Privacy Policy
Last updated: May 2025
The short version:Peakfai is built by the Inqodo team. We collect the minimum data needed to run the service. We don't sell your data. We don't share it with advertisers. This policy explains exactly what we collect, why, and your rights.
1. Who We Are
Peakfai is an AI-powered SEO content platform operated by Inqodo("we," "us," or "our"). When you use Peakfai ("the Service" or "Platform"), you are agreeing to the practices described in this Privacy Policy.
For privacy enquiries, contact us at: privacy@peakfai.com
2. Information We Collect
2.1 Account Information
When you create a Peakfai account, we collect:
- Email address
- Password (hashed using bcrypt — we never see your plaintext password)
- Plan and subscription details
2.2 Project & Website Data
To provide the core service, we store:
- Your website URL(s)
- WordPress connection credentials (URL, username, app password — stored encrypted at rest)
- Keywords you save or research
- Blog posts and drafts generated through the platform
- Social media posts created or queued
- Website scan results (AI-generated analysis of your website content)
- Brand voice settings and preferences
2.3 Usage Data
We automatically collect technical usage data including:
- Feature usage (which tools you use and how often)
- Quota consumption (posts published, keywords researched, AI generations used)
- Browser type and version
- Device type and operating system
- IP address (for security and fraud prevention)
- Pages visited within the platform
- Error logs for debugging
2.4 Third-Party Connections
When you connect third-party services, we store tokens or credentials needed for those integrations:
- Google Search Console: OAuth access token to read your search performance data
- WordPress: Application password for publishing posts
- LinkedIn & X (Twitter): OAuth tokens for social media posting (when connected)
You can revoke these connections at any time from your settings.
2.5 Communications
If you contact us via email or support, we retain those communications to resolve your enquiry and improve the service.
3. How We Use Your Information
We use your data solely to operate and improve Peakfai:
- Service delivery: Generating blog posts, publishing to WordPress, researching keywords, posting to social media on your behalf
- AI processing: Your website content and keywords are sent to AI APIs (see Section 4) to generate content in your brand voice
- Analytics: Understanding how features are used to improve the platform
- Security: Detecting and preventing fraud, abuse, or unauthorized access
- Support: Responding to your enquiries and resolving issues
- Billing: Processing subscription payments and managing your plan
We do not: sell your data, use your content to train AI models, show you ads, or share your information with third parties for marketing purposes.
4. Third-Party Services We Use
To operate Peakfai, we work with the following trusted providers. Each has their own privacy policy:
Supabase
Database and authentication — stores your account data, keywords, blog posts, and settings
OpenRouter / OpenAI / Anthropic
AI content generation — your website content and keyword prompts are sent to generate blog posts and social content. These providers do not use your data to train their models under our agreements
Search Console integration — read-only access to your GSC data when you connect your Google account
Reddit (public API)
Reddit Intelligence feature — we query Reddit's public API to find relevant threads. No authentication or personal Reddit data is collected
Trigger.dev
Background job processing — used to schedule and run automated blog posting and social media jobs
Sentry
Error tracking — captures application errors to help us debug and improve the platform. Error reports may contain page URLs and anonymised context
Google Analytics / Microsoft Clarity
Landing page analytics — tracks page views and visitor behaviour on peakfai.com (not within the app). You can opt out via your browser settings
5. Data Storage & Security
Your data is stored in Supabase-managed databases hosted on secure cloud infrastructure. All data is encrypted at rest and in transit (TLS 1.2+). WordPress credentials are stored with additional encryption.
We use row-level security (RLS) to ensure your data is only accessible by your account. No employee can access your content without explicit authorisation for support purposes.
While we take security seriously and follow industry best practices, no system is 100% secure. We will notify affected users promptly in the event of a data breach affecting their personal information.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide the service:
- Active accounts: Data retained for the lifetime of your account
- Deleted accounts: Data deleted within 30 days of account deletion
- Billing records: Retained for 7 years as required by law
- Support communications: Retained for up to 2 years
You can request deletion of your data at any time (see Section 8).
7. Cookies
We use cookies to:
- Authentication: Keep you logged in securely (essential)
- Preferences: Remember settings like sidebar state (essential)
- Analytics: Google Analytics and Microsoft Clarity on our public landing page (opt-out available via browser settings)
We do not use tracking or advertising cookies. You can clear cookies at any time via your browser settings, though this will log you out.
8. Your Rights
Depending on your location, you have the following rights over your data:
- Access: Request a copy of all data we hold about you
- Correction: Ask us to correct inaccurate data
- Deletion: Request deletion of your account and all associated data
- Data portability: Export your keywords, blog drafts, and settings
- Objection: Object to processing of your data in certain circumstances
- Withdrawal of consent: Revoke third-party integrations at any time from Settings
To exercise any of these rights, email privacy@peakfai.com. We will respond within 30 days.
If you are in the EU, you have the right to lodge a complaint with your local Data Protection Authority.
9. Children's Privacy
Peakfai is intended for users aged 18 and over. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with their information, please contact us immediately and we will delete it.
10. International Data Transfers
Peakfai is operated from the United Kingdom and serves users globally. Your data may be processed by our third-party providers in various countries including the United States. We ensure appropriate safeguards are in place (such as Standard Contractual Clauses) for any transfers outside the UK/EEA.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and notify you by email if the changes are significant. Continued use of Peakfai after changes constitutes acceptance of the updated policy.
12. Contact Us
For any privacy-related questions or to exercise your rights: