Privacy Policy

Last updated: 8 August 2026

MRK Audit ("we", "us") is an SEO, GEO & AEO audit tool operated by Mohib Rais Khan and available at audit.mohibraiskhan.com. This policy explains what information we collect, why we collect it, and how it is handled.

1. Information we collect

• Account details — your name and email address, and a password stored only in hashed form. We never store passwords in plain text.
• Audit data — the website URLs you submit for auditing, and the results our crawler and analysis engine produce for them (page content, technical findings, scores, generated fix suggestions and reports).
• Payment information — payments are processed by Stripe. Your card number never touches our servers; we receive only a payment reference, the plan purchased, and billing status.
• Connected services — if you choose to connect Google Search Console, we store the OAuth tokens and the search-performance data needed to show those reports. You can disconnect at any time, which invalidates the tokens.
• Reviews and feedback — if you choose to leave a review, we store the star rating you selected, any written comment you added, and the account it came from (your name and email address). Leaving a review is entirely optional, and the written comment is optional even if you give a rating.
• Technical logs — standard server logs (IP address, browser type, pages requested) kept for security and troubleshooting.
• Local storage — the app keeps working data (such as your recent audit history and plan choice) in your own browser's local storage so the dashboard loads quickly. This data stays on your device.

2. How we use your information

• To run audits you request and show you the results, reports and fix plans.
• To create and manage your account, subscription and billing.
• To email you reports you ask for, receipts, and important service notices.
• To keep the service secure, prevent abuse, and fix problems.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

3. Reviews and testimonials

Reviews are optional, and you can dismiss the request without leaving one. If you do leave a review, we may publish it publicly — for example on this website, on our home or pricing pages, or in marketing material — as a customer testimonial.

When we publish a review we show the star rating, the written comment, and your first name with the initial of your surname (for example, “Marty M.”). We never publish your email address, your username, or the websites you have audited.

If you would prefer your review was not published, or you want it removed after it has been published, email mohibraiskhan@gmail.com and we will take it down from public display and delete it. You do not need to give a reason, and it will not affect your account or your subscription.

We may shorten a published review for space, but we will not change its meaning or edit it to say something you did not say.

4. AI processing

Some features (for example AI-written fix plans and content suggestions) send the relevant page content and audit findings to AI providers (such as Anthropic or Google) to generate the output. Only the data needed for that feature is sent, and it is not used by us to train models.

5. Third-party services we rely on

• Stripe — payment processing (Stripe privacy policy).
• Google APIs — Search Console data, only when you connect it (Google privacy policy). Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
• Hostinger — website hosting infrastructure.
• AI providers — generation of audit fixes and content suggestions, as described above.

6. Data retention

Account and audit data are kept while your account is active. If you delete your account, or ask us to, we delete your account record and stored audit data within 30 days, except for minimal records we must keep for legal, billing or security reasons.

7. Your rights

You can ask us at any time to access, correct, export or delete the personal data we hold about you. Email mohibraiskhan@gmail.com and we will respond within 30 days. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA — we honour these requests regardless of location.

8. Security

All traffic to the service is encrypted with TLS (HTTPS). Passwords are hashed, secrets and databases are blocked from public access at the server level, and payment details are handled entirely by Stripe.

9. Children

The service is intended for business use and not directed at children under 16. We do not knowingly collect data from children.

10. Changes to this policy

If we make material changes we will update this page and change the date above. Significant changes affecting account holders will also be announced by email or in-app notice.