Privacy Policy

This Privacy Policy explains how Lucalvry LLC ("SERPNAUT", "we", "us", or "our") collects, uses, discloses, and safeguards personal information when you visit serpnaut.xyz, request an audit, subscribe to the newsletter, or otherwise interact with our services (collectively, the "Services").

1. Who we are

SERPNAUT is operated by Lucalvry LLC, a Wyoming limited liability company located at 30 N Gould St, STE R, Sheridan, WY 82801, USA. For privacy questions or requests, contact us at hi@serpnaut.xyz. For the purposes of the EU/UK GDPR, Lucalvry LLC is the data controller of personal data processed through the Services.

2. Scope

This Policy applies to personal information we collect through the Services. It does not apply to third-party sites or services that we do not own or control, even if linked from the Services.

3. Information we collect

• Contact & audit information you submit through forms (name, email, company, website URL, notes).
• Newsletter data: email address and engagement metadata.
• Payment metadata: when you purchase a paid engagement, our payment processor (Stripe) collects your payment details directly. We receive limited data such as name, billing country, last-4 of card, and transaction ID.
• Account & authentication data where you create an account (via Supabase).
• Usage & device data: IP address, user-agent, pages visited, referrer, timestamps, and similar log data.
• Cookies and similar technologies: see our Cookie Policy.

4. How we use information

• Provide and improve the Services, including audits, playbook access, and paid engagements.
• Process payments and issue receipts.
• Send transactional email (audit deliveries, account, billing).
• Send newsletters and marketing where you have opted in; you may unsubscribe at any time.
• Measure and improve site performance and content via analytics.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms.

5. Legal bases (EU/UK GDPR)

Where GDPR applies, we rely on the following legal bases:

• Contract: to deliver Services you request.
• Consent: for newsletter marketing, non-essential cookies, and analytics.
• Legitimate interests: to secure and improve the Services, prevent abuse, and understand aggregate usage.
• Legal obligation: to meet tax, accounting, and legal requirements.

6. Sharing & subprocessors

We do not sell your personal information. We share limited data with vetted service providers who process it on our behalf under contract:

We may also disclose information if required by law, to enforce our Terms, to protect rights, safety, and property, or in connection with a merger, acquisition, or asset sale (subject to this Policy).

7. International data transfers

We are based in the United States and some of our subprocessors process data in the U.S. or other countries. Where personal data is transferred outside the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and the UK Addendum.

8. Retention

We retain personal information only as long as necessary for the purposes set out in this Policy, to comply with legal obligations, resolve disputes, and enforce agreements. Audit submissions and account data are typically retained for the duration of the engagement plus up to 24 months; newsletter data until you unsubscribe; billing records for the period required by applicable tax law.

9. Your rights (EU/UK/Switzerland)

Subject to applicable law, you have the right to: access your personal data; rectify inaccurate data; request erasure; restrict or object to processing; data portability; and withdraw consent at any time. You may also lodge a complaint with your local supervisory authority.

10. Your rights (California — CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion or correction, to opt out of "sale" or "sharing" of your personal information, and to limit use of sensitive personal information. We do not sell your personal information for money. To exercise any of these rights, including "Do Not Sell or Share My Personal Information", email hi@serpnaut.xyz. We will not discriminate against you for exercising these rights.

11. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

12. Security

We use administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date reflects the most recent revision. Material changes will be communicated where required by law.

14. Contact

Lucalvry LLC, 30 N Gould St, STE R, Sheridan, WY 82801, USA
Email: hi@serpnaut.xyz