Privacy Policy
Version 2026-10-19 draft · The legal documents are published in English. The English version governs.
Draft. This document is being reviewed by counsel and is not yet in force. The product has not launched.
This policy explains how Fikrtna Technology handles personal data when you use FIKRTNA SEO or visit this website. For data about your own sites and customers that you process through the Service, we act as your processor under the Data Processing Addendum.
1. Who is responsible
Fikrtna Technology, Dubai, United Arab Emirates. Privacy requests: privacy@fikrtna.com.
2. What we collect and why
| Data | Why | Basis |
|---|---|---|
| Account data: name, email address, password hash, two-factor and passkey credentials, language | To create and secure your account and sign you in | Contract |
| Organisation and billing data: organisation name, billing address, tax identifiers, invoices; card details are held by our payment provider, never by us | To bill you and meet accounting and tax law | Contract, legal obligation |
| Google Search Console data for the properties you connect, obtained through a read-only grant you give and can revoke | To diagnose and report on your site's search performance | Contract; Google data reaches AI features only with your recorded consent |
| Crawl data from the sites you verify, and public data about them from our data vendors (rankings, backlinks, Core Web Vitals) | To find problems, propose and measure changes | Contract |
| Outreach data you enter: contact addresses and names of people at other organisations, and the replies they send to our reply address | To send messages you approve and to honour opt-outs | Your legitimate interest as sender; opt-out and suppression records are kept to honour them |
| Audit and security logs: who did what and when, IP address, request identifiers | To secure the Service and give you an audit trail | Legitimate interest, contract |
| Website visits: server logs with IP address and user agent, kept briefly. No advertising trackers. | To run and protect the website | Legitimate interest |
3. Where data is held
Customer data is held in the European Union by default. Enterprise customers may choose an in-country option in the United Arab Emirates. Our sub-processors, and the countries they operate in, are listed on the sub-processors page. Transfers outside the region are covered by standard contractual clauses or an equivalent safeguard.
4. How long we keep it
- Site and performance data: for your plan's retention period, shown on the pricing page.
- Account data: while your account exists. A deleted organisation's data is purged 30 days after the deletion request, which can be reversed within that period.
- Invoices, usage metering, provider charges and the audit log: for the period accounting law requires, in a form that no longer names deleted organisations' sites.
- Outreach suppression records: permanently, as hashes, so that an opt-out is never forgotten.
5. Who we share it with
Only the sub-processors listed on the sub-processors page, each under a contract that limits them to our instructions, and authorities where the law requires. We do not sell personal data and we do not use it for advertising.
6. AI
Some features send excerpts of your site data to large language models through a gateway we operate. Model vendors are contractually barred from training on that data. On Enterprise, requests are routed with zero data retention. See the AI transparency page.
7. Your rights
Depending on where you are, you may have rights to access, correct, export, restrict or delete your personal data and to object to some processing. Account holders can export their data and delete their organisation from the product. Anyone can write to privacy@fikrtna.com; we answer within 30 days. You may also complain to your data protection authority.
8. People who receive outreach
If you received a message sent through the Service, the sender is the organisation named in it, and it tells you why you were contacted. You can stop further messages by replying "no" or using the unsubscribe link, which works at once and permanently. Replies go to an address we operate and are shown to the sender; we read only the text needed to classify the reply and honour opt-outs.
9. Cookies
See the Cookie Policy. The website uses no advertising or analytics cookies.
10. Changes
Changes are announced in the product and here. The English version governs.