Privacy Policy

The data controller is Sant Limited (New Zealand). For any privacy question, request, or complaint, contact us at support@ohkiki.app.

We collect the following categories of information:

• Account information — your name and email address, provided when you sign up or when you sign in with Google. Authentication is handled by our provider (Supabase).
• Content and configuration you provide — the websites, business profiles (name, address, phone, brand tone), keywords, competitors, and other details you add for the sites you manage, and the content (blog posts, social posts, reports) you generate.
• Connected third-party account data — where you choose to connect them, read-only data from Google Analytics and Google Search Console (see Section 4).
• Usage and device data — logs, IP address, browser type, and product analytics used to operate, secure, and improve the Service.

We use information to:

• provide, operate, and maintain the Service and its features;
• display your marketing performance (analytics, rankings, citations, reviews) and generate reports and recommendations;
• generate content, images, and insights using AI on your instruction;
• authenticate you, secure accounts, prevent abuse, and meet legal obligations;
• communicate with you about the Service, including support and service notices.

If you connect a Google account, we request read-only access to your Google Analytics data and Google Search Console data so we can show it inside your OhKiki dashboard and include it in the reports you generate. Specifically, we may read metrics such as sessions, users, page views, traffic sources, search queries, impressions, clicks, and average position.

OhKiki’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In line with those requirements, we confirm that Google user data is:

• only used to provide and improve the user-facing features described above;
• never sold, and never used for advertising;
• never used to train generalized or non-personalized AI/ML models;
• not read by humans, except where you give explicit consent for a specific action, where it is necessary for security purposes (such as investigating abuse) or to comply with applicable law, or in aggregated/anonymized form for internal operations.

You can disconnect a Google account at any time from within the Service, and you can revoke OhKiki’s access from your Google Account permissions page.

To deliver the Service we rely on trusted third-party providers who process data on our behalf. These include cloud hosting and database providers (for application hosting, storage, and authentication) and AI, search, and media providers used to generate and enrich content (for example, providers of large language models, SERP and SEO data, stock imagery, image generation, and transactional email). We only share the data necessary for each provider to perform its function, and we do not permit our AI providers to use your content to train their models where an opt-out is available to us.

We will provide a current list of sub-processors on request at support@ohkiki.app.

We do not sell your personal information. We share information only:

• with the sub-processors described in Section 5, to operate the Service;
• with other members of your team/agency workspace, according to the roles and permissions you set;
• if required by law, legal process, or to protect the rights, safety, and security of users and the public;
• in connection with a business transfer (such as a merger or acquisition), subject to this Policy.

We keep personal information for as long as your account is active or as needed to provide the Service, and thereafter only as required for legitimate business or legal purposes. You can ask us to delete your account and associated data at any time (see Section 9).

We use reasonable technical and organizational measures to protect your information, including encryption in transit, access controls, and reputable cloud infrastructure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. New Zealand users have rights under the Privacy Act 2020; users in the European Economic Area and the UK have rights under the GDPR/UK GDPR. To exercise any right, email support@ohkiki.app. You may also complain to your local data protection authority — in New Zealand, the Office of the Privacy Commissioner.

OhKiki is operated from New Zealand and uses cloud providers that may store or process data in other countries. Where we transfer personal information across borders, we take steps to ensure it remains protected consistent with this Policy and applicable law.

We use cookies and similar technologies that are necessary to sign you in, keep your session secure, and understand how the Service is used. You can control cookies through your browser settings, though disabling some may affect functionality.

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you within the Service.

Sant Limited (New Zealand)
Email: support@ohkiki.app