Privacy Policy

1. Introduction

UGO Media ("we", "us", "our"), based in Alberta, Canada, operates CRO Bot (the "Service"), available at cro-bot.com. We are committed to protecting your privacy in accordance with Alberta's Personal Information Protection Act (PIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website analysis service.

2. Information We Collect

We collect personal information with your knowledge and consent, as required under PIPA and PIPEDA. The types of information we collect include:

Account Information: Your email address provided during registration. If you proceed to checkout, we may also collect your name and billing address.

Website Data: The URLs you submit for analysis. We access these publicly available websites using automated browsers to perform the analysis you request.

Payment Information: Payment is processed securely through Stripe (PCI DSS compliant). We do not store credit card numbers, CVVs, or full payment details on our servers. We retain only a Stripe customer identifier for billing and transaction reference purposes.

Usage Data: We collect information about how you access and use the Service, including your IP address, browser type, device information, referring URLs, and pages visited. This data is collected via Google Analytics and server logs.

Communications Data: If you contact us via email, we retain the content of your correspondence to assist with support and record-keeping.

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide and deliver the website analysis reports you purchase
• To create and manage your account
• To process payments and send transaction confirmations
• To communicate with you about your account, orders, or the Service
• To send transactional emails (e.g., purchase receipts, report completion notifications)
• To improve, optimize, and maintain the Service
• To detect and prevent fraud or abuse
• To comply with legal obligations
• To send promotional communications, product updates, and marketing materials related to the Service, where you have provided your consent or where permitted by applicable law (e.g., by submitting your email address through a lead capture form, requesting a sample report, or subscribing to communications)

Lead Capture and Marketing Communications: When you voluntarily submit your email address through forms on our website (such as sample report requests, newsletter sign-ups, or contact forms), we collect and retain your email address for the purpose of sending you marketing communications about our products and services. By submitting your information through these forms, you consent to receiving such communications. You may opt out of marketing communications at any time by contacting us at support@cro-bot.com. Opting out of marketing communications will not affect transactional communications related to your account or purchases.

4. Consent

By creating an account and using the Service, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. You may withdraw your consent at any time by contacting us at support@cro-bot.com, subject to legal or contractual restrictions. Withdrawal of consent may affect our ability to provide the Service to you.

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information. We share data only with the following third-party service providers, solely as necessary to operate the Service:

• Auth0 (Okta) — Authentication and identity verification. Receives your email address for login purposes.
• Stripe — Payment processing (PCI DSS compliant). Receives payment and billing information to process transactions.
• Browserbase — Cloud browser infrastructure for website analysis. Receives the URLs you submit for analysis.
• Anthropic — AI-powered analysis via Claude. Receives website data and analysis inputs to generate reports.
• Google Analytics — Website usage analytics. Receives anonymized usage data including IP address, browser type, and page interactions.
• Google PageSpeed Insights — Performance data for analyzed websites. Receives the URLs you submit.
• Mailgun — Transactional email delivery. Receives your email address to send account and purchase-related emails.

These third-party providers are contractually obligated to protect your information and may only use it for the purposes we specify. Some of these providers may store or process data outside of Canada, including in the United States.

We may also disclose your personal information if required by law, regulation, court order, or government request, or to protect the rights, property, or safety of UGO Media, our users, or the public.

6. International Data Transfers

Some of our third-party service providers operate outside of Canada. When your personal information is transferred to another jurisdiction, it may be subject to the laws of that jurisdiction. We take reasonable steps to ensure that your information remains protected in accordance with PIPA and PIPEDA standards, regardless of where it is processed.

7. Data Storage and Security

Your data is stored on secure servers. Analysis results, screenshots, and report data are stored in our database and are isolated per user account. We implement industry-standard security measures to protect your data, including:

• Encrypted connections (TLS/SSL) for all data in transit
• Secure, passwordless authentication via Auth0
• Access controls limiting data access to authorized personnel only
• Regular security reviews of our infrastructure

While we take reasonable precautions, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

8. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected:

• Account information: Retained for as long as your account is active, plus a reasonable period after account deletion for legal and administrative purposes.
• Analysis reports: Retained for as long as your account is active.
• Payment records: Retained as required by applicable tax and financial reporting laws (typically 7 years).
• Usage data: Retained in anonymized/aggregated form for analytics purposes.

You may request deletion of your account and associated personal data at any time by contacting us at support@cro-bot.com. We will process deletion requests within 30 days, subject to any legal obligations requiring us to retain certain records.

9. Your Rights Under Canadian Privacy Law

Under PIPA (Alberta) and PIPEDA (federal), you have the following rights with respect to your personal information:

• Right of Access: You may request access to the personal information we hold about you.
• Right to Correction: You may request correction of any inaccurate or incomplete personal information.
• Right to Deletion: You may request deletion of your personal data, subject to legal retention requirements.
• Right to Withdraw Consent: You may withdraw your consent for the collection, use, or disclosure of your personal information at any time.
• Right to Complain: If you believe your privacy rights have been violated, you have the right to file a complaint with the Office of the Information and Privacy Commissioner of Alberta (OIPC) or the Office of the Privacy Commissioner of Canada (OPC).

To exercise any of these rights, please contact us at support@cro-bot.com. We will respond to your request within 30 days, as required by law.

10. Cookies

We use essential cookies for authentication (session tokens). We also use Google Analytics cookies for website usage analytics. We do not use advertising or third-party tracking cookies. See our Cookie Policy for more details.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Your continued use of the Service after any changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

13. Contact

For privacy-related inquiries, to exercise your rights, or to file a complaint, please contact UGO Media at:

Email: support@cro-bot.com

You may also contact the relevant privacy authorities:

• Office of the Information and Privacy Commissioner of Alberta (OIPC): www.oipc.ab.ca
• Office of the Privacy Commissioner of Canada (OPC): www.priv.gc.ca