"Semrush presents a high-risk privacy profile (68/100) comparable to mainstream ad-supported platforms like Netflix/Spotify, driven by extensive collection of financial and email data, broad third-party sharing for advertising purposes including email hashing with social networks, and indefinite retention of sensitive information. The company collects credit card numbers, full email content with metadata, location data, and device identifiers while sharing this information with advertising networks, marketing partners, resellers, and international entities, with limited user control over data transfers and reliance on third-party opt-out mechanisms."
semrush Privacy Concerns & Scorecard
Extensive collection of financial data including credit card numbers and payment transaction details, combined with sensitive personal identifiers and email account credentials that grant access to third-party mailbox data.
Broad sharing of user data with advertising networks and marketing partners for targeting purposes, including email hashing shared with Facebook, LinkedIn, and Google for lead generation.
Third-party tracking cookies and pixels used for cross-site behavioral tracking and targeted advertising, with reliance on third-party opt-out mechanisms rather than company-controlled settings.
Business transfer clause allows data to be transferred to successor companies without explicit notification to users at time of transfer.
Email data and mailbox integration information may be retained indefinitely as part of business records, with only vague deletion commitments.
Policy does not guarantee 100% security and places responsibility on users to protect login credentials, creating potential liability gap.
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, billing, service delivery, marketing communications, and lead generation
Payment processing, fraud detection, order fulfillment, and business record keeping
Email analysis tools, SEO and marketing intelligence, and security investigations
Service localization, fraud detection, and analytics
Service compatibility, security, analytics, and device fingerprinting for cross-device tracking
Analytics, product improvement, targeted advertising, and affiliate commission tracking
Customer support, product improvement, and dispute resolution
Account security, authentication, and integration with third-party platforms
Social analytics, marketing attribution, lead generation, and targeted advertising
Segmentation for targeted marketing and analytics
Cross-Platform Tracking
Semrush uses third-party tracking pixels, cookies, and conversion tags (CJ Conversion Tags) to track your behavior across other websites and services for advertising and affiliate attribution purposes. Third-party widgets from Facebook, LinkedIn, and Google can set cookies and track your interactions across the web. Data from your YouTube account, Google Maps usage, and Google Analytics is integrated into your Semrush profile, creating cross-platform behavioral profiles.
Tracking Methods:
Cookies and Web Storage
First-party and third-party cookies used to track user sessions, preferences, analytics, and behavioral data; policy does not specify cookie lifespan
Web Beacons and Pixels
Invisible tracking pixels embedded in emails and web pages that report user interactions (opens, clicks) back to Semrush and third-party advertisers
Conversion Tracking Tags (CJ Conversion Tags)
Third-party conversion tracking tags used to attribute affiliate purchases and marketing performance across the web; requires separate opt-out via privacy@semrush.com
Google Analytics Integration
Google Analytics tracking on Semrush website collects user behavior, demographics, and interests; can be partially controlled via Google Analytics opt-out
Third-Party API Integrations
Google Maps API, YouTube API, and social media widget embeds (Facebook, LinkedIn buttons) can track user interactions and set cookies independently
Email Tracking via Mailbox Integration
When users connect their email accounts, Semrush stores email metadata including open status, delivery status, and reply information; explicitly not used for advertising but human-accessible
Device Fingerprinting
Combination of device, browser, IP address, and behavioral signals to create a persistent identifier that can track the same user across devices and browsers
AI & Data Training
semrush does not train AI on your content
Based on their public policy, your content is not used to train AI models.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed semrush
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.