SEMRush
SEMRush · Uncategorised · US · www.semrush.com
services/semrush.yamlVendor data-handling terms
Semrush's AI features and MCP server work on SEO and marketing data; the public policy does not address training on it.
“This Privacy Policy does not apply to our handling of personal data that we process on behalf of our business customers as a service provider or processor. / Our processing of that information is governed by our agreement with our business customers.”
The public policy covers account and website data; retention of customer project data is set by the agreement.
No hosting region is named; Semrush is headquartered in the United States.
“All other transfers or sales of the user data received via Mailbox integration are prohibited.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| semrush.com | app | observed |
Assessment
Reasoning: An SEO and marketing analytics suite with AI content tools and an MCP server. The data is public web and search data plus the customer's own marketing content. Customer data terms sit in the agreement.
Flags: Customer data terms set by agreement · MCP server exposes marketing data to connected agents · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Scope and transfer terms verified against the Semrush privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.