Privacy policy

Markoura is operated by Markoura. For anything in this policy, write to support@markoura.com.

Only what the service needs to run. In practice that is:

• —The report form. Business name, what the business does, the area it serves, an optional website address, and your email. Your email is used only to send you that report if you ask for it. Your IP address is also recorded briefly, purely to stop one machine running hundreds of reports.
• —Your account, if you make one. Name, email, and either a password or a Google account identifier. Passwords are stored only as a bcrypt hash — we cannot read them, and neither can anyone who obtains the database.
• —Businesses you save. Name, categories, target area and website.
• —Measurements. The questions asked, the answers AI systems returned, which businesses those answers named, and the pages they cited.
• —Billing records. Your subscription identifier, plan and status. Card and bank details are entered on Razorpay's systems and never reach ours.

There are no analytics, advertising or tracking scripts on this site — not Google Analytics, not a Meta pixel, nothing. We do not buy or sell personal data, we do not build advertising profiles, and we do not use your business data to train AI models.

Only cookies the site cannot work without. A session cookie keeps you signed in for seven days; it is HTTP-only, so scripts cannot read it. Signing in with Google sets three short-lived cookies that exist only for the length of that sign-in and protect it against tampering. There are no advertising or analytics cookies, which is why this site has no cookie banner — there is nothing to consent to beyond what keeps you logged in.

Running a measurement means sending your question to systems we do not own. The processors we rely on are:

• —Groq. Runs the model that writes your questions, category suggestions and draft copy. Receives your business details and the findings it writes about. Your email and account details are never sent.
• —The assistants we measure (Google, OpenAI, Anthropic). Each receives the customer questions we generate and returns the answer we score. Your email and account details are never sent.
• —SerpAPI. Receives search queries used to capture Google AI Overviews.
• —Resend. Delivers the report email when you ask for one. Receives your email address and the report's contents.
• —Razorpay. Handles payments and holds the card details we never see.
• —Our hosting and database providers. Store the data described above so the service can run.

• —Free report results: 48 hours, then deleted automatically.
• —Reports you share by link: 30 days, then deleted automatically. These carry no email address, because anyone with the link can open them.
• —Rate-limit records tied to an IP address or email: 2 hours.
• —Usage records behind your plan's monthly allowance: about 70 days.
• —Account and saved business data: until you delete it, or ask us to. Some billing records are kept longer where tax or accounting law requires it.

Anyone can run a report on any business, and nobody verifies that the person running it owns that business. Two things follow, and both are deliberate. Shared report pages are marked so search engines do not index them, and they are deleted after 30 days. And if a report names your business and you want it removed, email support@markoura.com — you do not need an account with us to ask, and we will not require you to create one.

You can ask us to show you the data we hold about you, correct it, delete it, or send you a copy. You can withdraw consent and close your account at any time. If you are in India, these rights sit under the Digital Personal Data Protection Act 2023; in the UK or EU, under the UK GDPR and GDPR. Either way the route is the same — email support@markoura.com and we will respond within 30 days.

Traffic is served over HTTPS. Passwords are bcrypt-hashed. Session cookies are HTTP-only and same-site, which is what stops another website acting as you. No system is perfectly secure, and we would rather say that plainly than imply otherwise.

Our infrastructure and the processors listed above may store and process data outside your country, including in the United States and the European Union. Where required, transfers rely on standard contractual clauses or an equivalent safeguard.

This is a tool for businesses and is not intended for anyone under 18. We do not knowingly collect data from children.

If this policy changes materially we will update the date at the top and, where the change affects you directly, email account holders. Continuing to use Markoura after a change means the updated policy applies.

See also our terms of service and cancellation and refund policy.