Nakoa AI LLC ("Nakoa," "we," "us," or "our") operates the Nakoa review-management platform available at nakoa.ai and app.nakoa.ai (the "Service"). This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices you have. By using the Service, you agree to the practices described here.
1. Who We Are
Nakoa AI LLC is a company registered in the State of Hawaii, United States. We provide software that helps local businesses monitor and respond to their online customer reviews, including reviews on their Google Business Profile.
2. Information We Collect
a. Information you provide directly.
- Account information: your name, email address, password, and business name when you create an account.
- Business details: business type, location, time zone, response preferences, and other settings you enter to configure the Service.
- Payment information: when you subscribe to a paid plan, payment is processed by our third-party payment processor (Stripe). We do not store your full card number; we retain limited billing details such as subscription status and the last four digits of your card as provided by the processor.
- Communications: messages you send to our support team.
b. Information from connected third-party services.
When you connect a third-party account (such as your Google Business Profile) to the Service, we access information from that service on your behalf and with your authorization, including:
- Your business locations and profile details.
- Customer reviews, ratings, and review text.
- Responses you or we post to those reviews.
We access this information only after you grant permission through the third party's authorization process (for example, Google OAuth), and only to provide the features you have requested.
c. Information collected automatically.
- Usage data: how you interact with the Service, features used, and timestamps.
- Device and log data: IP address, browser type, and similar technical information.
- Cookies and similar technologies used to keep you logged in and to operate the Service. We do not use the Service to serve third-party advertising.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service.
- Monitor your connected review platforms and notify you of new reviews.
- Generate AI-assisted draft responses and review insights.
- Post responses to your reviews when you direct us to (or, where you enable automation, according to the rules you configure).
- Process payments and manage your subscription.
- Communicate with you about your account, security, and Service updates.
- Detect, prevent, and address technical issues, fraud, or abuse.
- Comply with legal obligations.
We use AI models (including third-party AI providers) to generate draft responses and insights from your review data. Review text and related context are sent to these providers solely to produce that output for you.
4. Google User Data — Limited Use
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We access your Google Business Profile data only to provide and improve the review-management features you have requested.
- We do not sell Google user data.
- We do not use Google user data for advertising.
- We do not transfer Google user data to third parties except (i) as necessary to provide or improve the Service (for example, to the AI provider that generates your draft responses, and to our hosting and infrastructure providers), (ii) to comply with applicable law, or (iii) as part of a merger, acquisition, or sale of assets with notice to you.
- We do not allow humans to read your Google user data except (i) with your affirmative consent for specific data, (ii) as necessary for security purposes (such as investigating abuse), (iii) to comply with applicable law, or (iv) where the data has been aggregated and anonymized.
5. How We Share Information
We do not sell your personal information. We share information only as follows:
- Service providers: with vendors who perform services on our behalf — hosting and database infrastructure, payment processing, email delivery, and AI processing — under obligations to protect the data and use it only to provide their services to us.
- Legal and safety: when required by law, regulation, legal process, or to protect the rights, property, or safety of Nakoa, our users, or the public.
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets, with notice to you.
- With your direction: when you instruct us to post content (such as a review response) to a connected platform.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal information within a commercially reasonable period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements. You may request deletion at any time (see Section 8).
7. Security
We use reasonable administrative, technical, and organizational measures to protect your information, including access controls, encryption in transit, and tenant isolation so that one customer cannot access another's data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your Choices and Rights
- Access and correction: you can view and update most account information within the Service.
- Disconnect third-party accounts: you can disconnect a connected platform (such as Google) at any time in your settings, which revokes our ongoing access to that platform's data.
- Deletion: you can delete your account, or request deletion of your personal information, by using the in-app account deletion feature or by emailing privacy@nakoa.ai.
- Marketing communications: you can opt out of non-essential emails using the unsubscribe link.
Depending on where you live, you may have additional rights under applicable laws (such as the California Consumer Privacy Act or the EU/UK GDPR), including rights to access, correct, delete, or port your data, and to object to or restrict certain processing. To exercise these rights, contact privacy@nakoa.ai. We will not discriminate against you for exercising them.
9. International Users
We are based in the United States and process information there. If you access the Service from outside the United States, you understand your information will be transferred to and processed in the United States.
10. Children's Privacy
The Service is intended for businesses and is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact privacy@nakoa.ai and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you through the Service or by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
12. Contact Us
Nakoa AI LLC
Honolulu, Hawaii, United States
Email: privacy@nakoa.ai