Privacy Policy

Last Updated: 23 October 2026

At SBMM (sbmm.com.pk), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It covers our website sbmm.com.pk, our Learning Management System at edu.sbmm.com.pk (the “LMS”), our live classes, and the SBMM – SERP/SEO/AEO/GEO Signals & Tools browser extension.

1. Who We Are

SBMM is a training institute that offers online courses through its own LMS. For any privacy question you can reach us at [email protected].

2. Information We Collect

2.1 Account and enrollment details

SBMM does not allow public sign-up or self-registration. Student accounts are created by our Admin Team when a student enrolls in a course. During enrollment and while your account is active, we may collect:

  • Full name and father’s name
  • Email address
  • WhatsApp number
  • Facebook profile URL
  • City, country and home address
  • Gender, date of birth and education
  • Profile photo, if you add one
  • CNIC (national identity card) images, only when identity verification is required for your account or certificate
  • Your password, which is stored only in an encrypted (hashed) form that our team cannot read

We do not ask for any information that is not needed to run your account and your courses.

2.2 Learning activity

When you use the LMS, we record your learning activity so we can track progress and issue results:

  • Lessons watched and how far you watched each video
  • Quiz attempts, answers and scores
  • Assignments you submit, including files, links and notes
  • Reading progress in PDF books
  • Certificates, internship letters and achievement badges issued to you
  • Support tickets and the messages you send to our team

2.3 Live classes

When you join a live class, we record when you joined and left, how long you stayed (for attendance), and any chat messages you send. Live classes may be recorded, including the instructor’s screen, audio and video, and the audio or video of participants who turn on their microphone or camera. Recordings are made available only to students of the same course or batch.

2.4 Security and device information

Our course videos are protected content. To keep accounts secure and prevent sharing or piracy, we collect:

  • Your IP address, browser type and login times
  • A device identifier generated from your browser and device settings, used to enforce the device limit on your account
  • Records of failed sign-in attempts
  • Security events, such as signs of screen recording, download tools or account sharing

Course videos show a visible watermark that includes your account details. Misuse of course content may lead to temporary or permanent suspension of your account.

3. How We Use Your Information

We use the information we collect only to:

  • Create and manage your student account
  • Give you access to the courses, live classes and materials you are enrolled in
  • Track your progress and attendance and issue certificates
  • Contact you about classes, course updates, support requests and important account notices
  • Send occasional messages such as birthday greetings
  • Protect our content, our students and our service from fraud and misuse
  • Improve our courses and services

4. Data Sharing and Disclosure

SBMM does not sell, rent or trade your personal information, and does not share it with anyone for marketing purposes. We share limited information only with service providers that help us run SBMM, and only as needed for that service:

  • Hosting and security: our servers are hosted by Hetzner Online GmbH, and traffic passes through Cloudflare for protection and performance.
  • Payments: payments are processed by trusted payment providers such as PayFast. We do not store your card details.
  • Email delivery: an email service provider delivers our account and course emails.
  • Backups: backups are stored with a secure cloud storage provider so your data can be restored if something goes wrong.
  • Spam protection: our sign-in page uses Google reCAPTCHA, which is subject to Google’s own Privacy Policy and Terms of Service.

We may also disclose information if required by law, regulation or legal process, or to protect the rights and safety of SBMM, our students or others.

5. Data Security

  • All connections to sbmm.com.pk and edu.sbmm.com.pk are encrypted with HTTPS.
  • Passwords are stored only in encrypted (hashed) form.
  • Course videos are encrypted and delivered through short-lived, account-bound links.
  • Only authorized members of the Admin Team can access student details, and their access is limited to what their role needs.

No system is completely secure, but we use industry-standard measures to protect your information from unauthorized access, alteration or disclosure.

6. Data Retention

We keep your account and learning records for as long as your account is active and for a reasonable period afterwards, so we can verify certificates and keep payment and service records. Class recordings are kept for as long as they are useful for the course. Security logs are kept only as long as needed to protect the service. When information is no longer needed, we delete it.

7. Your Rights

As a student, you have the right to:

  • Request a copy of the personal information we hold about you
  • Ask us to correct or update your details
  • Ask us to delete your information, subject to records we must keep for payments, certificates and legal reasons

To use any of these rights, email us at [email protected].

8. Cookies and Tracking

Our website sbmm.com.pk may use cookies and analytics tools, such as Google Analytics, to understand traffic and improve the experience. These tools do not collect your name or contact details.

The LMS uses only essential cookies and browser storage that are needed to keep you signed in, protect course videos and remember your preferences. The LMS does not use advertising cookies.

9. Children’s Privacy

Our courses are intended for adults. If a student is under 18, a parent or guardian should be aware of and agree to their enrollment. If you believe a child has been enrolled without that consent, please contact us and we will review the account.

10. SBMM – SERP/SEO/AEO/GEO Signals & Tools (Chrome Extension)

This section covers the SBMM – SERP/SEO/AEO/GEO Signals & Tools extension for Google Chrome.

What the extension does

On search result pages of Google and other supported search engines (Bing, Yahoo, DuckDuckGo, Brave Search and Yandex, from version 1.5.2), the extension shows SEO signals under each result, such as domain rating, domain and page authority, spam score, referring domains, backlinks, estimated traffic, domain age and global rank, along with an analysis sidebar. It is free and needs no account or sign-up. On these result pages it sends the result domain names and addresses to our server at edu.sbmm.com.pk, and, from your own browser, the result domain names alone to a public traffic-data service (for the monthly-visits number) and to a public web archive (for archive history). The search engine’s own links and ads are skipped.

Page audit: when you click the extension’s icon while on any website, the extension reads that one page in your browser (its title, description, headings, links, images, structured data and social tags, plus the site’s public robots.txt and sitemap) and shows an SEO audit. This only happens when you click the icon, and only for the tab you are on. The page itself is read in your browser and its content is never sent anywhere. To show the site’s signals (such as domain rating, authority, backlinks, traffic and domain age) at the top of the audit, only the site’s domain name (for example example.com) is sent to edu.sbmm.com.pk, the same way as for Google results. When you open the Redirects tab, the same domain name is sent so our server can check where its http, https, www and non-www versions redirect; an address you type into the redirect check box is sent only when you press Check. The full audit report and the HTML vs DOM comparison open in a new tab inside the extension; their data is kept only in the browser’s temporary session storage, is never sent anywhere and is cleared when the browser closes. Your colour theme choice is saved in your browser only.

Site signals in the top bar: when you open a website, the SBMM Tools bar at the top shows that site’s signals (domain rating, authority, spam score, backlinks, traffic, age and rank). To do this, the domain name of the website you open (for example example.com) is sent to edu.sbmm.com.pk, once per site, the same way as for Google results. Only the domain name is sent: never the full page address, the page content, your search terms or anything that identifies you. Results are kept in your browser for up to 7 days so the same site is not looked up again. Localhost, IP addresses and intranet names are never sent. If you hide the bar, nothing is looked up for the pages you open while it stays hidden. The bar also works out, inside your browser, the page’s word count and last-updated date, the site’s content system and which ad networks or other monetization the site uses. For this it reads the page itself, the site’s own public files (robots.txt, sitemap and advertising files) and whether the page opens a new tab; none of this is sent to us. For the bar’s “URLs Indexed” box, your browser sends Google an ordinary search for site: plus the site’s domain name (for example site:example.com), once per site, and reads the number of results from Google’s answer. The request goes directly from your browser to Google with your own Google cookies, the same as a search you type yourself, so if you are signed in to Google it may appear in your Google search activity under your own account settings. The extension makes at most 30 of these searches an hour, and stops making them for several hours if Google asks for verification. The number is kept in your browser for up to 7 days and is never sent to us. If the automatic search is not possible, clicking the box opens the same search in a background tab, reads the number and closes the tab. Apart from the domain lookup, the extension does not collect anything from the websites you visit.

CMS Detector and Performance tabs (inside the extension popup): read the current page in your browser only when you open the tab. CMS Detector matches patterns in the page’s HTML, scripts, cookies and URL to identify the technologies behind the site (such as WordPress, React, Google Analytics or Stripe). Performance reads the browser’s built-in Performance Timeline (Navigation Timing, Resource Timing, paint and layout-shift entries) so you can see Core Web Vitals, resource sizes and timings for that one page. Both run entirely in your browser; nothing is sent anywhere.

AEO / GEO Analyzer (inside the extension popup): runs only when you open the tab. It reads the current page in your browser (headings, text structure, links, structured data, author and date information, robots and canonical tags) and, like the page audit, reads that same site’s own page HTML and public robots.txt to compare server HTML with the rendered page. All scoring happens in your browser. No page content is sent to our server or to any AI service. Reports you export are saved to your own computer.

Internal Link Finder and Internal Link Graph (inside the extension popup): run only when you open the tab and press the button. Link Finder reads the current page in your browser and, using the current site’s own public sitemap, suggests phrases that could link to the site’s other pages. Link Graph reads up to 150 public pages of the same site you are on (starting from its sitemap, without your cookies or login) to draw how those pages link to each other and list orphan pages. Both run in your browser; the pages and results are never sent to our server and are cleared when the browser closes. A CSV export is saved to your own computer.

SBMM Tools top bar (version 1.4.5 onwards): a slim floating bar appears at the top of every website so you can reach six utilities with one click. The bar runs locally in your browser — closed Shadow DOM isolated from the page, so the websites you visit never see it. Clicking its arrow hides it on every site until you show it again.

  • Color Picker: captures the current viewport once (as a one-off image kept in memory), shows a crosshair overlay with a floating colour-value chip, and copies the HEX of the pixel you click to your clipboard. The captured image is read for pixel colours only and is discarded when you close the picker. Nothing is uploaded anywhere.
  • Full Page Screenshot: scrolls the current tab, captures the visible area in slices, stitches them into one PNG in your browser, and offers it as a download through the browser’s standard “Save As…” dialog. The image stays on your computer. The screenshot is also copied to your clipboard so you can paste it. Nothing is sent to our server.
  • Area Snip: captures the current viewport once, lets you drag a selection and (optionally) annotate it with pen, arrow, rectangle, highlighter, text, blur or numbered step markers, then saves the result as PNG via the browser’s save dialog or copies it to your clipboard. Nothing is sent to our server.
  • Clean Text Extractor: reads the main text of the current page in your browser (leaving out menus, ads and footers) together with its title and description, so you can copy it or save it as a text or Markdown file through the browser’s save dialog. Nothing is sent to our server.
  • Bulk URL Opener: opens a list of addresses (up to 50) you paste in, each as a new background tab. Addresses stay in your browser and go to Chrome’s own tab system. An optional “Fetch This Site URLs” button reads only the current site’s public /robots.txt and /sitemap.xml (standard files meant to be read by anyone) to fill the box with that site’s own URLs; those addresses stay in your browser.
  • Keyword Ideas (version 1.5.0 onwards): opens the SBMM Auto Keywords Intelligence page where you create a project (name, country and language), add a seed keyword to it, and collect keyword suggestions from Google’s public autocomplete service. It runs only when you create a project, add a seed keyword and press Start collecting; nothing is sent to Google before that. See “Keyword Ideas data” below.

Information it handles

  • Search results: the domain names and page addresses (URLs) of the results on the Google or other supported search engine page you are viewing are sent to edu.sbmm.com.pk so their signals can be shown.
  • Keyword data: on a Google or other supported search engine results page, the keyword you searched is sent to edu.sbmm.com.pk to look up its search volume, cost-per-click, competition and 12-month trend, and to Google’s own public autocomplete service to suggest related and long-tail keywords. The suggestions are fetched only when you open the Keywords tab of the results sidebar (or press its “Load long-tail ideas” button), never automatically on every search. Your browser then sends Google 11 requests, one after another: the keyword itself and the keyword followed by one of ten common words (how, what, why, best, vs, for, with, near, online, free). The answer is kept in your browser for up to 6 hours (and is cleared when Chrome closes), so the same keyword is not requested again. The search volume, cost-per-click, competition and trend of keywords you have searched are kept in your browser for up to 30 days, so a keyword you search again is shown without a new request. If Google limits or blocks these requests, the extension stops at once and does not ask again for up to 30 minutes. Only the keyword is sent — not the results, the page, or anything that identifies you. These requests go from your own internet connection without your Google cookies, so Google sees your IP address as it would for any web request.
  • Keyword Ideas data: your projects, seed keywords, settings, the queries sent and every keyword collected are stored only in your browser (IndexedDB and extension local storage) and are never sent to edu.sbmm.com.pk or any other SBMM server. There is no account, no sync and no upload. While a collection runs, your browser sends each query (your seed keyword combined with the letters, numbers, prefixes, suffixes, question words or templates you choose, and, if you turn on discovery rounds, keywords found earlier) one at a time to Google’s public autocomplete service at suggestqueries.google.com, with your chosen country and language and without your Google cookies. Google receives these requests from your internet connection and handles them under its own privacy policy. The number of requests is limited by the query limit you set (at most 5,000 per project), and collection stops on its own if Google limits or blocks requests. Exports (CSV, JSON) are saved to your own computer.
  • Install ID: on first run the extension creates a random ID that is not linked to your name, email or Google account. It is sent with each request so we can prevent abuse and count how many people use the extension.
  • IP address: used briefly to rate-limit requests and protect the service, as in standard server logs.
  • Settings: your chosen search country, language, sidebar preferences, colour theme, picked-colour history and whether the tools bar is visible are stored only in your own browser and are never sent to us. The signals of domains the extension has already looked up are also kept in your browser for up to 7 days (1 day if some signals were missing), keyword metrics for up to 30 days, archive history and domain age for up to 30 days and a site’s page count for up to 3 days, so the same site or keyword is not looked up again. The bar’s word count, last-updated date and monetization are worked out in your browser.
  • Websites you open: the domain name of each website you open (not the full address or its content) is sent to edu.sbmm.com.pk so the top bar can show its signals, at most once per site every 7 days. For a site’s domain age, when our server has no record (for example some country-code domains), the domain name alone may be sent from your browser to a public WHOIS lookup service to estimate its registration date. To show when a site was first saved and in how many months, the domain name alone is also sent from your browser to a public web archive.
  • Page audit: the page is read in your browser only when you click the icon, and its content is never sent anywhere. Only the site’s domain name is sent to edu.sbmm.com.pk for its signals and redirect check, plus any address you type into the redirect check box yourself. Full reports stay in your browser’s temporary session storage and are cleared when the browser closes. Exports (CSV, JSON, PDF) are saved to your own computer.
  • Tools bar and link tools (screenshots, colour picker, text extractor, bulk opener, link finder, link graph): the viewport image used by the colour picker, snip and full-page screenshot tools is created and kept only in your browser’s memory for the duration of the tool. Saved screenshots and files go to your own computer. Nothing from these tools, no page crawled by the link graph, and no address you paste or sitemap URL you fetch, is sent to our server.

What it does not collect

Your name, email, passwords, browsing history, the content of pages you visit, or payment, health, financial or location data. Apart from a keyword you search on Google or another supported search engine — used only to show that keyword’s metrics and related ideas, as described above — nothing you type is collected. Keywords you enter in Keyword Ideas are sent only to Google’s autocomplete service, never to us. The extension has no analytics, no trackers and no ads.

How signals are found

Our server looks up information about the domains and pages it receives from public sources, such as domain registration records, public domain WHOIS services, public website ranking lists, public copyright notice databases, web archives, Google’s own public autocomplete, and the public result page itself, and from third-party SEO data providers that supply authority, backlink, traffic and keyword estimates. Only domain names, public page addresses and the keyword you searched are sent to these sources, never anything that identifies you. Results are cached on our server for up to 7 days (keyword search-volume data for up to 30 days), shared between all users, and not linked to who searched.

Use and sharing

This data is used only to show the search signals and to protect the service from abuse. It is not sold, rented or traded. Apart from the lookups described above, it is processed only by our hosting providers, Hetzner Online GmbH and Cloudflare.

Chrome Web Store Limited Use

The use of information received from the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. It is used only for the extension’s single purpose, is not transferred except as described above, is not used for advertising or to determine creditworthiness or lending, and is not read by people except for security, legal compliance, or with your permission.

Retention and your choices

Cached signals are deleted automatically from our server after 7 days (keyword search-volume data after 30 days). Copies kept in your browser expire on their own after 1 to 30 days, depending on the data, and are removed with the extension. The install ID stays in your browser until you remove the extension, and on our server we keep only the last time it was seen. Your picked-colour history, tools-bar visibility and other preferences live only in your browser’s local storage and can be cleared from chrome://extensions at any time. Keyword Ideas projects and keywords stay in your browser until you delete a project or clear its results on the Keyword Ideas page, or remove the extension. Removing the extension removes its access to Google suggestions and deletes all Keyword Ideas data from your browser. You can remove the extension there to delete everything it stored in your browser, or email us at [email protected] to request deletion of any data we hold.

11. Updates to This Policy

SBMM may update this Privacy Policy from time to time. Changes will be posted on this page with a new “Last Updated” date. If a change is significant, we will also let enrolled students know through the LMS or by email.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your information, contact us:

Email: [email protected]
Website: https://sbmm.com.pk