Privacy policy

Zakaru EURL, 430 rue de l’Étang, 84100 Orange, France (935 286 203 RCS Avignon), publisher of searkin.com and of the Searkin app (app.searkin.com). No data protection officer has been appointed: write to hello@zakaru.studio with any question.

For the data you import into Searkin about your own clients (contacts, websites, Search Console data), your agency is the data controller and Zakaru acts as a processor, solely to provide the service.

The presentation website has no forms, no audience measurement, no advertising and no cookies. Fonts and images are served from our own servers: your browser does not contact any third-party service.

Like any web server, ours may record technical logs (IP address, browser, requested page, date) to keep the website secure and running, on the basis of our legitimate interest.

Your account

• Email address, first name, last name and, if you add one, a profile photo.
• Password, stored only in irreversibly hashed form (bcrypt).
• If you sign in with Google: your Google identifier, email and name.
• Account creation and last sign-in dates, organisations and roles.

The services you connect

• Search Console and Gmail: the address of the connected Google account and its access tokens, encrypted in the database. Searkin only requests access to Search Console and permission to send emails (it cannot read your inbox).
• WordPress, Payload, SSH, DataForSEO, PageSpeed: the credentials you provide, encrypted in the database.

Your clients’ data

• Client records (company, name, email, phone, notes) and report recipients’ addresses, entered by your agency.
• SEO data of the tracked websites: pages, rankings, clicks, impressions, audits, suggested fixes.

Your IP address is only used to limit abusive sign-in attempts; it is not stored in your account.

• Providing the service (account, audits, suggestions, publishing to your CMSs, reports): performance of the contract.
• Securing access (authentication, rate limiting, CSRF protection): legitimate interest.
• Contacting you about the service (invitations, password resets, account-related messages): performance of the contract.
• Meeting our obligations (accounting and legal): legal obligation.

Your data is never sold, rented or used for advertising. Nothing is published on a website without your approval.

Data is accessible to the Zakaru team and to the members of your organisation, according to their role. It is shared with the following providers, only as far as the service requires:

Searkin also writes the fixes you have approved into the websites you connect (WordPress, Payload). SEO reports are emailed to the recipients you choose.

Under its commercial terms, Anthropic does not use data sent through its API to train its models.

Some providers (Anthropic, Google, Cloudinary) may process data in the United States. These transfers rely on the EU–US Data Privacy Framework adequacy decision (10 July 2023) where the provider is certified, and otherwise on the European Commission’s standard contractual clauses.

• Account and related data: as long as the account is active, then deleted at the end of the contract or on request.
• Sign-in session: 8 hours, renewable for 7 days.
• Invitation links: 7 days; password reset links: 2 hours.
• Claude connector (MCP) access: 1 hour, renewable for 30 days, revocable at any time.
• Automated task history: 30 days; automation log: 180 days.
• Accounting records: 10 years, as required by the French Commercial Code.

Expired tokens are deleted automatically every night.

• Encrypted connections (HTTPS) on the website and the app.
• Hashed passwords (bcrypt); session and reset tokens stored as fingerprints.
• Credentials for connected services (CMSs, Google, SSH, DataForSEO) encrypted in the database.
• Session cookies inaccessible to JavaScript (httpOnly) and restricted to the app.

The searkin.com website uses no cookies. The app only uses cookies that are strictly necessary for it to work, which are exempt from consent: no audience measurement or advertising cookies.

The app also keeps two display preferences in your browser’s local storage: the light or dark theme and the dashboard view mode.

You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to give instructions about what happens to it after your death. You can edit your profile directly in the app.

To exercise your rights or delete your account, write to hello@zakaru.studio. We reply within one month; proof of identity may be requested if in doubt. If your request concerns data entered by an agency using Searkin, we forward it to that agency.

If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr/fr/plaintes), or with your local supervisory authority.

Zakaru EURL, 430 rue de l’Étang, 84100 Orange, France
hello@zakaru.studio · +33 9 63 59 82 93

See also the legal notice. This English version is provided for convenience; in case of discrepancy, the French version prevails.