1. Introduction
Apstal ("we," "our," or "us") operates the apstal.com website and the Apstal analytics platform. This Privacy Policy explains how we collect, use, store, and protect information when you use our services.
By using our services, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect your name and email address. If you subscribe to a paid plan, our payment processor collects billing information on our behalf — we do not store payment card details directly.
2.2 Analytics Data
Our tracking script, installed on your website, collects anonymized visitor data including page views, session duration, device type, browser, approximate geographic location (country/city level), referral source, and on-page behavior. This data is collected solely to provide you with analytics insights.
2.3 Usage Data
We automatically collect information about how you interact with our platform, including features used, queries made, and session metadata. This helps us improve performance and user experience.
3. How We Use Your Information
- To provide, operate, and maintain our analytics services.
- To process transactions and manage your subscription.
- To improve and personalize your experience.
- To communicate with you regarding your account, updates, or support requests.
- To detect, prevent, and address security issues or abuse.
- To comply with legal obligations.
4. Data Sharing
We do not sell your personal data. We may share information with trusted third-party service providers who assist us in operating our platform, processing payments, or delivering services — strictly under confidentiality agreements and only to the extent necessary.
We may disclose information if required by law, regulation, legal process, or governmental request.
5. Cookies
We use only essential, functional cookies required for authentication and core application functionality. We do not use advertising cookies, retargeting pixels, or third-party marketing trackers.
6. Data Retention
We retain your account data for as long as your account is active. Analytics event data collected through our tracking script is retained based on your subscription plan: up to 6 months on the Basic plan, up to 12 months on the Premium plan, and custom retention periods for Enterprise accounts. Session replay recordings are retained for 72 hours. Upon account deletion, all associated data is permanently removed within 30 days, except where retention is required by law.
7. Data Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews. While no system is 100% secure, we are committed to industry best practices.
8. International Data Transfers
Our infrastructure may process data in multiple regions. Where personal data is transferred outside your jurisdiction, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.
9. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data, or to object to or restrict certain processing. To exercise these rights, contact us at [email protected].
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR). If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA).
10. Children's Privacy
Our services are not intended for individuals under 16. We do not knowingly collect data from children. If we become aware of such data collection, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the services after changes constitutes acceptance.
12. Contact
For questions about this Privacy Policy, contact us at [email protected].