Privacy Policy
Effective date: April 7, 2026
1. Who We Are
NameKarat is a brand validation platform operated by Conduit488 (“we,” “us,” “our”). Our website is located at namekarat.com.
2. Information We Collect
Account information
When you create an account we collect your email address and, if you sign in with Google, your name and profile picture. Authentication is handled by Supabase Auth.
Brand validation inputs
When you submit a brand name for validation we collect the brand name, your business description, and target markets. This data is used solely to generate your report.
Payment information
Payments are processed by Stripe. We never see or store your full credit card number. Stripe provides us with a customer ID, payment status, and the last four digits of your card for receipt purposes.
Usage data & analytics
We use Google Analytics 4 with Consent Mode v2. No cookies are placed and no personally identifiable data is sent to Google until you explicitly accept analytics cookies via our consent banner. If you decline, Google Analytics operates in cookieless mode and only provides aggregate, modeled data.
3. How We Use Your Information
- Generate brand validation reports you request.
- Process payments and maintain your purchase history.
- Send transactional emails (report ready, payment receipt).
- Improve the product through aggregated, anonymized usage analytics.
- Prevent abuse and enforce rate limits.
We do not sell, rent, or share your personal information with third parties for their marketing purposes.
4. Third-Party Services
We use the following third-party services that may process data:
- Supabase — authentication and database hosting.
- Stripe — payment processing.
- Anthropic (Claude API) — AI-powered analysis. Brand names and business descriptions are sent to Anthropic's API for report generation. Anthropic does not use this data to train models.
- Google Analytics 4 — website analytics (subject to your consent).
- Upstash Redis — rate limiting (stores anonymized request counts only).
- Resend — transactional email delivery.
- Vercel — hosting and deployment.
5. Cookies & Consent
On your first visit we show a cookie consent banner. You may accept or decline analytics cookies at any time. Your choice is stored in your browser's local storage. We use Google Consent Mode v2 to ensure no tracking cookies are set until you give explicit consent.
Essential cookies (authentication session) are always active as they are necessary for the service to function.
6. Data Retention
- Reports — stored indefinitely so you can access them at any time.
- Account data — retained until you delete your account.
- Payment records — retained as required by applicable tax and accounting laws.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Withdraw consent for analytics cookies at any time.
- Export your data in a portable format.
To exercise any of these rights, email us at privacy@conduit488.ai.
8. Data Security
We protect your data with HTTPS encryption in transit, row-level security on our database, and environment-variable-based secret management. API keys are never exposed to client-side code.
9. Children's Privacy
NameKarat is not intended for users under 16 years of age. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this policy from time to time. We will notify registered users of material changes via email. The “effective date” at the top reflects the most recent revision.
11. Contact Us
If you have questions about this privacy policy, contact us at privacy@conduit488.ai.