Privacy Policy

The data controller for personal data processed in connection with your use of the Analiz service is:

СислеЛабс ООД (SisleLabs Ltd)
ул. Десета, 4, с. Звъничево, п.к. 4415, България
EIK: 208739066 | VAT: BG208739066
Email: support@analiz.dev

2.1 Account Data

When you create an account, we collect:

• Email address
• Password (hashed; we never store plaintext passwords)
• Name (optional, if provided)
• Account creation date and last login timestamp

2.2 Billing Data

Billing is handled by Stripe, Inc. We do not store full card numbers or sensitive payment data. We retain:

• Stripe customer ID
• Subscription status and plan
• Invoice history (required for tax and accounting purposes)
• Billing address (for VAT purposes)

2.3 Usage and Technical Data

When you use the dashboard, we collect standard server logs including IP addresses, browser type, and pages visited within our application. These logs are used for security monitoring and are retained for 90 days.

2.4 Analytics Data (Your Websites)

When your website visitors are tracked by our snippet, we collect anonymized, aggregate behavioral data: page URLs, referrers, event names, session duration, and device/browser category. We do not collect or store raw IP addresses, use cookies, or create cross-site profiles of your visitors.

We process your personal data under the following legal bases (GDPR Art. 6):

• Contract performance (Art. 6(1)(b)): Account data and billing data processed to provide the Service under your subscription agreement.
• Legal obligation (Art. 6(1)(c)): Invoice and billing records retained to comply with Bulgarian and EU accounting laws.
• Legitimate interests (Art. 6(1)(f)): Server logs and usage data retained for security monitoring and fraud prevention.
• Consent (Art. 6(1)(a)): Where you have opted in to marketing communications.

We share data with the following sub-processors:

We do not sell your personal data to third parties and do not use your data for advertising.

• Account data: Retained until you delete your account, then permanently deleted within 30 days.
• Billing records and invoices: Retained for 10 years as required by Bulgarian accounting law (ЗСч).
• Server/security logs: Retained for 90 days.
• Analytics event data (your visitors): Retained for the duration of your subscription. Deleted within 30 days of account termination.

If you are located in the European Economic Area, you have the following rights:

• Right of access (Art. 15): Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate data.
• Right to erasure (Art. 17): Request deletion of your personal data (“right to be forgotten”).
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to object (Art. 21): Object to processing based on legitimate interests.
• Right to restrict processing (Art. 18): Request that we limit how we use your data.

To exercise any of these rights, email support@analiz.dev. We will respond within 30 days. You also have the right to lodge a complaint with the Bulgarian data protection authority:

Комисия за защита на личните данни (КЗЛД)
2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
cpdp.bg

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, or disclose.
• The right to request deletion of your personal information.
• The right to opt out of the sale of personal information. We do not sell personal information.
• The right to non-discrimination for exercising your rights.

To exercise your CCPA rights, email support@analiz.dev.

All analytics and account data is stored on servers in Germany (EU) operated by Hetzner Online GmbH. This data does not leave the EU.

Billing data is processed by Stripe, Inc., which is based in the United States. This transfer is covered by Standard Contractual Clauses (SCCs) approved by the European Commission, and Stripe participates in the EU-US Data Privacy Framework.

Analiz itself does not use cookies to track visitors on your website. Our tracking snippet is cookie-free by design. However, our own dashboard application uses essential session cookies for authentication, and Stripe sets cookies during the payment flow.

See our Cookie Policy for details.

The Service is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us at support@analiz.dev and we will delete it.

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days’ notice by email before the changes take effect. The updated policy will always be available at analiz.dev/privacy.

For privacy-related questions or to exercise your rights: support@analiz.dev