Privacy policy
This policy explains how SEO NINJA SOFTWARES (“we”, “us”), which operates GoTrace at gotrace.site, handles personal data. It covers two different groups of people: our customers, who hold an account, and the visitors of our customers' websites, whose visits are measured by our analytics script.
1. Who is responsible
For account data (section 2), we decide how the data is used and are responsible for it.
For analytics data collected on a customer's website (section 3), the customer decides to measure their website and how, and we process that data on their behalf and only on their instructions. If you visited a website that uses GoTrace and have a question about your data, please contact that website first. We'll help them answer you.
2. Account holders
What we collect
- Your name and email address, and a hashed password, or your Google account identifier if you sign in with Google.
- Your organisation, team members and the websites you add.
- Billing details you enter for invoices, your chosen plan, and payment references for the orders you place.
- Messages you send us, including support tickets about payments.
- Security records: login attempts and an audit log of account changes. IP addresses in these records are stored only as a keyed hash.
Why we use it
- To provide the service you signed up for, including your account, trial and plan (performance of a contract).
- To send service emails: email verification, password resets, payment confirmations and renewal reminders (performance of a contract).
- To keep accounts and the service secure and prevent abuse (legitimate interests).
- To keep invoices and payment records as required by tax and accounting law (legal obligation).
We don't sell your data, and we don't use it for advertising.
3. Visitors of our customers' websites
Our analytics script is designed to work without identifying anyone. It records page addresses (with query strings removed), referrer domains, campaign tags, device type, browser, screen size, time on page, scroll depth and interactions such as link clicks or that a form was submitted. It never records what is typed into forms.
- IP addresses are used briefly in memory to estimate the country (if the website enables it), to limit abuse and, in cookie-free mode, to compute a daily anonymous count. They are never stored.
- Identifiers: unless the website uses cookie-free mode, a random visitor ID is kept in the browser's local storage. On our servers it is hashed per website, so it can't be used to follow anyone across sites.
- Do Not Track and Global Privacy Control signals are respected by default.
- Session recordings, if a website enables them, capture interactions and, in visual mode, the page layout with text masked by default. Typed values are always masked.
The details are on our privacy by design page.
4. Service providers
We use a small number of providers to run the service. They process data only on our instructions.
| Provider | Purpose | Data |
|---|---|---|
| Hetzner (Germany) | Server hosting and database | All service data |
| Cloudflare | Network delivery and protection | Requests passing through, including IP addresses in transit |
| Brevo | Sending service emails | Your email address and the email content |
| Cerebras | Running the AI models for briefings and the analyst | Aggregated statistics and page paths or titles; never IP addresses or visitor IDs |
| “Sign in with Google”, only if you use it | Your Google account identifier, name and email |
Some providers may process data outside your country. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.
5. How long we keep data
- Account data: while your account is open. When you close it, we delete it, except for records we must keep by law, such as invoices.
- Analytics data: raw visit data for the retention period of the plan, then deleted automatically. Daily totals for up to 25 months. Data for a deleted website is purged within 7 days.
- Security logs: for as long as needed to protect the service, and then deleted.
6. Cookies on this website
Our own website uses a single, strictly necessary cookie: a session cookie that keeps you logged in and protects forms against forgery. We don't use advertising or third-party tracking cookies, and we don't load third-party scripts.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain uses, and to complain to a data protection authority. Account holders can update most of their data on the account page. For anything else, contact us using the details below.
8. Security
Data is encrypted in transit. Passwords are hashed, access between customer accounts is strictly separated and tested, and IP addresses are never stored in readable form.
9. Children
The service is meant for businesses and isn't directed at children under 16.
10. Changes
If we change this policy in a way that matters, we'll update the date above and, for significant changes, tell account holders by email.
11. Contact
SEO NINJA SOFTWARES
GoTrack Systems UK
Email: [email protected]