Privacy Policy

1. Introduction

Silent Analysis ("we," "us," or "our"), operated by Neuvelia Spółka z ograniczoną odpowiedzialnością with its registered office in Kraków, Poland, is committed to the highest standards of data protection and privacy.

Our Service is built on the principle of privacy-by-design. Unlike traditional analytics, Silent Analysis provides deep insights into website traffic without collecting personal data, using cookies, or tracking individual users across the web.

2. Data Controller Information

The data controller responsible for your account information is:

3. The "No Personal Data" Commitment (Website Visitors)

For the visitors of websites using Silent Analysis, we do not collect, store, or process any personal data as defined by the GDPR.

• No IP Addresses: We do not store or log IP addresses. IP addresses are processed in memory solely to determine the country of origin and are discarded immediately after.
• No Cookies: We do not use cookies, local storage, or any persistent identifiers.
• No Fingerprinting: We do not use browser fingerprinting or any technology designed to identify unique devices.
• No Cross-Site Tracking: Data collected from one website is never linked to data from another.

Data collected for analytics is purely aggregate and anonymous, including page URLs, referrer sources, device types, browser categories, and country-level geography.

4. Data We Collect from Our Customers (Account Data)

When you create an account to use Silent Analysis, we collect the minimum information necessary to provide the Service:

• Account Information: Email address and a securely hashed password.
• Billing Information: For paid plans, payment processing is handled by Stripe, Inc. We do not store credit card details on our servers.
• Communication Data: Information provided when contacting support or requesting a refund.

5. Legal Basis for Processing

We process account data based on the following legal grounds:

• Performance of a Contract (Art. 6(1)(b) GDPR): To provide the analytics dashboard and manage your subscription.
• Legitimate Interest (Art. 6(1)(f) GDPR): To ensure the security of our infrastructure and prevent fraud.
• Legal Obligation (Art. 6(1)(c) GDPR): To comply with tax and accounting requirements for financial records.

6. Data Infrastructure and Transfers

All analytics and account data are stored on secure servers within the European Union:

• Primary Infrastructure: Hetzner Online GmbH (Data centers in Germany and Finland).
• Database & Auth: Supabase (EU-central region).
• Hosting: Vercel (Configured for EU data residency).

We do not transfer data to "third countries" (outside the EEA) unless adequate safeguards are in place, such as Standard Contractual Clauses (SCCs).

7. Data Retention

• Analytics Data: Retention periods depend on your plan: Free (7 days), Starter (24 months), Growth/Agency (60 months).
• Account Data: Retained for the duration of your active subscription.
• Deletion: Upon account cancellation, data is kept in read-only mode for 90 days before permanent deletion, unless immediate deletion is requested.

8. Your Rights

Under the GDPR, you have the following rights regarding your account data:

• Right to access, rectification, and erasure ("right to be forgotten").
• Right to data portability (exporting your data in JSON/CSV).
• Right to restrict or object to processing.
• Right to lodge a complaint with a supervisory authority (e.g., UODO in Poland).

To exercise these rights, contact us at privacy@silentanalysis.com.

9. Third-Party Processors

We engage a limited number of trusted partners to deliver our Service:

• Stripe: Payment processing and billing.
• Supabase: Secure database infrastructure.
• Vercel: Deployment and edge network.

10. Jurisdiction

This Privacy Policy and any disputes related to data processing are governed by the laws of Switzerland, with the seat of arbitration in Basel, as specified in our Terms of Service.

11. Contact Information

For any privacy-related inquiries: