Privacy policy
This is an English translation of our Privacybeleid. If the two versions differ, the Dutch version prevails.
This privacy policy explains which personal data Analyty AI processes, why, who we share it with and what rights you have. Analyty AI is offered by Velian AI, trading as Analyty AI, registered with the Dutch Chamber of Commerce (KVK) under number 97486779, VAT number NL005273222B71. For the data of your own account, we are the controller within the meaning of the General Data Protection Regulation (GDPR).
1. Which data we process
- Account data: first and last name, email address, company name and your password (only stored encrypted, as a bcrypt hash). In addition, the answers to the short questionnaire after sign-up (job role, company size, how you found us and your main goal), and the language you chose for your account.
- Sign in with Google (only if you choose it): your Google account ID, name and email address, as Google passes them on. We get no access to your Google password, mail or any other Google data.
- Payment and invoice data: your plan, payment history, payment method and the invoice details you enter yourself (company name, address, VAT number). Payments and invoices go through Stripe; we do not see or store full card or account numbers.
- Project data: the domain name of the website you add, publicly accessible content of that website (which we fetch to create relevant questions and give advice), your prompts, scan results, the answers of AI models and the advice we derive from them.
- Meta advertising data (only if you connect a Meta account yourself): an access token (stored encrypted), your ad accounts, campaign and ad names and statistics such as spend, clicks, CTR, ROAS, leads and cost per lead.
- AI advisor: the messages you send in the chat and the answers to them.
- Technical data: the moment of your last activity and, in server logs, your IP address and the requests your browser makes. We use these for security and to limit misuse.
2. For what purpose and on what legal basis
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Providing your account, running GEO scans, showing Meta insights, giving AI advice and providing support | Performance of the contract |
| Processing payments and drawing up invoices | Performance of the contract |
| Keeping invoices and payment data | Legal obligation (tax retention obligation) |
| Transactional emails (confirming your email address, password reset, reports you request yourself) | Performance of the contract |
| Security, preventing misuse (for example: the free scan is a one-off per person and per website) and limiting the number of requests | Legitimate interest |
| Improving the product based on the answers to the questionnaire | Legitimate interest |
| E-mailing you now and then about new features after you delete your account, only if you tick the box for it when deleting | Consent |
We do not sell your data, do not send you marketing emails without your consent and do not use your data for advertising outside Analyty AI.
3. Who we share data with
We use the following service providers (sub-processors). They only receive the data they need for their task.
| Party | Purpose | Location |
|---|---|---|
| Supabase | Database (storage of all account data) | EU (Frankfurt, Germany) |
| Render | Hosting of the application | United States / EU |
| Cloudflare | Delivery and security of the website | Worldwide |
| OpenAI (ChatGPT) | Generating questions, answering scan questions, analysis, advice and the AI advisor | United States |
| Google (Gemini) | Answering scan questions, analysis, advice and the AI advisor | United States / EU |
| Perplexity | Answering scan questions | United States |
| Stripe | Payments, direct debit, invoices and VAT calculation | Ireland (EU); transfers to the US under the EU-US Data Privacy Framework |
| Resend | Sending transactional emails | United States |
| Signing in with your Google account, only if you choose it | Ireland / United States | |
| Meta Platforms | Retrieving your advertising data, only if you connect it yourself | Ireland / United States |
| Google Fonts | Fonts of the website (your browser contacts Google for this) | United States |
What goes to the AI models? The scan questions (which usually contain your industry and sometimes your brand name or that of competitors), fragments of the public content of your website, scan results, your advertising statistics (for Meta advice) and your messages to the AI advisor. We do not send names, email addresses or passwords.
Otherwise we only share data when the law requires it, for example at the request of the Dutch Tax Administration.
4. Transfers outside the European Economic Area
Some of the parties above process data in the United States. Such transfers take place on the basis of the EU-US Data Privacy Framework where the party is certified for it, and otherwise on the basis of the European Commission's standard contractual clauses.
5. How long we keep data
- Account, project, scan and Meta data: as long as your account exists, so your historical results remain available. If you delete your account, we erase this data from the database immediately; it disappears from backups within the normal backup cycle.
- A disconnected Meta account or a deleted project: we erase the related data immediately.
- Invoices and payment data: 7 years, because the tax retention obligation requires it. This also applies after you have deleted your account.
- Misuse prevention: for websites that have had a free scan, we keep the domain name with an internal account ID, so the free scan stays a one-off. If you delete your account, we erase this too.
- After you delete your account: we keep no data that can be traced back to you, except invoices (see above). We do keep, anonymously, your plan, how long you were a customer and, if you give one, your reason for leaving. If you tick the e-mail box when deleting, we keep your name, e-mail address, company and VAT number until you unsubscribe via the link in every e-mail or via privacy@analyty.com.
- Server logs: briefly, only as long as needed for security and solving outages.
6. Security
All connections use HTTPS. We only store passwords as a hash and Meta access tokens encrypted (AES-256). Client environments are technically separated from each other and only authorised persons have access to production systems. If we discover a data breach that poses risks to you, we report it to the Dutch Data Protection Authority and, where necessary, to you.
7. White Label: when we are a processor
If you use Analyty AI as an agency through White Label for your own clients, you are the controller for those clients' data and we are your processor. Our data processing agreement applies to that.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interest.
- You change your profile details under Settings › Profile, your invoice details under Settings › Billing.
- You remove a website or Meta connection directly from your dashboard.
- You delete your whole account yourself under Settings › Profile.
- For everything else, email liamharinga.work@gmail.com. We respond within one month.
Do you disagree with how we handle your data? Then you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
9. Cookies and local storage
We do not place tracking or advertising cookies and do not use third-party analytics tools. To keep you logged in and remember your preferences, we only use your browser's local storage (localStorage and sessionStorage). If you sign in with Google, we set one functional cookie for at most 10 minutes during that sign-in step, which checks that the sign-in attempt comes from your browser. This is strictly necessary for the service, so we do not ask for consent for it.
10. Changes
We may change this privacy policy. We let you know in advance about important changes. The date at the top shows when it was last updated.
11. Contact
Velian AI (Analyty AI) · liamharinga.work@gmail.com