Scope

AiTracker aims to align with nLPD and GDPR (EU/EEA). This page is a high level summary, not legal advice. Last updated: 2026-01-28.

Data We Process

Account email, session identifiers, plan and billing identifiers, and AI bot analytics aggregated by site. For telemetry we store minimal request metadata and a salted IP hash prefix (no raw IP). We do not intentionally collect end user personal content from tracked websites.

Purpose and Legal Basis

We process data to operate the service, provide analytics, secure the platform, and bill subscriptions. Under GDPR, this may rely on contract performance, legitimate interests, and consent (where required).

Data Location and Transfers

Infrastructure may be hosted outside your country/region. Where cross-border transfers apply, we aim to use appropriate safeguards, such as standard contractual clauses.

Retention

Raw hit events are retained for a limited period (typically 30 days) to support security and analytics, then deleted. Aggregated daily statistics are retained longer. You can request deletion of your account and related data.

Security Deterrence Framework

To reduce automated scraping and interface tampering, AiTracker uses a lightweight deterrence layer on certain pages. It may restrict actions like right‑click or developer‑tool shortcuts and can temporarily obscure the interface if misuse is detected. This is a deterrent only (not unbreakable) and is designed to avoid disrupting normal use, including login and billing flows.