Privacy Policy

Kaymak (“we”, “us”) is an AI-visibility service at kaymak.app. You tell us about a business you own or manage; we ask public AI answer engines about it and show you the results, along with suggestions for improving how often the business is recommended.

Account data. Your email address and authentication credentials, managed by our authentication provider. We never see or store your password in plain text.

Workspace data. The business names, website domains, categories, tracked questions, and competitor names you add.

Generated data. AI-engine responses, visibility scores, backlink statistics, and optimization tips we produce for your workspace.

Billing data. Payments are processed by Creem, our merchant of record. We store your subscription status and plan — never your card number.

Technical data. Standard server logs (IP address, browser type, pages visited) used for security and debugging.

Only to operate the service: running your tracked queries against AI engines, generating your reports and tips, sending you the emails you signed up for (reports, account notices), billing, and keeping the service secure. We do not sell your data, and we do not use your data to advertise to you or anyone else.

Only the subprocessors needed to run kaymak:

• Supabase — database & authentication hosting
• Vercel — application hosting
• Anthropic — AI analysis of query results and suggestion generation
• DataForSEO — AI-engine result and backlink data collection
• Creem — payment processing (merchant of record)
• Meta — advertising measurement via the Meta Pixel (page-visit events only)

Each receives only what it needs for its function. We may also disclose data if required by law.

All traffic is encrypted in transit (TLS). Data is stored in access-controlled databases with row-level security, so each account can only reach its own workspaces. Secrets and API credentials are stored in managed, encrypted configuration — never in code. Access to production systems is limited to the operator of the service.

If we ever become aware of a breach affecting your personal data, we will notify you at your account email without undue delay.

Essential cookies keep you logged in and remember your selected workspace.

We also use the Meta (Facebook) Pixel on our public pages to measure whether our advertising works — it sets a cookie and reports page visits to Meta. See Meta’s privacy policy for how Meta processes this data. Standard ad blockers and browser tracking protection prevent it, and the service works fully without it.

We keep your data while your account is active. Delete a business and its tracked data goes with it; to delete your entire account and all associated data, email hello@kaymak.app and we will complete the deletion within 30 days.

You can request a copy of the data we hold about you, ask us to correct it, or ask us to delete it — email hello@kaymak.app. If you are in the EEA/UK, these include your GDPR rights (access, rectification, erasure, portability, objection); if you are a California resident, your CCPA rights. We do not discriminate against you for exercising them.

Kaymak is a business tool and is not directed at children under 16. We do not knowingly collect data from them.

If we materially change this policy, we will update the date above and notify active accounts by email before the change takes effect.