEMrush Inc. is established in the EEA through Semrush CZ s.r.o. (with registered office at Na Hřebenech II 1718/10, Nusle, 140 00 Praha, Czech Republic). Any requests concerning this Privacy Policy should be directed at SEMrush Inc. Please read the Contact Information section of this Privacy Policy for information about how to contact us. Some of our Affiliates process your personal data as data processors on our behalf and pursuant to our instructions in order to assist us in meeting business operations needs and to perform certain services and functions, such as engineering, sales and marketing. Please refer to the “How We Share Your Personal Data” section above for more information about how we may share your personal data. Lawful Bases for Processing This Privacy Policy describes the purposes for which your personal data is used and our lawful bases for such processing. Please refer to the “How We Use Your Personal Data” section above for more information. What Rights Do You Have Regarding Your Personal Data? As the data subject, you have: the right of access (Art 15 GDPR). If you ask us, we will confirm whether we are processing your personal data and, if so, provide you with a copy of the personal data along with certain other details. the right to rectification (Art 16 GDPR). If your personal data is inaccurate or incomplete, you are entitled to ask that we correct or complete it. If we shared your personal data with others, we will tell them about the correction where possible. the right to erasure (Art 17 GDPR). You may ask us to erase your personal data in some circumstances, such as where we no longer need it or you withdraw your consent. If we shared your data with others, we will alert them to the need for erasure where possible. the right to restriction of processing (Art 18 GDPR). You may ask us to restrict or ‘block’ the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to us processing it (please read below for information on your right to object). We will tell you before we lift any restriction on processing. If we shared your personal data with others, we will tell them about the restriction where possible. the right to data portability (Art 20 GDPR). You have the right to obtain your personal data from us that you consented to give us or that was provided to us as necessary in connection with our contract with you, and that we processed with automated means. We will give you your personal data in a structured, commonly used and machine-readable format. You may reuse it elsewhere. the right to object (Art 21 GDPR). You may ask us at any time to stop processing your personal data, and we will do so: if we are relying on a legitimate interest to process your personal data – unless we demonstrate compelling legitimate grounds for the processing or your data is needed to establish, exercise, or defend legal claims; or if we are processing your personal data for direct marketing. the right to withdraw consent (Art 7 (3) GDPR). If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time, but this will not affect any processing of your data that has already taken place. the right to make a complaint with the data protection authority. If you have a concern about our privacy practices, including the way we handled your personal data, you can report it to the data protection authority that is authorized to hear those concerns. You may contact us at privacy@semrush.com to exercise your rights. SEMrush Inc. will be responsible for responding to your requests, in accordance with the GDPR. International Transfers of Personal Data SEMrush Inc. is based in the United States and other members of our group are based in countries outside the EEA or the UK (please read the Affiliates section above for more information). If you are accessing our websites and the Services from the EEA, the UK or other regions with laws governing data collection and use, please note that in connection with our business and for administrative, management and legal purposes, we may transfer your personal data from the country where you reside to SEMrush Inc. in the United States and to other members of our group in the jurisdictions in which our affiliates are established and to our service providers in the United States. These countries may have data protection laws less stringent than or otherwise different from the laws in effect in the country in which you are located. Where we transfer your personal data as described above, we will take steps to ensure that your personal data receives adequate security protection where it is processed and your rights continue to be protected pursuant to the applicable data protection law, including through the use of Standard Contractual Clauses approved by the European Commission. In some cases, transfers of your personal data to us is necessary to perform the agreement we have entered into, or are about to enter into, with you. If you would like to receive more information on the safeguards that we implement as described above, please contact us as indicated below. CONTACT INFORMATION If you have any questions or concerns regarding Semrush’s Privacy Policy or use of personal data, or if you want to exercise your rights regarding your personal data, please contact us by email at our designated request address at privacy@semrush.com or by regular mail to: Semrush Inc. 800 Boylston Street, Suite 2475 Boston, MA, 02199 U.S.A. Attention: General Counsel If your request relates to the European Data Protection Law, including the GDPR, please contact: Semrush CZ s.r.o. Na Hřebenech II 1718/10 Nusle, 140 00 Praha Czech Republic Attention: General Counsel For individuals in the UK, our representative in the UK is VeraSafe United Kingdom Ltd., 37 Albert Embankment, London SE1 7TL, United Kingdom. You may contact VeraSafe at https://verasafe.com/public-resources/contact-data-protection-representative