This policy explains what PeakKR ("PeakKR", "we") collects when you visit our website or use PeakKR, why, who processes it, and the choices you have. For data your agency puts into PeakKR about its own clients, your agency is in control and we process it on your behalf under our Data Processing Addendum.
What we collect
- Account details: your name, email, password (stored only as a secure hash), workspace name, team members you invite, and settings.
- Billing details: plan and subscription status. Card details are collected and stored by Stripe, not by us.
- Customer Data: what you and your team put into PeakKR: clients, projects, tasks, messages, files, time entries, reports, content, and data from services you connect (for example Search Console, Analytics or Business Profile metrics).
- Usage and device data: pages opened in the app, IP address, browser and device type, and error reports, used to run, secure and improve PeakKR.
- Website visits: on our public website we count visits with a first-party cookie holding a random ID, plus the page you first landed on and where you came from (such as a search engine or a link). It doesn't identify you by name, and bots are ignored.
- Chat and contact forms: what you type into the website chat or a contact form, including any contact details you choose to give.
How we use it
To provide and support PeakKR; to bill you; to send service emails (such as notifications, trial reminders and security notices); to answer questions; to keep PeakKR secure and prevent abuse; to understand which pages and features are used so we can improve them; and to meet legal obligations. We don't sell personal information, and we don't use Customer Data to train AI models.
AI features
When you use an AI feature, the relevant text and data are sent to the AI provider in use (Anthropic, OpenAI or Google) to produce the result. These providers process it under their API terms, which don't allow them to train their models on API data by default. We log the amount of AI each workspace uses (tokens and estimated cost), not the full prompts, to apply plan allowances.
Google user data
If you connect Google services (such as Search Console, Google Analytics or Business Profile), PeakKR reads only the data needed to show reports, diagnose ranking and traffic changes, and power the features you use, for the sites and clients you connect. PeakKR's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for advertising, don't sell it, and don't allow humans to read it except with your permission, for security, or to comply with the law. You can disconnect Google at any time from the client's settings or your Google account.
Who processes data for us
| Provider | Purpose | Location |
|---|---|---|
| Hosting provider | Servers and database that run PeakKR | United States |
| Stripe | Subscription billing and payments | United States |
| Mailgun (Sinch) | Sending email (notifications, reports, outreach you send) | United States |
| Anthropic | AI features (when your workspace uses Claude) | United States |
| OpenAI | AI features and images (when your workspace uses OpenAI) | United States |
| Search Console, Analytics and Business Profile data you connect; Gemini AI features | United States | |
| DataForSEO | Search rankings, keyword and SERP data for the domains and keywords you track | European Union / United States |
We may also disclose information if the law requires it, to protect rights and safety, or as part of a merger or sale of the business (with notice to you).
Cookies
PeakKR uses cookies needed to sign you in and keep you signed in, protect forms, and remember preferences. Our public website also sets the visit-counting cookie described above. We don't use advertising cookies.
Retention
We keep account and Customer Data while your account is active. After an account closes we delete Customer Data within 90 days, except where the law requires us to keep records (such as billing records). Website visit records are deleted after about 13 months.
Security
Data is encrypted in transit (HTTPS), passwords are hashed, each agency's workspace is kept separate, and access to production systems is limited to the people who need it. No system is perfectly secure; we'll notify affected customers without undue delay if a breach affects their data.
Your choices and rights
You can update your account details in the app and ask us to access, correct, export or delete your personal information by emailing privacy@peakkr.com. Depending on where you live (for example under the GDPR or California law) you may have additional rights, including to object to or restrict processing and to complain to a data protection authority. If you're a client of an agency that uses PeakKR, please contact that agency first; we'll help them respond.
Children
PeakKR is for businesses and isn't directed at children under 16.
Changes
We'll post updates here and, for material changes, email account owners before they take effect.
Contact
PeakKR · privacy@peakkr.com
