Privacy policy

This policy explains how Oakenio (“we”, “us”, “our”) collects and uses information when you visit oakenio.com, create an account, or use our online-presence tools for local businesses.

Questions, access requests, or deletion requests: hello.oakenio@gmail.com.

It covers:

• People who visit our marketing site or sign up for Oakenio.
• Business owners who connect Google, social, analytics, or website tools.
• Visitors to a customer’s website when that customer turns on Oakenio’s website analytics pixel. In that case the customer is the controller of visitor data and we process it on their behalf.

Account. Name, email address, hashed password if you sign up with email, a profile photo if you add one, and basic Google profile details (name, email, and profile image) if you sign in with Google.

Business profile. Business name, category, phone, city, description, website address, photos you upload, posting preferences, and approval settings.

Connected accounts. When you connect Google Business Profile, Facebook, Instagram, LinkedIn, TikTok, X, YouTube, Google Search Console, or Google Analytics, we receive the identifiers, usernames, and tokens needed to act on those accounts for you. Social connections are made through our publishing partner, Zernio.

Content you create or approve. Posts, drafts, review replies, scheduled times, and related status (draft, pending, published, failed).

Reviews. Public review text, rating, author display name, and your replies, pulled from connected listings so you can manage them in Oakenio.

Website and SEO data. Pagespeed and site-health results for the URL you give us, produced by the Google PageSpeed Insights API; keyword tracking; domain, ranked keyword, and backlink figures from Trackee; Search Console queries, positions, clicks, and impressions if you connect Search Console; optional Google Analytics property data if you connect GA4.

AI search data. The questions we ask assistants on your behalf, what each assistant answered, whether you were named and in what position, the competitors named alongside you, and the pages those answers cite. See section 7 for how this works.

Website visitor analytics (optional). If you install our pixel, we store page path, referrer, a random visitor id, a session id, and user agent. We do not use this to identify a person by name or email.

Billing. Plan, subscription status, and Stripe customer and subscription ids. Card numbers are handled by Stripe, not stored on our servers.

Usage and security. Sign-in timestamps, IP address, and browser user agent on sessions, plus product events needed to run the app (for example, whether a post published).

We use it to:

• Create and secure your account, including password reset emails.
• Run the product: website analytics and site health, your Google Business Profile listing, reviews, social posts, SEO tracking, and AI-search insights.
• Process subscriptions, trials, upgrades, and cancellations through Stripe.
• Email you about your account, billing, and product changes.
• Diagnose faults, prevent abuse, and keep the service reliable.
• Comply with law and respond to valid requests from you or authorities.

We do not sell your personal information, and we do not use it to run third-party ads.

Oakenio’s use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Depending on what you connect, we may access:

• Google sign-in — to create or open your Oakenio account.
• Google Business Profile — to show your listing, publish the posts you approve along with any photos you attach to them, and read and reply to your reviews, only after you connect the account.
• Google Search Console (read-only) — to show search queries, positions, clicks, and impressions for keywords you track.
• Google Analytics — to show visits and top pages when you choose GA4 instead of (or as well as) our pixel.

Google user data is used only to provide and improve these user-facing features. We do not use it for advertising. We do not transfer it to others except to subprocessors needed to run the feature you requested, or if required by law. We do not allow humans to read Google user data unless you ask us to (for example support), it is necessary for security or legal reasons, or the data is aggregated and no longer tied to you.

You can disconnect Google access in Oakenio and in your Google Account permissions.

Security procedures are in place to protect the confidentiality of your data. We use encryption to protect your information, including Google user data and other sensitive data we hold. We take reasonable and appropriate steps to protect it against unauthorized or unlawful access, use, loss, alteration, or disclosure.

• Encryption in transit. Data sent between your browser, Oakenio, and Google is protected with HTTPS/TLS.
• Encryption at rest. Google OAuth access and refresh tokens we store (Search Console and Google Analytics) are encrypted at rest using AES-256-GCM. Passwords are stored as hashes, not in plaintext. Card numbers are handled by Stripe and are not stored on our servers.
• Access controls. Google user data is available only to the signed-in account that connected it. Our staff do not read it unless you ask for support, or it is necessary for security or legal reasons.
• Least privilege and tokens. We request only the Google scopes needed for the feature you use, keep tokens for as long as the connection is active, and revoke or delete them when you disconnect.

No method of transmission or storage is completely secure. If you believe your account has been compromised, contact us at hello.oakenio@gmail.com.

The AI search feature runs through Trackee, an AI-visibility provider. We send Trackee your business name, your website domain, and your trade, and Trackee puts questions a customer might ask — built from your trade and town, such as “the best plumber in Springfield” — to ChatGPT (OpenAI), Claude (Anthropic), Gemini (Google), and Perplexity. It records what each assistant answered, whether you were named, and which pages the answer cited, and we store that so you can read it and compare it over time.

Only business details go to Trackee and the assistants — never your account email, your customers’ details, or anything from your reviews. The questions are public-style searches, not anything private to your account. We do not use AI to write posts or review replies: on Pro those are written by our team. Do not put anything into your business name, trade, or website fields that you would not want processed this way.

Where those laws apply, we process personal data because:

• It is needed to perform our contract with you (run the account and paid plan).
• You have given consent (for example connecting a Google or social account).
• We have a legitimate interest in securing the service, preventing abuse, and understanding how the product is used, in ways that do not override your rights.
• We must comply with a legal obligation.

We share information with service providers who help us operate Oakenio:

• Hosting and infrastructure for the website and database.
• Stripe, for payments and subscriptions.
• Google, for sign-in and the Google products you connect.
• Google PageSpeed Insights, to measure the speed and health of the website address you give us.
• Zernio, to connect and publish to social and Google Business accounts.
• Resend, to send transactional email such as password resets.
• Trackee, for AI search visibility and SEO figures. Trackee in turn puts your business name and domain to ChatGPT, Claude, Gemini, and Perplexity — see section 7.
• Websitero, if you choose to build a website there and connect it back to Oakenio.

Those providers may only use the data to provide their service to us. We may also disclose information if required by law, to protect rights and safety, or as part of a merger or sale of the business, with equivalent protections.

On oakenio.com we use an essential session cookie so you stay signed in. We do not place advertising cookies on our site.

If you install the Oakenio analytics pixel on your own website, it stores random visitor and session ids in that site’s local storage so we can count visits. It is not used to build advertising profiles. You are responsible for telling your visitors about it and collecting any consent your local law requires.

We keep account and business data while your account is open. Session records expire according to our sign-in settings. Billing records are kept as long as tax and accounting rules require. Website analytics events are kept so you can see history in the product. If you close your account we delete or anonymise personal data we hold, except information we must retain for legal reasons.

Depending on where you live, you may ask us to access, correct, delete, or export your personal data, or to restrict or object to certain processing, and to withdraw consent where processing is based on consent. Email hello.oakenio@gmail.com. You may also complain to your local data protection authority.

You can update business details in the app, disconnect channels, and cancel a plan from Billing. To close the account entirely, contact us at the address above.

We and our providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses or the provider’s comparable transfer mechanism.

Oakenio is built for businesses, not for children. We do not knowingly collect personal information from anyone under 16. If you believe we have, contact us and we will delete it.

We may update this policy as the product or the law changes. The “Last updated” date at the top will change. Material changes will be posted on this page; we may also email the address on your account.

Oakenio
hello.oakenio@gmail.com
https://oakenio.com

Related: Terms of service.