Privacy Policy

1. Introduction

CRO Bot ("we", "us", "our"), based in Alberta, Canada, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website analysis service.

2. Information We Collect

Account Information: Your name, email address, and billing address provided during registration and checkout.

Website Data: The URLs you submit for analysis. We access these websites using automated browsers to perform the analysis you request.

Payment Information: Payment is processed securely through Stripe. We do not store credit card numbers, CVVs, or full payment details on our servers. We retain only a Stripe customer identifier for billing purposes.

Usage Data: We may collect information about how you access and use the Service, including your IP address, browser type, and pages visited.

3. How We Use Your Information

• To provide and deliver the website analysis reports you purchase
• To create and manage your account
• To process payments and send transaction confirmations
• To communicate with you about your account or the Service
• To improve and optimize the Service

4. Data Sharing

We do not sell your personal information. We share data only with the following third-party service providers, solely to operate the Service:

• Auth0 — Authentication and identity verification
• Stripe — Payment processing (PCI DSS compliant)
• Browserbase — Cloud browser infrastructure for website analysis
• Anthropic — AI-powered analysis via Claude
• Google — PageSpeed Insights API for performance data

We may also disclose your information if required by law or to protect our legal rights.

5. Data Storage and Security

Your data is stored on secure servers. Analysis results, screenshots, and chat messages are stored in our database and are isolated per user account. We implement industry-standard security measures to protect your data, including encrypted connections (TLS/SSL) and secure authentication.

6. Data Retention

We retain your account information and analysis reports for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us.

7. Your Rights

In accordance with Canadian privacy law (PIPEDA) and Alberta's Personal Information Protection Act (PIPA), you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal data
• Withdraw consent for data processing
• Receive a copy of your data in a portable format

8. Cookies

We use essential cookies for authentication (session tokens). We do not use advertising or tracking cookies. See our Cookie Policy for more details.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related inquiries or to exercise your rights, please contact us at support@cro-bot.ugomedia.ca.