Merqora
← Back

Privacy Policy

Effective Date: October 30, 2026 · Domain: https://merqora.space

Merqora (“we”, “our”, or “us”) operates the web application located at https://merqora.space. This Privacy Policy explains what information we collect, how we use and protect Google user data, and how you can manage or delete your information.

1. Information We Collect (Including Google User Data)

When you sign in to Merqora using Google Sign-In (Google OAuth 2.0), we request access only to basic, non-sensitive authentication scopes (openid, email, and profile). Specifically, we collect:

  • Google Account Email Address: Used as your unique account identifier and for transactional account communication.
  • Basic Profile Information: Your display name and profile avatar URL provided by Google, used solely to display your identity inside the application header.
  • Application Workspace Data: Business search queries, saved lead lists, user notes, and exported lead packs that you create while using Merqora.

We do not request access to your Gmail messages, Google Drive files, Google Contacts, Google Calendar, or any other restricted or sensitive Google scopes.

2. How We Use Google User Data

Information received from Google Sign-In is used strictly for the following purposes:

  • Creating and authenticating your user account and session on Merqora.
  • Associating your private workspace, saved leads, and monthly search quota with your authenticated identity.
  • Providing customer support and responding to billing or account inquiries initiated by you.

We do not use Google user data for serving advertisements, retargeting, or training artificial intelligence or machine learning models.

3. Google API Services User Data Policy (Limited Use Disclosure)

Merqora's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Data Sharing and Third-Party Transfers

We do not sell, rent, lease, or trade your personal information or Google user data to any third party. We only share data with infrastructure sub-processors strictly required to host and operate the application:

  • Supabase Inc.: Provides encrypted PostgreSQL database hosting and OAuth session management.
  • Google Cloud Platform (Gemini API): Used to analyze publicly available business website signals (such as SEO tags and tech stacks). Your personal Google account data is never sent to AI models.

5. Data Storage and Security

All data transmitted between your browser and Merqora is encrypted in transit using HTTPS / TLS 1.2+. Account records and workspace data are stored in encrypted databases with strict multi-tenant organization isolation so that no other user can access your workspace.

6. Cookies and Session Management

Merqora uses strictly necessary, HTTP-only authentication cookies to keep you signed in across page reloads. We do not use third-party advertising or cross-site tracking cookies.

7. Data Retention, Revoking Access, and Account Deletion

We retain your account information for as long as your account remains active. You have full control over your data:

  • Revoke Google OAuth Access: You can revoke Merqora's access to your Google account at any time from your Google Account Security Settings.
  • Delete Workspace Data: You can delete individual leads, folders, or saved packs directly inside the Merqora dashboard at any time.
  • Complete Account Deletion: To permanently delete your Merqora account and all associated Google user data and workspace records, email hello@rahulthapliyal.com from your registered email address. All data will be permanently purged within 48 hours.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with an updated effective date.

9. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us at: hello@rahulthapliyal.com.