Privacy at Okapi Digital

We collect the minimum we need to do our job: the URL you submit to the free audit, the contact info you give us, and (only if you accept the cookie banner) standard Google Analytics measurements. We never sell your data, never share it with advertisers, and you can ask us to delete everything we have on you at any time by emailing cat@okapidigital.ca.

Okapi Digital is a paid media and creative agency operated by Catherine Amaral, based in Ontario, Canada. The site you're reading lives at okapidigital.ca and is the only place we run consumer data through. For privacy questions or requests, reach cat@okapidigital.ca.

The free site audit (above the fold)

When you drop a URL into the audit bar, our server fetches that URL (plus its robots.txt, sitemap, and llms.txt) and scores its SEO, AEO, and GEO setup. We store the URL you submitted, the resulting scores, and the technical signals we found so a strategist can follow up. We do not store the page contents of the site you submit.

The audit opt-in (“Want our take?”)

If you choose to add your name and email after seeing your audit results, we store those alongside your audit so we can email you a short strategist read. You can ask us to delete this any time.

The contact form

When you submit the contact form, we store the name, company, email, optional budget, message, and which engagement option (if any) you were looking at. We use this only to reply to you and to plan the work we'd propose.

Analytics and ad-measurement cookies (only if you accept)

If you click Accept All on the cookie banner, your browser loads two third-party measurement scripts:

• Google Analytics 4 — sets a first-party cookie (typically _ga) so we can see aggregate page views and which sections of the site visitors actually use.
• OpenAI ad pixel (oaiq) — a measurement pixel from OpenAI Ad Manager that lets us see whether an Okapi ad you saw on an OpenAI-served surface actually drove you to this site. It uses cookies/local storage for attribution. No personal data about you is collected; we only see aggregate ad performance.

If you click Decline All, neither script loads and no analytics or ad-attribution cookie is set. The site works identically either way.

Beyond those two, we do not use Meta Pixel, Google Ads tags, LinkedIn Insight Tag, or any other third-party tracking.

• To run the free audit you requested.
• To reply to your contact form or audit opt-in.
• To understand which parts of this site help visitors and which ones don't (only if you accepted the cookie banner).
• To meet our legal obligations under PIPEDA (Canada's personal information protection law) and CASL (Canada's anti-spam legislation).

We don't use your information for any other purpose without your explicit consent, and we never sell it.

The site itself is hosted on Vercel (United States). Our database lives on Railway (United States). Analytics is Google Analytics 4 (international). Ad-attribution measurement is the OpenAI ad pixel (OpenAI Ad Manager, international) — only if you accepted the cookie banner. Email is Google Workspace (international). Our AI assistants run on Bonito AI and use models from Groq and OpenAI; we send only the audit signals and competitor research prompts — no identifying information about you.

Each of these providers is bound by their own privacy obligations and their own data-processing terms with us. None of them get to use your data for their own marketing.

If you receive an email from us that you didn't ask for, we send it only to business email addresses that are publicly published on the business's own website — which qualifies as implied consent under CASL. Every cold email we send includes a one-line unsubscribe option and our real sender identity. Reply with “unsubscribe” and we'll remove you from any future contact list immediately.

• Audit submissions without opt-in: kept for up to 12 months, then deleted.
• Audit opt-ins, contact-form inquiries: kept until our working relationship ends, plus up to 24 months for our own records (or sooner if you ask us to delete).
• Analytics: Google Analytics 4 default retention (14 months); aggregate data only.

Under PIPEDA you have the right to know what we have on you, to ask us to correct it, and to ask us to delete it. Email cat@okapidigital.ca and we'll respond within 30 days.

If you're in the European Economic Area, the UK, or California, you have similar rights under GDPR/UK GDPR/CCPA — same email address works.

Connections to this site are encrypted with TLS. Our database is access-controlled and only reachable from our application servers. Our admin panel is gated by email + password and signed-cookie sessions. We'll never ask you for a password by email.

We'll update the date at the top of this page when we change anything material. For substantive changes that affect data we already hold, we'll email anyone whose data is involved.

Questions, corrections, deletion requests: cat@okapidigital.ca. We reply within one business day.