Privacy Notice

In force from 3 October 2026

This explains what we hold about you and why. It is short, because we deliberately built the tools so that there is very little to hold.

Your working data never reaches us. When you open a spreadsheet, shapefile or any other file in RAKS GIS Tool, that file is read by your own web browser and the analysis runs on your own machine. It is not uploaded, not copied to a server, and not seen by us. We could not produce it if we were asked to.

What we hold is the small amount of information needed to run an account: who you are, and whether your subscription is live.

Who is responsible

Saadat Ayub Khan, trading as RAK, of Muscat, Sultanate of Oman, decides how this information is used. Write to support@rakgeo.com with any question about it.

What we collect

When you registerYour name, your email address, and your organisation if you give one.

When you sign inThe date and time, and a session token stored in your own browser so you are not asked to sign in repeatedly.

When you subscribeWhich plan you are on and whether it is live. Paddle sends us this. We never see your card number.

When you write to usYour message and your email address, so we can reply.

Technical recordsStandard server logs kept by Cloudflare, including IP address and browser type, used to keep the site secure.

What we do not collect

The contents of any file you open in the tools.
The maps, dashboards, analyses or reports you produce.
The coordinates, sites, customers or assets in your data.
Card numbers or bank details.
We do not use advertising trackers and we do not sell or share your information with anyone for marketing.

Why we hold it, and on what basis

To run your accountNeeded to perform the contract between us.

To take and confirm paymentNeeded to perform the contract.

To keep the service secureOur legitimate interest in preventing abuse and account takeover.

To email you about the serviceNeeded to perform the contract — for example, telling you a trial is ending or a price is changing.

To email you about new toolsOnly with your consent, which you can withdraw at any time through the link in the email.

Who else is involved

We use a small number of established providers. Each one only receives what it needs.

SupabaseStores your account record and handles sign-in. Hosted in [YOUR SUPABASE REGION].

CloudflareServes the website and the tools, and protects them from attack.

PaddleTakes payment and is the Merchant of Record for every purchase. Paddle holds your billing details under its own privacy notice.

These providers operate internationally, so your account information may be processed outside Oman. Each is contractually bound to protect it and to use it only on our instructions.

How long we keep it

Account details — while your account is open, and for 12 months after you close it, in case you come back.
Payment and invoice records — kept by Paddle for as long as tax law requires.
Support emails — 24 months.
Server logs — kept by Cloudflare for a short period, typically days.

Keeping it safe

Everything travels over an encrypted connection.
Passwords are stored only as salted hashes. Nobody at RAK can read your password.
Database access is restricted row by row, so one account cannot read another's record.
Because your working data never leaves your machine, a breach of our systems could not expose it.

What you can ask for

Write to support@rakgeo.com from the address on your account and we will respond within 30 days. You can ask us to:

tell you what we hold about you, and give you a copy;
correct anything that is wrong;
delete your account and the details attached to it;
stop sending you anything other than essential service messages.

Deleting your account does not remove invoice records that Paddle must keep by law.

Cookies and similar

We use one kind of browser storage: the token that keeps you signed in. It is set when you sign in and removed when you sign out. There are no advertising or analytics cookies on this site, so there is no consent banner to click through.

Children

The tools are made for professional use and are not directed at anyone under 18. We do not knowingly hold information about children.

Changes

If we change this notice in a way that affects you, we will email the address on your account before the change takes effect. The date at the top always shows the current version.