Privacy policy

Last updated November 2, 2026 · Applies to macOS, Windows and this website

SearchBop is provided by TengrX, based in Türkiye. This policy explains the personal information processed through our website, desktop applications, licensing and support. Contact us at hello@tengrx.com.

1. How SearchBop works

The macOS and Windows desktop apps keep your working database on your computer. We do not automatically receive or synchronise your desktop sites, reports, conversations or API keys to a SearchBop cloud account. However, the app sends information to the services you use for AI, search data, website checks, repository changes, licensing and optional notifications. Local storage does not mean that every operation stays offline.

This policy covers the desktop apps, including a Microsoft Store version where offered. It does not describe a separate self-hosted server installation, whose operator is responsible for its own hosting and data practices.

2. Information stored on your device

API credential values are encrypted in the local database using AES-256-GCM. Where operating-system protection is available, the app protects its local database password and encryption key using macOS Keychain-backed storage or Windows DPAPI. This does not encrypt every report, chat or database file, and credentials must be decrypted in memory when a connection is used. If operating-system encryption is unavailable, the app can use a local file fallback. Protect your device account, disk and backups.

The actual data location is shown in Settings → This device. Existing installations may retain a folder named TengrX SEO: typically ~/Library/Application Support/TengrX SEO on macOS or %APPDATA%\TengrX SEO on Windows. Microsoft Store packaging may manage or virtualise the Windows location. Data is not automatically synchronised between a Mac and a Windows PC.

3. Information sent to services you use

These services have their own terms and privacy notices. We do not control their independent processing. Send only information you are entitled to use, review what a feature will share, and avoid entering sensitive personal information into prompts or site content unnecessarily. Removing a connection prevents future authenticated requests through that connection; it does not recall data already sent to a provider.

4. Purchases, licensing and store distribution

Our current license checkout is operated by Polar, our merchant of record. Polar processes purchase, billing, tax, receipt and payment information under its privacy policy. We can access customer and order information made available to us through Polar, such as your name, email address, purchased plan, order date, amount, order/refund status and license records, to fulfil purchases, support customers and manage licenses. The desktop app does not collect your full payment-card details.

When you activate a license, the app sends Polar the license key, product/organisation identifier and a device label, which can be your computer's host name. Polar returns an activation reference and information used to identify the plan and enforce the device limit. Deactivating a device sends its license key and activation reference. These are network requests, so Polar also receives ordinary connection information.

When you download an app through Apple or Microsoft distribution services, the applicable platform may independently process download, installation, account, diagnostic and store information under its own policies. A free Microsoft Store download does not include a paid SearchBop license. At present, license purchases initiated by the app open Polar checkout in your browser rather than using Microsoft Store billing.

5. Website, hosting and support

This website does not include an advertising tracker or an application analytics SDK. Fonts and product assets are served with the site. Your light/dark theme choice is stored in your browser's local storage; deleting that browser data removes the preference.

The website is hosted through Cloudflare. Hosting and security infrastructure can process IP addresses, requested URLs, browser information, timestamps and technical/security logs to deliver and protect the website. Operational processing by hosting infrastructure is separate from an advertising or behavioural analytics system. Following a checkout or third-party link takes you to a service with its own cookies and privacy policy.

If you contact us, we process the email address, message, order references and attachments you provide to answer you and resolve your request. Our email and hosting providers process information needed to deliver those services. We do not automatically upload your local diagnostic logs. Please redact API keys, private keys, payment details and unrelated personal information before sending support attachments.

6. Purposes and legal grounds

We process information necessary to provide the license and support you request, fulfil our agreement, maintain security, prevent misuse, establish or defend legal rights and meet applicable tax or record-keeping duties. Where applicable, the legal grounds are contractual necessity, a legal obligation, or legitimate interests in operating and protecting the service, balanced against your rights. Where a feature or applicable law requires consent, we rely on that consent for that processing rather than treating this notice as blanket permission.

For personal information processed by us in Türkiye, relevant grounds under the Turkish Personal Data Protection Law (Law No. 6698, KVKK) include the applicable contract, legal-obligation, legal-right and legitimate-interest grounds in Article 5, and explicit consent where required. You can use this website without connecting any AI, Google, GitHub or other app account.

7. International processing and recipients

Cloudflare, Polar, email services and the providers you connect may process information in countries outside Türkiye or your country of residence. Locations and safeguards vary by provider and account region. Where we arrange a transfer subject to data-protection law, we must use the safeguards or other permitted grounds required by that law. Your connected providers' regional and data-use settings remain important when deciding what to send to them.

We do not sell your desktop data or disclose it for cross-site targeted advertising. We may disclose information we hold when necessary to comply with a valid legal obligation, protect rights or security, or use service providers for the purposes described here. We do not provide your local database to those providers merely because you install the app.

8. Retention and deletion

Your local workspace remains on your device until you remove it, subject to feature-specific cleanup. For example, the app can prune raw search and analytics rows associated with runs older than 14 days; that does not mean it deletes your conversations, reports, settings or every copy of that information. The cleanup runs while the app's worker is operating.

Uninstalling the app may leave local data behind on both macOS and Windows. To remove it, quit the app and delete the data folder identified in Settings, along with any copies or backups you no longer want. Back up anything you need first. Deleting local data is separate from releasing a Polar device activation or deleting records held by a connected provider.

We keep support and purchase-related information only as long as needed for support, license administration, security, legal claims and applicable accounting or legal obligations. Polar and other providers apply their own retention rules. We cannot delete your local files remotely or guarantee deletion of records another provider must retain.

9. Your choices and privacy rights

You can disconnect credentials, choose another provider, avoid optional notifications, stop scheduled activity by closing the app, remove local workspace data and ask us about information we hold. Depending on the law that applies, you may have rights to access, correction, deletion, restriction, portability, objection and withdrawal of consent, subject to legal limits. Withdrawing consent does not affect processing that was lawful before withdrawal.

Under KVKK Article 11, you may request information about whether your personal data is processed, its purpose and use, and recipients in Türkiye or abroad; request correction or deletion where the law permits; request that relevant recipients be notified; object to a result against you based solely on automated analysis; and seek compensation where unlawful processing causes damage. You may also complain to the competent data-protection authority in accordance with the applicable procedure.

Send requests to hello@tengrx.com. Describe the request and the email or order reference needed to locate records; do not send an ID document or full API key unless a secure, necessary verification process has been agreed. We may need proportionate verification before acting and will respond within the period required by applicable law. For data held only by a connected provider, use that provider's request process as well.

10. Children and AI use

SearchBop is a website-management tool and is not directed at children under 13. Do not submit children's personal information through the app or support. Applicable AI providers may impose additional age requirements. If you believe a child has supplied personal information to us, contact us so we can review and take appropriate action.

11. Changes to this policy

We will update this page when our practices materially change and revise the date above. Where law requires additional notice or consent, we will provide it. This policy is a notice about processing; it does not remove rights available under applicable law.

12. Contact

TengrX · Türkiye
SearchBop privacy and support: hello@tengrx.com
Website: https://searchbop.tengrx.com

See also our terms of use and refund policy.