GeoKara Privacy Policy

Effective date: September 23, 2026

GeoKara ("GeoKara," "we," "us," or "our") is a product of Zargham Labs LLC. This Privacy Policy explains what information we collect through geokara.com and the GeoKara application (the "Service"), how we use it, and the choices you have. It applies to visitors, registered users, and anyone who connects a Google account to the Service.

This is a working template written for GeoKara's actual data practices. It has not been reviewed by a lawyer. Have it reviewed before relying on it for a business handling EU or California residents' data at scale.

1. Who we are

GeoKara is operated by Zargham Labs LLC. You can reach us at [email protected] with any question about this policy or your data.

2. Information we collect

Account information. Email address, and a hashed password if you sign up with email/password (we never store your password in plain text). If you sign in with Google, we receive your name and email address from Google.

Google Search Console and Google Analytics (GA4) data. When you connect a site, you grant GeoKara read-only access to that site's Search Console data (search queries, clicks, impressions, position) and GA4 data (sessions, users, conversions, top pages) via Google's OAuth consent flow. We do not request, and cannot obtain, write access to your Search Console or Analytics properties.

AI engine tracking data. GeoKara runs a defined set of prompts against third-party AI services (currently OpenAI's ChatGPT, Perplexity, and Google Gemini) to check whether and how your site is cited. We store the prompts, whether your site was cited, the cited URL if any, and a snapshot of the relevant answer text, so you can audit what we found.

Payment information. Billing is handled by Stripe. GeoKara does not receive or store your full card number; we receive a Stripe customer ID and subscription status.

Usage and log data. Standard technical data (IP address, browser type, pages visited, timestamps) collected automatically when you use the Service, and records of which external APIs were called on your behalf and their estimated cost, for billing integrity and abuse prevention.

Communications. If you email us for support, we keep that correspondence.

3. How we use your information

• To provide the Service: pull your Search Console/GA4 data, run AI-engine visibility checks, and generate your weekly plain-English report.
• To deliver reports and alerts by email (and, where enabled, WhatsApp).
• To process payments and manage your subscription.
• To maintain and improve the Service, including diagnosing technical issues.
• To communicate with you about your account, including service updates and, where you've agreed, product updates.
• To comply with legal obligations and enforce our Terms of Service.

4. Google user data — Limited Use disclosure

GeoKara's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We access Search Console and Google Analytics data solely to generate your reports and AI-visibility tracking inside GeoKara.
• We do not sell Google user data.
• We do not use Google user data for advertising.
• We do not allow humans to read Google user data except: with your consent, for security purposes (e.g. investigating abuse), to comply with law, or where the data has been aggregated and anonymized.
• You can revoke GeoKara's access to your Google account at any time at myaccount.google.com/permissions, or by disconnecting your site inside GeoKara.

5. Who we share information with

We share information with the following categories of service providers, only as needed to run the Service:

We do not sell your personal information. We may disclose information if required by law, or in connection with a merger, acquisition, or sale of assets, with notice to you where required.

6. Data retention

We retain your account and site data for as long as your account is active. AI answer snapshots are retained for 12 months by default, then deleted. If you delete your account, we delete your account data, connected-site data, and stored Google tokens within 30 days, except where we're required to retain certain records (e.g. billing records) for legal or tax purposes.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to withdraw consent for Google data access at any time. To exercise any of these rights, email [email protected]. You can disconnect your Google account and delete your GeoKara account directly from your account settings.

8. Cookies

We use a minimal set of cookies: a session cookie to keep you signed in, and (during the OAuth connect flow) a short-lived, signed state cookie to protect against forgery. We do not use third-party advertising or tracking cookies.

9. Security

Google refresh tokens and other credentials are encrypted at rest. We use industry-standard practices (encrypted connections, access controls, hashed passwords) to protect your data, but no method of transmission or storage is 100% secure.

10. International transfers

GeoKara is operated from the United States (Zargham Labs LLC) with infrastructure that may be located in other countries. By using the Service, you consent to your information being processed in the United States and other countries where our service providers operate.

11. Children's privacy

The Service is not directed to individuals under 16, and we do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. We'll post the updated version here with a new effective date, and for material changes we'll make reasonable efforts to notify you (e.g. by email).

13. Contact us

Zargham Labs LLC Email: [email protected]