Privacy Policy

Last updated: 20 March 2026

Your privacy matters. This policy explains what data we collect, why, and how we handle it. We've tried to keep it readable.

Justlytics is operated by Bits of Wow Pte. Ltd. ("we", "us", "our"). When we say "Service", we mean the Justlytics website at justlytics.app, the Justlytics dashboard at app.justlytics.app, and the Justlytics tracking script.

What we collect

From you (our customers)

When you create an account and use Justlytics, we collect:

• Email address — used for authentication (passwordless login), account communication, and email reports.
• Name — if you choose to provide one, displayed in your account.
• Payment information — processed by Stripe. We do not store your credit card details. Stripe handles all payment data under their own privacy policy.
• Site URLs — the domains you add to track.
• Usage data — how you interact with the Justlytics dashboard (pages visited, features used) to improve the product.

From your website visitors (via the tracking script)

When someone visits a site using the Justlytics tracking script, we collect:

• Page URL and referrer — which page was visited and where the visitor came from.
• Browser and device information — browser name, operating system, device type (desktop, mobile, tablet). We use the User-Agent string for this.
• Country — derived from the visitor's IP address using MaxMind GeoIP databases. We do not store the IP address itself after geolocation lookup.
• First-party cookie — a random unique identifier stored as a first-party cookie to distinguish unique visitors and sessions. This cookie is only accessible by your domain. It does not track visitors across other websites.
• Custom events — if you use event tracking, we store the event category, action, label, and optional numeric value you define.
• UTM parameters — campaign tracking parameters from the page URL (utm_source, utm_medium, utm_campaign, etc.).

What we do NOT collect from visitors

• No personal names or email addresses
• No third-party cookies or cross-site tracking
• No fingerprinting
• No IP addresses stored (used only for geolocation, then discarded)
• No data shared with advertising networks

How we use data

We use your data to:

• Provide, maintain, and improve the Justlytics service.
• Authenticate you and manage your account.
• Process payments and manage subscriptions.
• Send you email reports if you enable them.
• Send you transactional emails (login codes, billing notifications).
• Generate analytics dashboards and insights for you from your visitors' data.
• Power the "AI Ask" feature — when you ask a question, your analytics data (aggregated, not individual visitor data) is sent to a third-party AI provider to generate an answer. No personally identifiable visitor information is shared.

Third-party services

We use the following third-party services to operate Justlytics:

• Stripe — payment processing. Stripe processes your payment details under their own privacy policy.
• Resend — transactional email delivery (login codes, email reports).
• MaxMind GeoLite2 — IP-to-country geolocation. IP addresses are processed in memory and not stored.
• AI providers (Google Gemini) — powers the "AI Ask" feature. Only aggregated analytics data is sent, not individual visitor data or personally identifiable information.

We do not sell, rent, or share your data or your visitors' data with advertisers, data brokers, or any other third parties beyond what is listed above.

Cookies

The Justlytics tracking script sets a single first-party cookie on your visitors' browsers. This cookie contains a randomly generated unique identifier used to distinguish returning visitors from new ones and to manage sessions. It is scoped to your domain only and cannot be read by other websites.

The Justlytics dashboard (app.justlytics.app) uses local storage to maintain your authentication session (JWT token).

Data retention

• Account data — retained while your account is active. If you delete your account, we delete your data within 30 days.
• Analytics data — retained while your account is active. If you remove a site, its analytics data is deleted within 30 days.
• Payment records — retained as required by law for accounting purposes.

Data security

We take appropriate measures to protect your data, including encrypted connections (HTTPS/TLS), secure authentication, and restricted access to databases. No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we take commercially reasonable steps to protect your information.

Your rights

Depending on where you are located, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Export your data in a portable format.
• Withdraw consent where processing is based on consent.
• Object to processing based on legitimate interests.

To exercise any of these rights, contact us at [email protected].

GDPR (European Economic Area and UK)

If you are in the EEA or UK, we process your personal data under the following legal bases:

• Contract performance — to provide the service you signed up for.
• Legitimate interests — to improve our service, prevent abuse, and communicate with you.
• Legal compliance — to meet tax, accounting, or regulatory obligations.
• Consent — where applicable (e.g., optional email reports).

You have the right to lodge a complaint with your local data protection authority if you believe your data has been processed unlawfully.

CCPA (California)

If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

International data transfers

Your data may be processed in countries outside your own, including the United States, Singapore, and within the European Union. We ensure appropriate safeguards are in place for any international transfers.

Children

Justlytics is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or through the dashboard. Continued use of the service after changes take effect means you accept the updated policy.

Contact

If you have questions about this privacy policy or how we handle your data, contact us at:

Bits of Wow Pte. Ltd.
Email: [email protected]