Search Intent ExplorerPrivacy policy
This translation is provided for information only. In the event of a discrepancy, the French version prevails.
Search Intent Explorer is reserved for professionals (see the terms of use). The data concerned is that of the people who use it for their business: managers, employees, self-employed workers.
This policy explains what personal data Search Intent Explorer ("SIE", "the service") collects, why, with whom it is shared, how long it is kept and how to exercise your rights. It applies to the website www.searchintentexplorer.com and to the application hosted on it.
1. Data controller
The data controller is SEMWEE, simplified joint-stock company with a sole shareholder (société par actions simplifiée à associé unique) with a share capital of 10,000.00 euros, registered with the Paris Trade and Companies Register under number 899 693 089, whose registered office is located at 15 rue des Halles, 75001 Paris, France.
Contact for any question about your data: support [at] searchintentexplorer.com.
2. Data collected
| Category | Data | When |
|---|---|---|
| Browsing session | Random session identifier generated by your browser, truncated IP address (without its last part: it identifies the network, not your connection), user agent (browser and system), language, time zone, screen size | As soon as the application opens, including without an account |
| Account | First name, last name, e-mail address, password (stored only as an irreversible hash), role, preferences | On registration and in your profile |
| Sign-in with Google | Google account identifier, e-mail address, first name and last name sent by Google | Only if you use "Continue with Google" |
| Content of your projects | Entities, properties, values, rules, search intents, check and enrichment results, tracked websites and brands, imported files | While you use the service |
| Professional declaration | Confirmation of professional use, date and version of the accepted terms | On registration, or before the first purchase |
| Billing information | Company name or name of the entrepreneur, address, country, SIREN or SIRET number, VAT number or tax identifier, result of the checks | Before the first payment |
| Credits and billing | Credit balance, history of purchases and consumption, subscribed plan, Stripe customer and subscription identifiers, invoices | When purchasing or subscribing |
| Support access log | Identity of the SEMWEE administrator, date, project concerned, reason you gave, read operations performed (never their content), truncated IP address | Only if you authorize a support access |
| Help chatbot | Text of your question (400 characters at most), language, screen viewed (without project identifier), the answer given with its sources, feedback given under the answer. No account identifier is stored with this data. Do not enter sensitive data in your questions. | When you use the chatbot |
We neither receive nor store your card details: they are entered and processed directly by Stripe.
With "Continue with Google", we only request the openid, email and profile permissions. We do not access any other service or any other data of your Google account.
3. Purposes and legal bases
- Providing the service (creating and saving your projects, checking intents, enrichments, export): performance of the contract.
- Managing your account and authentication (confirmation codes by e-mail, password, sign-in with Google): performance of the contract.
- Managing credits, payments and subscriptions, issuing invoices and applying the correct VAT (including checking the SIREN and VAT numbers): performance of the contract and legal accounting and tax obligations.
- Reserving the service for professionals (declaration recorded on registration): performance of the contract and legitimate interest.
- Informing you about your projects (upcoming archiving or deletion of an inactive project): performance of the contract.
- Securing the service and preventing abuse (limiting the number of requests, controlling free credits, spotting multiple sessions from one network with the truncated IP address): legitimate interest.
- Measuring the audience of the site and of the documentation (pages viewed, where visitors come from, paths) with Google Analytics: your consent, asked by a banner and revocable at any time.
- Help you, at your request: a SEMWEE administrator may look at one of your projects, read only, after your authorization (project, duration, reason); accesses are logged so that you can check them and so that we can answer a complaint or detect abuse: performance of the contract and legitimate interest.
- Improve the help and the documentation (questions asked to the help chatbot and “helpful” or “needs improvement” feedback, to spot what the documentation does not cover): legitimate interest.
We do not use your data for advertising or profiling, and we do not sell it. We do not send you marketing e-mails: only service e-mails (sign-in codes, notices about your projects).
4. Recipients and processors
Your data is accessible to authorized SEMWEE staff and to the following providers, each for its own task:
The authorized SEMWEE staff include the platform administrators, who are identified by name and protected by two-factor authentication. They only access a project through a support access you have authorized: read only, no change, no export, no credit used, limited to the project, the duration and the scope (metadata only, or content read only) you chose. You can revoke the authorization at any time and see the access history from the Projects menu.
| Provider | Role | Data concerned |
|---|---|---|
| OVHcloud (France) | Hosting of the application, the database and the archives; sending of service e-mails | All the data described above |
| OVHcloud AI Endpoints (France) | Generation of the help chatbot answers | Text of your question and excerpts of the public documentation; no project content |
| Stripe | Payments, subscriptions, VAT calculation and sending of invoices | E-mail, billing information, payment data, billing history |
| Sign-in with Google, if you use it | Authentication data exchanged with Google | |
| Google (Google Analytics, Google Tag Manager) | Audience measurement, only if you accept it | Pages viewed, cookie identifier, technical browser information, IP address (not stored by Google for Google Analytics) |
To check your billing information, the service queries the French government's public company search API (Recherche d'entreprises, for the SIREN number) and the European Commission's VIES service (for the VAT number). Only these identifiers are sent.
To check and enrich your search intents, the service queries external sources: Google search suggestions (through the proxy provider Decodo) and DataForSEO keyword data. Only the search phrases to check are sent, without any data identifying you.
Stripe and Google may process data outside the European Union. These transfers are covered by the safeguards provided for by the GDPR (adequacy decision, in particular the EU-US Data Privacy Framework, or standard contractual clauses of the European Commission).
5. Retention periods
A project is considered inactive when it has not been opened in the application (if no opening has been recorded, the date of last modification or creation is used).
| Data | Period |
|---|---|
| Projects of a session without an account | Permanently deleted after 30 days of inactivity. |
| Session data without an account (identifier, truncated IP address, browser) | Deleted, together with its free credit history, after 12 months without a visit. |
| Projects of an account |
After 90 days of inactivity, you receive an e-mail. If the project is still not opened 30 days later, it is archived: the generated intents are deleted (they are regenerated from the project), while the core data, the generation and matching rules and the checked intents are kept in an archive. The archive is kept for 12 months. You can restore the project during this period from the Projects menu. You receive an e-mail 30 days and then 7 days before the archive is permanently deleted. |
| Account (identity, preferences, credit balance and history) | For as long as the account is used. Deleted at your request (see section 7), or after 3 years without signing in: an e-mail warns you 30 days before, and simply signing in keeps the account. Deletion includes the projects and the credit balance; accounting records are kept (next row). Accounts with an ongoing subscription are not concerned. |
| Professional declaration and billing information | For as long as the account exists, then in the accounting records (next row). |
| Your choice about audience measurement cookies | 6 months in your browser, then you are asked again. |
| Google Analytics cookies and audience measurement data | 13 months at most for the cookies; 14 months for the data in Google Analytics. |
| Accounting records and billing data | 10 years from the end of the financial year concerned, in accordance with article L123-22 of the French Commercial Code, including after the account is deleted. |
| Support access authorizations and access log | 365 days after the event, then automatic deletion. |
| Questions asked to the help chatbot, answers and feedback | 90 days, then automatic deletion. |
6. Cookies and local storage
The application stores in your browser's local storage what it needs to work: session identifier, sign-in token, open project, interface language, display preferences and your choice about cookies. These items are strictly necessary for the service and do not require consent.
Audience measurement. Only with your consent, the site (www.searchintentexplorer.com) and the documentation (docs.searchintentexplorer.com) use Google Analytics, loaded by Google Tag Manager, to know which pages are viewed, where visitors come from and how they use the service. Nothing is loaded or set before your consent, and nothing if you refuse. A banner asks you on your first visit; you can change your mind at any time with the "Cookies" link at the bottom of the page (refusing deletes the Google Analytics cookies). We use no advertising cookies.
During a payment, Stripe may set its own cookies to prevent fraud. During a sign-in with Google, Google may do the same on its own domains.
7. Your rights
In accordance with the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to set instructions regarding what happens to it after your death.
You can change your name and password from your profile, and export your projects from the application. For any other request, in particular the deletion of your account, write to support [at] searchintentexplorer.com. We reply within one month.
If you believe that your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
8. Security
Exchanges with the service are encrypted (HTTPS). Passwords are stored as bcrypt hashes. Google sign-in tokens are verified by our server. Access to data is limited to the people and providers who need it. A support access requires your authorization, is limited in time, read only, reserved to administrators authenticated with two-factor authentication, and every request is logged without copying your content.
9. Changes
We may update this policy. The date of the last update appears at the top of the page. In the event of a significant change, we will inform you by e-mail or in the application.