Privacy Policy

Last updated: August 29, 2026

1. Data Controller

The data controller for Simplelytics is:

  • Company Name: [Company Legal Name]
  • Registered Address: [Company Registered Address]
  • Contact Email: privacy@simplelytics.com
  • Data Protection Officer: For privacy-related inquiries, contact us at privacy@simplelytics.com

2. Information We Collect

Simplelytics is a privacy-first website analytics service. We collect only the following information:

  • Page views - The pages visited on your website
  • Referrer URLs - Where visitors came from
  • Browser and device type - To help you understand your audience
  • Country/region - Derived from IP addresses (not stored)

We do NOT collect:

  • Personal identifiable information (PII)
  • IP addresses (they are hashed)
  • Cookies or any client-side identifiers
  • Any data that could be used to identify individual users

3. How We Use Your Information

Purpose Legal Basis
Provide and maintain service Contract performance
Billing and payment processing Contract performance
Customer support Contract performance / Legitimate interest
Service notifications (billing, security, policy updates) Legitimate interest
Security and fraud prevention Legitimate interest
Product improvement and analytics Legitimate interest
Legal compliance Legal obligation

To generate AI-powered insights using DeepSeek (deepseek-chat model) - analytics data may be processed by this AI service to provide insights summaries and recommendations.

4. Cookies & Tracking

Simplelytics does not use cookies. Our tracking is done entirely on the server-side when your tracking script sends data to our API.

Type Purpose Can be disabled
Strictly necessary Maintain login, core functionality No
Functional Language preferences, personalization Yes
Analytics Anonymous usage statistics, product optimization Yes

This means:

  • No cookie consent banners required
  • GDPR compliant by default
  • Works immediately with our script

5. Data Sharing

We do not sell your personal information, including as defined under applicable laws such as CCPA. We only share data in the following circumstances:

  • Service providers: Cloud computing, payment processing, customer support, analytics - subject to confidentiality agreements. Payment card data is processed exclusively by our PCI-DSS compliant payment processor Waffo Pancake, our Merchant of Record, and is not stored on our servers.
  • Legal requirements: When required by law, court order, or legitimate government request
  • Business transfers: In case of merger, acquisition, or similar corporate transaction, with prior notice and continued protection obligations
  • With your consent: For any other purpose beyond what is listed above

6. Data Security

  • Transmission encryption: TLS/HTTPS
  • Storage security: Passwords and sensitive data are encrypted or hashed
  • Access control: Principle of least privilege; employees sign confidentiality agreements
  • Regular security audits and vulnerability scanning

In the event of a security incident affecting your rights, we will notify you and relevant regulatory authorities within 72 hours of discovery.

7. Data Retention

Data Type Retention Period Upon Expiry
Account information During active subscription; 90 days after account deletion Secure deletion
Transaction records As required by law (typically 7 years) Secure deletion or archival
Analytics data (Free plan) 7 days Automatic deletion
Analytics data (Hobby plan) 30 days Automatic deletion
Analytics data (Pro plan) 1 year Automatic deletion
Analytics data (Business plan) Unlimited Until account deletion
Support records 2 years Secure deletion

8. Your Data Rights

To exercise any of the following rights, please contact us. We will process your request within 30 calendar days.

Right Description
Right to be informed Know what data we collect and how we use it
Right of access Obtain a copy of your personal data
Right to rectification Correct inaccurate or incomplete information
Right to erasure Request deletion of your data under specific conditions
Right to restrict processing Pause data processing under specific circumstances
Right to data portability Receive your data in a machine-readable format
Right to object Object to processing based on legitimate interests or marketing
Right to withdraw consent Withdraw consent for processing based on consent

If you believe we have not properly handled your data, you have the right to lodge a complaint with your local data protection authority.

9. International Data Transfers

Our servers and partners may be located in various countries including the United States and Singapore. When data is transferred internationally, we ensure data security through:

  • Data processing agreements incorporating EU Standard Contractual Clauses (SCC)
  • Transfers only to recipients with equivalent protection levels

10. Children's Privacy

Simplelytics is intended for users who are at least 16 years old. We do not knowingly collect information from users under this age. If you believe your child has provided us with personal information, please contact us immediately at privacy@simplelytics.com and we will promptly delete the data.

11. Third-Party Links

Our service may contain links to third-party websites or integrate with third-party services. This Privacy Policy applies only to information we collect directly. We are not responsible for the data practices of third parties and recommend reviewing their policies before use.

12. Policy Changes

If we make material changes to this policy, we will notify you at least 15 days in advance through our platform announcement or your registered email address, and update the "Last Updated" date at the top of this page. Continued use after the effective date constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related inquiries, contact us at:

  • Privacy Email: privacy@simplelytics.com
  • Customer Support: support@simplelytics.com
  • Company: Simplelytics
  • Service Hours: Monday to Friday, 09:00-18:00 UTC+8