Privacy policy

Who we are

Nikar measures how businesses in Israel appear in the answers of artificial intelligence engines. For any question about privacy, and to exercise any of the rights below: [email protected].

What we collect, and why

When you run a free check:

• Email address — required. A check cannot be run without it. It is used to send you a copy of the report, and to identify your checks if you open an account.
• The business name, the industry, and — if you provided them — city and website address. These are sent to the answer engines as part of the questions, because that is what the measurement does.
• The IP address the request was sent from. It is kept in the clear for 30 days in order to investigate abuse, and is then deleted automatically.
• A one-way hash of the IP address, with a secret salt. It is kept permanently and is used solely to limit the number of checks per day. It does not allow the address to be recovered.

If you open an account:

• User identity is managed at Clerk. We store a user id, an email address and a display name.
• The brands, the checks and the reports you created.

If you bought a pack: the account is created from the email address you gave Paddle at payment. From Paddle we receive an email address, customer and transaction ids, and a country. Card details stay at Paddle and do not reach us.

If you left details for early sign-up in the past: early sign-up closed on 19.10.2026. Details given then (an email address, and a phone number if you chose to give one) are kept and are not used for marketing mail. You can ask for them to be deleted at any time.

When you browse the site and in emails:

• Site usage data, including IP address, is collected by PostHog.
• Opens and clicks in the emails we send are measured by Resend.

Who the information is passed to

We do not sell information and we do not pass it to advertisers. It is passed to the providers that actually run the service:

• AI engine providers: OpenAI, Google, Anthropic, xAI and Perplexity — only business name, field and city, never email or payment details.
• Free check: one of OpenAI, Google or xAI. 3-pack: OpenAI, Google and Anthropic. The 5-pack adds xAI and Perplexity. Search: OpenAI, Google and xAI.
• Cloudflare — the IP address is sent to verify that you are not a bot, before the check begins.
• Resend — the email address and the content of the message, in order to send you the report.
• PostHog — site usage data, including IP.
• Clerk — user identity, for anyone who opens an account, and also authentication and API keys for machine access.
• Vercel, Fly.io and Neon — running and storing the service and the database.
• Paddle (Merchant of Record) receives payment details and buyer identity in order to charge and invoice. The customer's tax document is issued by Paddle — not by an Israeli business.
• Morning and Stripe are not used.

In addition, information will be handed over if we are required to do so by law.

How long the information is kept

• IP address in the clear — 30 days, and then it is deleted automatically.
• The IP hash — permanently. It does not identify you.
• Checks, reports and the business details — for as long as the account exists, or until you ask us to delete them.
• Email address — until you ask us to delete it or remove yourself from the list.
• Early sign-up details given up to 19.10.2026, including a phone number: until you ask us to delete them.
• Accounting documents — kept for the period Israeli law requires, including after a deletion request.

Your reports

Every report sits at a unique address that is hard to guess. Anyone who has the link can see the report — so do not share it with anyone you did not mean to. The link does not contain your email address, and whoever receives it cannot see it either.

If a report about your business has been published and you want it removed — write to [email protected] and we will remove it, existing reports included.

Your rights

Under the Protection of Privacy Law, 5741-1981 (חוק הגנת הפרטיות התשמ״א-1981), you have the right to:

• Review the information we hold about you.
• Ask us to correct information that is wrong.
• Ask us to delete the information, apart from what we are required by law to keep.
• Remove yourself from every mailing. Every email has an unsubscribe link, and it also works with a single click from inside your mail client.

For any request: [email protected]. We respond within the periods set by Israel's Privacy Protection Law.

Changes

If we change this policy, we will update the date at the top of the page. A material change — collecting a new type of information, for example — will also be sent by email to anyone who signed up.

One-time engine pack

When buying an engine pack in this experiment:

• Paddle (Merchant of Record) receives payment details and buyer identity in order to charge and invoice.
• The tax document for the customer is issued by Paddle — not by an Israeli business.
• Morning and Stripe are not used on this path in the experiment.
• Additional engine providers (when a key is present): Anthropic — business name / industry / city are sent as part of the questions.

MCP search pack

When you buy or use an MCP search pack:

• Paddle (Merchant of Record) receives payment details and buyer identity to charge and invoice.
• Query content (question, optional city/vertical, business name used in prompts) is sent to OpenAI, Google and xAI to produce answers and the Nikar summary.
• Clerk holds authentication and API keys for machine access.
• We do not sell personal data to advertisers.
• Accounting / transaction ids are retained as required by law and MoR policy.
• Morning and Stripe are not used on this path.