Insights

Kera Insights — Privacy Policy

Effective date: 20 August 2026

1. Overview

Kera Insights ("Kera Insights", "the Portal", "we", "us") is an internal operator tool built and used by Kera Partners ("Kera Partners", "Kera"), the trading name of Kaizen Konsulting Pty Ltd (ABN 83 628 249 552), to manage, diagnose, and report on the websites, marketing accounts, and technical infrastructure of Kera Partners' clients. The Portal is not a public-facing product — it is accessed only by authorised Kera Partners staff, and is not indexed by search engines or intended for use by the general public.

This policy explains what information the Portal processes, where that information comes from, how it is used, who it is shared with, and the choices available to Kera staff and Kera's clients. It applies to the Kera Insights portal itself and the backend services that support it.

2. Information We Collect

2.1 Kera staff account information

To operate user accounts for Kera Partners staff, the Portal collects and stores:

• Name, work email address, and assigned role(s) (e.g. Admin, Finance, Contracts, Delivery)
• Authentication credentials — either a hashed password, or single sign-on identity via Microsoft Entra ID (Azure AD), where enabled
• Two-factor authentication (TOTP) enrolment status, where enabled
• Session tokens, login timestamps, and IP address associated with sign-in activity
• A record of actions taken in the Portal (an internal audit log — see §2.4)

2.2 Client business and marketing data

The Portal's core function is to read data from Kera's clients' own connected accounts, using access each client (or Kera, acting under a client engagement) has granted. This includes:

• Google Ads — campaign, spend, click, impression, and conversion data
• Google Analytics 4 — website traffic, engagement, and audience data
• Google Search Console — organic search performance and indexing status
• Google Merchant Center — Shopping product feed status
• Google Tag Manager — published tag configuration
• Billing and accounting records — invoice and billing status, for the purpose of account management (not payment processing)
• Website technical data — installed software components and their versions on a client's website, via limited, site-scoped technical access the client or Kera has configured; no content is modified through this access
• Third-party SEO data — website crawl results, on-page SEO signals, and keyword ranking positions for a client's own site and, where relevant, a nominated competitor's public site
• Support ticketing records — support/issue tickets raised on a client's behalf

None of this data is collected directly from a client's website visitors or customers by the Portal itself. It is read from the connected accounts named above, under the access those accounts' owners have granted.

2.3 Uptime and infrastructure monitoring

For clients enrolled in uptime monitoring, the Portal periodically requests each monitored website's homepage to record whether it is reachable, its response time, and its SSL certificate's expiry date. This is a standard, non-invasive health check equivalent to what any uptime-monitoring service performs.

2.4 Internal audit log

The Portal keeps an internal record of significant actions taken by staff — for example, changes to a customer record, a billing or contract record, or a user's role — including who made the change, when, and (for maintained records such as the plugin licensing register) the old and new value of the field changed. This log exists for accountability and dispute-resolution purposes and is visible only to authorised Kera staff.

3. How We Use Information

Information described in §2 is used to:

• Provide the Portal's core reporting and diagnostic functions to Kera staff
• Generate reports and recommendations for delivery to Kera's clients
• Alert Kera's on-call staff to a client website outage or an expiring SSL certificate, by SMS, where enabled
• Maintain accurate records of Kera's engagements, billing status, and contractual documents
• Secure the Portal and investigate misuse, where necessary

Information is not used for advertising, is not sold, and is not used to build profiles of any individual website visitor or consumer.

4. Google API Services User Data

Kera Insights' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In practice, this means:

• Data obtained through Google APIs (Google Ads, Analytics, Search Console, Merchant Center, Tag Manager) is used only to provide and improve the reporting and diagnostic features described in this policy
• This data is not used to serve advertisements
• This data is not sold, and is not transferred to any third party except as necessary to provide the features described in this policy, to comply with the law, or as part of a merger, acquisition, or sale of assets, with notice to affected clients
• Access to this data within Kera Insights is limited to Kera Partners staff who require it to perform their role

5. Third-Party Service Providers

The Portal is built on, and shares information as necessary with, the following categories of service provider. Each acts as a data processor on Kera Partners' behalf and is bound by its own terms and privacy commitments:

6. Data Sharing and Disclosure

Beyond the service providers listed in §5, information is disclosed only:

• To the relevant client, in the form of the reports, recommendations, and account status Kera Insights is used to produce
• Where required by law, regulation, or a valid legal process
• To protect the rights, property, or safety of Kera Partners, its clients, or others
• In connection with a merger, acquisition, financing, or sale of business assets — with reasonable notice where practicable

Kera Insights does not sell personal information or client data.

7. Data Security

The Portal applies the following safeguards:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Hashed storage of any locally-managed passwords; optional two-factor authentication (TOTP) for staff accounts
• Role-based access control — staff only see the sections and data relevant to their role
• An internal audit log of account and record changes (§2.4)
• Per-site, least-privilege credentials for website technical connections (scoped to one site, not an account-wide login)

8. Data Retention

Kera Insights retains all historical data it collects — findings, audit history, billing and contract records, and the connected-account data described in §2 — rather than deleting it, on the basis that an accurate history of what was found, decided, and delivered has ongoing business and, where relevant, contractual value. There is no scheduled deletion of historical records.

9. Your Rights

Kera Insights is an internal business tool, not a consumer product, and does not collect or hold personal information about the general public or about Kera's clients' website visitors or customers. The only personal information it holds is: (a) Kera staff account information, used to operate logins (§2.1); and (b) business contact details for individuals at Kera's clients, used for account management. If you are a Kera staff member or a client contact and want to access or correct the information held about you, contact us using the details in §13.

10. Cookies and Tracking

Kera Insights is an internal tool, not a public website, and does not use cookies or tracking technologies to monitor visitors. The Portal is configured to instruct search engines not to index or crawl it (robots: noindex, nofollow).

11. Children's Privacy

Kera Insights is a business tool intended for use by adult Kera Partners staff and is not directed at, or knowingly used by, children. It does not knowingly collect personal information from children.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated to Kera Partners staff and, where the change affects how client data is handled, to affected clients. The "Effective date" above reflects the date this version takes effect.

13. Contact Us

Questions about this policy, or requests relating to your information, can be directed to:

support@kerapartners.com