Privacy Policy

This Privacy Policy explains how the individual operating KORA trading as Kora OS Growth (“we”, “us”) handles personal information when you use seokora.com and the SEOKora / KORA product (the “Service”).

Contact: support@seokora.com · +34 656 814 498 · Contact page

Postal correspondence: Calle Chiclana 7, 28025 Madrid, Spain.

Depending on how you use the Service, we may process:

• Account and contact details you provide (such as name, email, company, and website URLs).
• Product usage data needed to run KORA (such as site connections, workspace activity, quotas, and support requests).
• Google user data you authorize when you sign in with Google or connect Google products (described in “Google user data” below).
• Billing-related information processed through Dodo Payments (Dodo Payments is Merchant of Record for self-serve subscription orders; we do not store full card numbers).
• Technical data such as IP address, browser type, and basic device information for security and reliability.

SEOKora (KORA) is an SEO growth software platform. When you choose to sign in with Google or connect Google services, we access Google user data only with your consent and only as needed to provide or improve the Service for your workspace.

Google Sign-In. If you create or access an account with Google, we request the OpenID Connect scopes openid, email, and profile. We receive basic profile information from Google, including your Google account identifier, email address, email verification status, name, and (if provided by Google) profile picture. We use this to authenticate you, create or link your KORA account, and communicate about your account.

Google Search Console. When you connect Search Console, we request read-only access (https://www.googleapis.com/auth/webmasters.readonly). We may access the Search Console properties you select and related search analytics data (such as queries, pages, countries, devices, dates, clicks, impressions, CTR, and average position), and URL inspection information where the product uses it. We store selected metrics in your workspace so we can show SEO performance, find ranking opportunities, and power KORA insights and workflows for websites you connect.

Google Analytics (GA4). When you connect Analytics, we request read-only access (https://www.googleapis.com/auth/analytics.readonly). We may access account and property summaries and report metrics you authorize (such as sessions, users, engaged sessions, conversions, and breakdowns by date, landing page, or traffic source). We use this data to report traffic and engagement tied to SEO work in your workspace.

Google Business Profile. When you connect Business Profile (where available on your plan), we request manage-level access (https://www.googleapis.com/auth/business.manage) so we can access Business Profile account and location information you authorize (such as location name, title, address, and website URL) to support local SEO intelligence for your business. Any write or update actions, if offered by the product, are performed only for features you enable or approve.

Google Ads. When you connect Google Ads (where available on your plan), we request Ads access (https://www.googleapis.com/auth/adwords). We may access Ads account identifiers, performance metrics, and campaign configuration data needed for Ads-related features you enable (such as associating Ads data with your workspace, reporting, and — where you use those features — creating or pausing campaigns, adjusting budgets, keywords, or ad copy). We do not use Google user data to sell ads on our behalf or to build advertising profiles for unrelated products.

How we use Google user data. We use Google user data solely to provide and improve user-facing features of SEOKora / KORA for the customer who authorized the connection — for example syncing selected metrics into your workspace, generating SEO insights, opportunity detection, reporting, site optimization workflows you control, and in-product personalized AI or automation that helps that same workspace (such as insights or content drafts based on your connected data). We do not sell Google user data. We do not use Google user data for targeted advertising, retargeting, interest-based ads, credit determinations, lending, selling to data brokers, providing data to information resellers, or building unrelated databases.

Sharing and disclosure of Google user data. We do not transfer or disclose Google user data to third parties except: (a) infrastructure and service providers who process data on our behalf to operate the Service — including hosting and database providers, LLM or content-generation providers (for example OpenAI) that may receive SEO context derived from Google-connected data solely to deliver features you request (such as content or insight generation for your workspace), and email delivery providers if used — under obligations appropriate to the processing; (b) when required by law; or (c) with your direction. Those providers may process data only to help us provide or improve the Service for you; we do not authorize them to use Google user data for their own advertising, brokering, credit, lending, or to train generalized or non-personalized AI/ML models. We do not share Google user data with third parties for advertising, brokering, or other purposes unrelated to providing or improving the Service. Payment processing for subscriptions is handled by Dodo Payments and does not involve transferring Google API user data for payment purposes.

Storage and protection. Google OAuth tokens and related connection credentials are stored with encryption at rest in our systems, and data is transmitted over HTTPS/TLS. Access is limited on a least-privilege basis to systems and personnel needed to operate and support the Service. We do not allow humans to read Google user data obtained via Google APIs except: (i) with your consent or when you ask for support involving that data; (ii) for security, abuse investigation, or legal compliance; or (iii) when the data is aggregated and does not identify you. Security procedures are in place to protect the confidentiality of your data.

Retention and deletion. We retain Google OAuth tokens and connection credentials for as long as the connection remains active and your account remains open, and as needed for security, dispute, and legal obligations. When you disconnect a Google integration in your KORA workspace (or Integrations area), or revoke SEOKora’s access from your Google Account permissions page (https://myaccount.google.com/permissions), we delete or invalidate the related OAuth tokens and stop new access to Google APIs for that connection. Synced historical metrics and related workspace copies (for example Search Console or Analytics rows already stored for your site) may remain until you delete your account or request deletion. You may request deletion of account and Google-connected data by contacting support@seokora.com. We aim to complete verified deletion requests within 30 days, subject to legal retention requirements. When a retention period ends or a deletion request is completed, we delete or destroy the applicable data.

Google API Services User Data Policy / Limited Use. SEOKora’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Workspace APIs or Google user data obtained via Google APIs to develop, improve, or train generalized or non-personalized AI and/or ML models.

We use personal information to:

• Provide, secure, and improve the Service
• Create and manage accounts, trials, and subscriptions
• Deliver SEO insights, reporting, and workflows you request, including using Google-connected data as described above
• Communicate about support, billing, and product updates you request or need
• Comply with legal obligations and enforce our Terms

Self-serve subscription payments are processed by Dodo Payments as Merchant of Record. Dodo Payments receives the payment and tax information required to complete your order. See Dodo Payments’ own privacy documentation for how they process payment data, and our Terms of Service for the Merchant of Record statement.

We use cookies and similar technologies that are necessary to run the site (for example session and security). Where we use analytics or similar tools, they help us understand how the Service is used so we can improve it.

We share personal information with service providers who help us operate the Service (such as hosting, database providers, LLM or content-generation providers used to deliver requested features, email delivery if used, and Dodo Payments for self-serve subscription payments), when required by law, or with your direction. We do not sell your personal information. Sharing of Google user data is limited as described in “Google user data” above.

We keep account and billing-related records for as long as your account is active and as needed for legal, accounting, and dispute purposes. Google connection data is retained as described in “Google user data.” You may request deletion of account data subject to those obligations.

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal information, or to object to certain processing. To exercise these rights, contact support@seokora.com. You can also revoke Google access via your Google Account permissions as noted above.

The Service may be hosted and supported using infrastructure in the EU and other regions. Where data leaves your country, we take steps appropriate to the transfer and the providers involved.

We may update this Privacy Policy. The “Last updated” date at the top of this page will change when we do. If we change how the Service uses Google user data, we will update this policy and provide notice as appropriate.

Privacy questions: support@seokora.com, +34 656 814 498, or Contact.