Polaris Privacy Policy

Effective Date: October 20, 2026

1. Introduction

1.1 Who We Are. Polaris is operated by Infinite Creations Pvt. Ltd., a company incorporated in India ("Infinite Creations," "we," "us," or "our"). Polaris is an SEO analytics and optimization platform that helps businesses analyze website search performance, find SEO opportunities and monitor search visibility using data from Google Search Console and other sources. For information about you as a user, such as your account and billing details, we decide how and why it is used. For the website and search data you connect, you decide why it is used and we process it on your behalf, as our Terms of Service and our Data Processing Agreement (available at /data-processing-agreement) explain.

1.2 Scope. This Privacy Policy explains how we collect, use, store, share and protect information when you use the Polaris website, applications and related services (the "Service"). It forms part of our Terms of Service, and words defined there have the same meaning here.

1.3 Consent and Your Choices. When you sign in with Google and use Polaris, you consent to the processing of your personal data as this policy describes. Connecting a Google Search Console property is a separate step, and you choose which properties to connect. Where the law needs specific consent, for example for marketing emails, we ask for it separately. You can withdraw consent at any time as Section 8 explains, although withdrawing may mean we can no longer provide the Service.

2. Information We Collect

2.1 Account Information (Google Sign-In). Polaris uses Google sign-in only. When you sign in, we receive your name, email address, profile picture and Google account identifier from Google. We do not receive or store your Google password, and Polaris has no passwords of its own. You may also give us:

Your company or organization name
Information you send our support team

Polaris is currently free, so we do not collect payment or billing information. If we introduce paid plans, we will update this policy before we start.

2.2 Google Search Console Data. If you connect a Google Search Console property, we access and process the data you authorize through Google's APIs, such as search queries, impressions, clicks, click-through rates, positions, page URLs, country and device dimensions, search appearance, dated performance data and property details. We use it to provide analytics, reporting, monitoring and optimization features. We only access properties you have authorized. Search queries may occasionally contain personal information typed by searchers, and we treat them as part of your data.

2.3 Rules and Configuration Data. We store in our database the rules, topic clusters, categories, filters, saved views and settings you create in Polaris, linked to your account. We use them to apply your preferences to your data and to show your dashboards. [Adjust this list to the items users can actually save.]

2.4 Website and SEO Data. Depending on the features you use, we process website domains, page URLs, SEO metadata, keywords and rankings, keyword cannibalization and content decay information, indexation check results, technical SEO information, URLs you submit, SEO reports and the historical SEO data stored through the Service.

2.5 Third-Party SEO Data (Ahrefs). For some features, Polaris retrieves the Domain Rating of a website from the Ahrefs API, which is public data about websites. This data describes websites, not you. To look it up, we send Ahrefs the domain name being checked and nothing else. We do not send your Search Console data or personal information. Ahrefs handles that under its own privacy policy.

2.6 Usage Data. We collect information about how you use Polaris, such as features used, dashboards viewed or created, filters and analyses run, client portal activity, and sign-in activity.

2.7 Technical and Device Information. We automatically collect your IP address, browser type and version, operating system, device information and identifiers, referring and exit pages, access times, session information, error logs, and performance and diagnostic data.

2.8 Communications. If you contact us, we keep your support requests, emails, feedback and any information you submit through our forms. If you receive our marketing emails, we may record whether you opened them or clicked a link.

2.9 What We Do Not Collect. We do not collect your Google password. We do not collect payment card details. We do not intentionally collect sensitive personal data, and we do not access Search Console properties you have not authorized.

3. How We Use Your Information

3.1 Providing the Service. We use your information to:

Provide and operate Polaris
Connect and process the Search Console data you authorize
Analyze and monitor SEO and search performance and identify opportunities
Provide keyword, URL, cannibalization, content decay and indexation analysis
Apply the rules and settings you save
Provide customer support

3.2 Account Management. We use account information to create and maintain your account, authenticate you through Google, manage your plan, send account notices, and protect your account from unauthorized access.

3.3 Service Improvement. We may use information about how Polaris is used to improve features, develop new ones, diagnose problems, improve performance and reliability, and carry out product analytics. We may use aggregated or de-identified information for analytics and research. We do not use Google user data for these purposes beyond what Section 5 allows.

3.4 Communications. We use your contact information to answer support requests, send service and security notices, send product updates such as change logs, and tell you about changes to the Service. We send marketing messages only where the law permits and, where required, with your consent. You can unsubscribe at any time.

3.5 Security and Legal Compliance. We process information to detect and prevent fraud and abuse, protect the security of Polaris, investigate suspicious activity, enforce our Terms of Service, resolve disputes, comply with law and valid legal requests, and protect our rights, users and the public.

3.6 Basis for Processing. Under Indian law, we process your personal data on your consent, given when you sign in and connect data, and for the legitimate uses the law allows, such as complying with legal obligations, preventing fraud and responding to your requests.

We do not sell your personal information. We do not use Google user data for advertising. We share information only where needed to run Polaris, as described below.

4.1 Service Providers. These providers process information on our behalf under appropriate safeguards:

Purpose	Provider
Sign-in and Search Console API	Google
Public SEO data	Ahrefs
Cloud hosting and storage	DigitalOcean
Payments (when paid plans launch)	To be named before paid plans launch
Product analytics	[ANALYTICS PROVIDER]
Email delivery	Google Workspace

4.2 Google. When you authorize Polaris to connect to Google, we process the information made available through the permissions you grant, to provide the features you request. Your use of Google services is also subject to Google's terms and privacy policy.

4.3 Ahrefs. We send Ahrefs only the domain name needed to look up its Domain Rating, as Section 2.5 describes. We do not send your Google Search Console data or personal information to Ahrefs.

4.4 Team and Client Sharing. Information in a project is visible to the team members your account owner or administrator authorizes. If you share a report or portal with a Client through a link, you choose what is shared, and anyone with the link can view it as you configure it. You can revoke links in the Service.

4.5 AI Features. When we launch AI features, we may send limited inputs to AI service providers to produce outputs for you. They may use that information only to provide the service to us. We do not use your data, including Google user data, to train generalized AI models, and we do not allow our providers to. We will name the providers in this policy before AI features launch.

4.6 Legal Requirements. We may disclose information where reasonably necessary to comply with law, court orders or lawful government requests, to protect the rights, property or safety of Infinite Creations, our users or others, or to investigate fraud, security incidents or breaches of our terms.

4.7 Business Transfers. If Infinite Creations is involved in a merger, acquisition, restructuring, financing or sale of assets, information may be transferred as part of that transaction, subject to law and to the commitments in Section 5.

5. Google User Data and Limited Use

5.1 Our Commitment. Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

5.2 What This Means. For information we receive from Google, including your Search Console data:

We use it only to provide and improve the user-facing features you see in Polaris
We transfer it only as needed to provide or improve those features, to comply with law, or as part of a merger, acquisition or sale of assets after notice to you
We do not use it for advertising, and we do not sell it
We do not use it to develop or train generalized artificial intelligence or machine learning models
Our people do not read it unless you give your agreement, it is needed to investigate abuse or security issues, the law requires it, or it is aggregated and used for internal operations

5.3 Revoking Access. You can disconnect a property in Polaris or remove Polaris's access at any time in your Google Account permissions at myaccount.google.com/permissions. After you do, we stop collecting new data, and we handle data already stored as Section 6 describes.

6. Data Retention and Deletion

6.1 Account Information. We keep account information while your account is active and as needed to provide the Service. After you close your account, we delete or de-identify it within 6 months, except records the law requires us to keep, such as invoices and tax records.

6.2 Search Console and SEO Data. We keep this data while the property is connected, for the history your Plan includes, for up to 6 years. If you disconnect a property, we keep its data for up to 6 months in case you reconnect, and then delete it. We delete it sooner if you ask.

6.3 Rules and Configuration Data. We keep your saved rules and settings while your account is active, and delete them with your account as Section 6.4 describes.

6.4 After Account Closure. For 30 days after you close your account, you may ask us to export your data. We then delete or de-identify it within 6 months, and any backups are overwritten within the same period.

6.5 Deletion Requests. To ask us to delete your account or personal information, email us at the address in Section 14. We act on valid requests unless the law requires us to keep the information, for example for tax, fraud prevention, security or dispute resolution.

6.6 Logs. We keep security and access logs for at least one year, to meet legal requirements and to investigate security issues.

7. Data Security

7.1 Security Measures. We use reasonable technical and organizational measures to protect information from unauthorized access, alteration, disclosure or destruction, including:

Encryption of data in transit
Authentication through Google sign-in and access controls
Restricted internal access to personal information
Separation of each account's data
Security and access logging

We will review and improve these measures as Polaris grows.

7.2 Data Breaches. If a personal data breach affects your information, we will notify you without undue delay and report it to the Data Protection Board of India as the law requires, including a detailed report within 72 hours.

7.3 Third-Party Security. We choose service providers that maintain appropriate security and privacy practices for the services they provide to us.

7.4 No Absolute Guarantee. No method of transmission, storage or electronic security is completely secure, so we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on where you live and the law that applies, you have the following rights.

8.1 Access. You can ask for a summary of the personal data we hold about you and how we process it.

8.2 Correction. You can ask us to correct, complete or update personal data that is inaccurate or incomplete.

8.3 Erasure. You can ask us to erase your personal data, unless we must keep it by law or for the purposes in Section 6.5.

8.4 Withdrawing Consent. Where we rely on your consent, you can withdraw it at any time. Withdrawal does not affect processing done before it.

8.5 Nominating Someone. You can nominate another person to exercise your rights if you die or become unable to act.

8.6 Marketing. You can unsubscribe from marketing and product update emails at any time using the link in the email or by contacting us.

8.7 Exercising Your Rights. Email us at the address in Section 14. We may need to verify your identity first to protect your account.

8.8 Complaints. If you are not satisfied, first contact our Grievance Officer in Section 13. If the issue is not resolved, you may complain to the Data Protection Board of India, as the law provides.

8.9 Users Outside India. Polaris is intended for users in India and is not directed at users in the European Union, the European Economic Area or the United Kingdom. If you use Polaris from outside India, you do so on your own initiative and are responsible for complying with your local laws. We do not sell personal information, and we do not discriminate against anyone for exercising their privacy rights.

9. Cookies and Tracking Technologies

9.1 Types of Cookies. Polaris may use cookies and similar technologies to operate, secure and improve the Service:

Essential cookies keep you signed in and secure and support core features
Preference cookies remember your settings
Analytics cookies help us understand how the Service is used

9.2 Third-Party Technologies. Providers we use, such as Google for sign-in, may set their own cookies or similar technologies for sign-in, security or analytics.

9.3 Controls. You can control cookies in your browser settings. Turning off some cookies may stop parts of Polaris from working, including staying signed in.

10. International Data Transfers

10.1 Where Data Is Processed. Because Polaris uses cloud infrastructure and third-party providers, your information may be processed or stored in India and in other countries where we or our providers operate, such as the United States.

10.2 Safeguards. Where the law requires, we protect personal information that leaves its country of origin, using contractual protections or other recognized mechanisms. We follow any restrictions on transfers that the Government of India notifies.

11. Children's Privacy

Polaris is not intended for anyone under 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected it in breach of the law, we will take reasonable steps to delete it.

12. Changes to This Privacy Policy

12.1 Updates. We may update this policy to reflect changes in Polaris, our data practices, the law, our security practices or our service providers.

12.2 Notice. For a material change, we will give at least 30 days' notice by email or through the Service before it takes effect. A change required by law may take effect sooner.

12.3 Effective Date. An updated policy takes effect on the date shown at the top. If you keep using Polaris after that date, you accept the update, to the extent the law allows. Where a change needs your fresh consent, we will ask for it.

13. Grievance Officer

For questions about how we process your personal data, or to make a complaint, contact our Grievance Officer:

Puneet Gupta

Email: [email protected]

Address: 2nd Floor, 2/16 WHS A Block Kirti Nagar Industrial Area, New Delhi

We acknowledge complaints within 48 hours and aim to resolve them within 30 days.

14. Contact Information

Polaris is operated by Infinite Creations Pvt. Ltd. For privacy questions, requests or concerns, including requests to exercise your rights, contact us: