Privacy Policy
Last updated: February 10, 2026
Mercury Labs Inc. ("Kerplexir," "we," "us," or "our") operates the Kerplexir platform at kerplexir.com and app.kerplexir.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.
By accessing or using Kerplexir, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the platform.
1. Information We Collect
1.1 Personal Information You Provide
We collect information you voluntarily provide when you:
- Create an account: Name, email address, and password.
- Subscribe to a plan: Billing address and payment information (processed securely by Stripe — we never store your full card number).
- Use the platform: Content you create, keywords you research, prompts you send to AI agents, and blog posts you generate.
- Contact us: Name, email, and any information included in your message.
1.2 Information Collected Automatically
When you access Kerplexir, we automatically collect certain information, including:
- Device & browser data: IP address, browser type, operating system, device identifiers, and screen resolution.
- Usage data: Pages visited, features used, time spent on pages, click patterns, and referral sources.
- Cookies & similar technologies: See our Cookie Policy for details.
1.3 Third-Party Data
We may receive information from third-party services you connect to Kerplexir, such as Ghost, Webflow, Framer, API Webhook, or Google accounts used for authentication.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Kerplexir platform.
- Process transactions and manage your subscription.
- Personalize your experience, including AI agent responses and content recommendations.
- Improve our services through analytics and usage pattern analysis.
- Communicate with you about your account, updates, security alerts, and support requests.
- Send marketing communications (only with your consent — you can opt-out at any time).
- Detect, prevent, and address fraud, abuse, and technical issues.
- Comply with legal obligations.
3. How We Share Your Information
We do not sell your personal information. We may share your data with:
- Service providers: Companies that help us operate Kerplexir, including Stripe (payments), Vercel (hosting), Clerk (authentication), OpenAI and Anthropic (AI processing), Ahrefs and Semrush (SEO data via API), and analytics providers.
- Publishing platforms: When you choose to publish content, we share the necessary data with your connected platforms (Ghost, Webflow, Framer, API Webhook).
- Legal requirements: When required by law, subpoena, or government request, or to protect our rights, property, or safety.
- Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
4. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:
- Account data: Retained until you delete your account.
- Content you create: Retained until you delete it or close your account.
- Usage logs: Retained for up to 12 months for analytics and security purposes.
- Billing records: Retained for 7 years as required by tax and accounting regulations.
When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
5. Data Security
We implement industry-standard security measures to protect your data, including:
- Encryption in transit (TLS 1.3) and at rest (AES-256).
- Secure authentication via Clerk with support for multi-factor authentication.
- Regular security audits and vulnerability assessments.
- Access controls limiting employee access to personal data.
- PCI-DSS compliant payment processing through Stripe (we never handle or store raw card numbers).
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data ("right to be forgotten").
- Portability: Request your data in a structured, machine-readable format.
- Objection: Object to processing of your data for direct marketing.
- Restriction: Request restriction of processing in certain circumstances.
- Withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at privacy@kerplexir.com. We will respond within 30 days.
7. International Data Transfers
Kerplexir is operated from the United States. If you access Kerplexir from outside the United States, your information may be transferred to, stored, and processed in the US or other countries where our service providers operate. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required by GDPR.
8. Children's Privacy
Kerplexir is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us at privacy@kerplexir.com and we will delete the information promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also send an email notification. Your continued use of Kerplexir after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
- Email: privacy@kerplexir.com
- General inquiries: hello@kerplexir.com