Privacy Policy

Section 01Data controller

1. Who is responsible

MVPKraft is the controller (or “data fiduciary” under India's Digital Personal Data Protection Act, 2023) for personal data processed through Answerkin. Contact us, including our grievance officer for India, at [email protected].

Where you add personal data about others (for example the email of someone you invite), you are responsible for having a lawful basis to share it with us.

Plain-language summary: How MVPKraft (“we”, “us”), which runs Answerkin (answerkin.com), collects, uses, shares and protects personal data, and the choices and rights you have. We collect as little as we can, never sell personal data and don't use it for advertising.

Section 02Data inventory

2. What we collect

We collect only what we need to run the Service:

• Account data: your email address and, if you sign in with Google, your name and profile picture as provided by Google.
• Your Content: websites, business names and other names, city, competitors, questions, team roles and the email addresses of people you invite.
• Results: Gemini answers to your questions, the businesses and sites they mention, audit results and speed scores for public pages of your website, recommendations and AI-written fixes.
• Billing data: plan, status and a customer reference from our payment partner. Card and bank details are handled by the payment partner; we never receive or store them.
• Usage and technical data: sign-in events, IP address, browser and device type, and logs of actions and errors, used for security, abuse prevention and fixing problems. For free checks we store a one-way hash of the IP address, not the address itself.
• Communications: messages you send us and emails we send you (for example delivery status).

Section 03Public sources

3. Public website data

Our crawler reads public pages of websites added to Answerkin, and AI answers may mention businesses and people by name. This information is already public; we process it only to provide the Service to the account that added the website and keep it on the schedules below.

Section 04Purposes & legal bases

4. Why we use it (purposes and legal bases)

We use personal data to:

• Provide the Service you signed up for: sign-in, weekly checks, dashboards, reports, team access and emails (performance of a contract).
• Process payments, keep records and meet tax, accounting and legal obligations (legal obligation).
• Keep the Service secure, prevent fraud and abuse, enforce limits and our Terms, and fix bugs (legitimate interests).
• Improve the Service using aggregated or de-identified statistics (legitimate interests).
• Send service messages such as invites, weekly reports, security and billing notices. We'll only send marketing emails with your consent, and you can opt out at any time.

Section 05AI processing

5. AI processing

To produce results we send your questions, business and competitor names, website address and page content excerpts to Google's Gemini API, and page addresses to Google PageSpeed Insights. Google processes this under its API terms and policies. Please don't put sensitive personal data in questions or business names.

AI results are generated automatically and may be wrong (see our Terms). We don't use AI to make decisions about you that have legal or similarly significant effects.

Section 06Service providers

6. Who we share it with

We never sell or rent personal data and don't share it for cross-context behavioural advertising. We share it only with service providers that process it for us under contract and confidentiality obligations:

• Supabase (database, authentication, file storage and server functions).
• Google (Gemini API, PageSpeed Insights, and Google sign-in if you use it).
• Cloudflare (website hosting, network security and Turnstile bot protection).
• Resend (sending email).
• Dodo Payments (subscriptions and billing, as merchant of record, which processes your payment data as its own controller).

Section 07Legal disclosures

7. Other disclosures

Team members on a website can see that website's data and the emails of others on its team. We may also disclose data if required by law or valid legal process, to protect the rights, safety or property of users, the public or us, or as part of a merger, acquisition or sale of assets, where the recipient will be bound by this policy.

Section 08Cross-border transfers

8. International transfers

Our providers may process data in countries other than yours, including the United States, the European Union and India. Where required, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.

Section 09Retention schedule

9. How long we keep it

We delete data on a set schedule:

• Full Gemini answer text: 30 days. Parsed results (who was named, positions, sources): 13 months.
• SEO audits: the latest 12 weeks. Weekly scores: while your account exists.
• AI usage and cost records: 90 days, after which they're kept only without your account or website.
• Pending invites: until accepted, cancelled or the website is deleted.
• Account data and Your Content: until you delete them or your account. Deletion is immediate in our database; copies in routine backups expire on the backup cycle.
• Billing and tax records: as long as the law requires (often several years), held by us or our payment partner.

Section 10Cookies & storage

10. Cookies and browser storage

We don't use advertising or third-party tracking cookies. We store your sign-in session and a cache of your dashboard in your browser, encrypted with a key that stays on your device, plus plain preferences such as your theme and selected website. Cloudflare may set strictly necessary cookies for security and bot protection. Clearing your browser storage signs you out.

Section 11Your rights

11. Your rights

Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal data, to restrict or object to certain processing, to withdraw consent, and to nominate someone to act for you. You can edit most data and delete your account yourself in Settings.

For anything else, email [email protected]. We'll verify your request and respond within the time the law requires (usually 30 days). We won't discriminate against you for exercising your rights.

• EU and UK: you can also complain to your local data protection authority.
• India: you can raise a grievance with our grievance officer at the email above, and then with the Data Protection Board of India.
• California and other US states: we don't sell or share personal information as those laws define it, and don't use sensitive personal information to infer characteristics.

Section 12Safeguards

12. Security

We protect data with encryption in transit, row-level access controls so people only see websites they own or were invited to, secret keys kept on the server, and limited access by our staff. No method of storage or transmission is completely secure, so we can't guarantee absolute security. If a breach affects your personal data, we'll notify you and the authorities as the law requires.

Section 13Minors

13. Children

Answerkin is a business service for adults and isn't directed at anyone under 18. We don't knowingly collect children's data; if you believe a child has given us data, contact us and we'll delete it.

Section 14Updates

14. Changes to this policy

We'll post any changes here with a new date and email account owners about material changes before they apply.

Section 15Grievance officer

15. Contact and grievance officer

MVPKraft (mvpkraft.com). Privacy questions, requests and grievances: [email protected].