Privacy Policy

Last updated: July 8, 2026

Who we are

Analyse is a privacy-first website analytics platform with an AI assistant and an SEO content engine, operated by Breukers Willem Albertus E.E., Valaoritou 1, TK 10671, Athens, Greece (GEMI 186520701000, VAT: 802973201). You can reach us at [email protected] for anything in this policy, including privacy requests. We have not appointed a Data Protection Officer — we are a small entity and are not required to — but the same address gets privacy matters answered.

The short version

• Visiting analyse.net involves no analytics cookies on customer sites. On analyse.net itself we use strictly necessary sign-in cookies, and — with consent where required — optional cookies for our own advertising measurement and partner referral attribution.
• If you create an account, we store what we need to run the service: your name, email, credentials, and billing records. Nothing is sold or shared for advertising.
• The Analyse tracking script is cookieless and collects no personal data from visitors of our customers' websites. For that data, our customer is the data controller and we act only as their processor.

This policy is organized around those three situations, because different rules apply to each.

1. Visitors of analyse.net

If you browse this website without an account, we collect little about you directly. Our infrastructure providers keep standard technical logs (IP address and request metadata) for security and abuse prevention.

We do not use analytics cookies on analyse.net. We may use:

• Strictly necessary cookies for signing in and completing OAuth or Search Console flows — see our Cookie Policy.
• Advertising cookies (Google Ads, Meta, Reddit) to measure how our own marketing performs — only after opt-in consent in the EU, EEA, and UK.
• Partner attribution cookie (analyse_ref) when you visit a referral link (/r/<code>). It lets us credit the partner if you subscribe within 90 days. In the EU, EEA, and UK we set this cookie only after you opt in. We store an aggregate click count per partner; we do not log individual click events with your IP address.

If you decline optional cookies, the site works the same; partner discounts tied to that visit may not apply.

2. Account holders

When you sign up for Analyse, we process:

• Account data — your name, email address, and either a hashed password or your Google OAuth identity (we never see or store your Google password).
• Workspace and billing records — your sites, workspace settings, subscription plan, and invoicing details.
• Session security records — when you sign in we record the IP address and browser user agent of the session, so suspicious activity can be detected and sessions can be revoked.
• Payment data — payments are handled by Stripe. Your card details go directly to Stripe and never touch Analyse servers; we only store the subscription and invoice records Stripe gives us.
• Emails — we send transactional email (such as the reminder before your trial ends) through Resend, and occasional product email.

Purposes and legal bases

Google Search Console

If you connect Google Search Console to a site, you authorize that connection yourself through Google. We store the resulting tokens and use them only to fetch your own search performance data into your dashboard — nothing else.

Referral program

Analyse runs an optional referral program for partners who promote the service.

Partners — When you join, we store your name, email, country, optional audience description, payout method and payout details (PayPal email, Wise recipient, or bank details), referral code, and aggregate link-click counts. We use this to operate the program, calculate commissions, and pay you. Legal basis: contract (Art. 6(1)(b)) for running the program; legitimate interest (Art. 6(1)(f)) for fraud prevention.

Referred customers — If you subscribe after visiting a partner link, we store a referral record linking your workspace to that partner (including your account email at checkout) so we can apply the customer discount and pay commission. We tell you at checkout when a partner attribution cookie is active. Legal basis: contract with you (Art. 6(1)(b)) and legitimate interest in operating the program fairly (Art. 6(1)(f)).

Partners see aggregate funnel statistics and commission amounts — not referred customers' names or emails. Full referral details are available only to Analyse administrators for support and fraud review.

When you delete your account or leave the program, we remove or anonymize partner and referral identifiers where we can. Commission, payout, and invoice records needed for tax and accounting law may be retained in anonymized form — see “How long we keep data” below.

Partner program rules are in our Referral Program Terms. Questions: [email protected].

3. Data we process for our customers

Our customers install the Analyse tracking script on their websites. That script is cookieless: it sets no cookies, stores nothing on visitors' devices, and collects no personal data or cross-site identifiers from those visitors. It produces aggregate statistics — page views, referrers, and similar measurements.

For whatever data is processed through a customer's site, the customer is the data controller and Analyse is a data processor under Article 28 GDPR: we process it only on the customer's instructions, to provide the analytics service. If you are a visitor of a website that uses Analyse and you have questions or requests about your data, please contact the operator of that website — they are responsible for it, and we will support them in answering you.

Subprocessors

We use a small set of service providers to run Analyse. Where a provider is outside the EEA, transfers are covered by EU Standard Contractual Clauses (SCCs).

Partner payouts via bank transfer are processed manually by Analyse staff to the account details you provide. Those transfers may go outside the EEA depending on your bank's location; we rely on your instructions and applicable law for cross-border transfers.

Where your data lives

Analytics data is hosted in the EU: our MongoDB and ClickHouse databases are self-hosted on Hetzner infrastructure in the EU, and we use EU regions for cloud storage. Where a subprocessor outside the EEA is involved (see the table above), the transfer is protected by SCCs.

AI transparency

The Analyse platform generates blog content and powers its assistant using Google Gemini models. Content generated through the platform carries provenance and disclosure records in line with Article 50 of the EU AI Act: machine-readable marking that the content is AI-generated, including the model and provider used and, for images, Google's SynthID watermark. The assistant tells you upfront that you are talking to an AI. Prompts and content you submit to these features are processed by Google as a subprocessor; they are used to generate your output, not to advertise to you.

How long we keep data

• Account data — for as long as your account exists. When you delete your account, we delete it, except for records we must keep under Greek tax and commercial law (such as invoices).
• Referral program data — partner profile and payout details while you are in the program; cleared when you leave or when your account is deleted (identifiers anonymized). Referral attribution rows and commission/payout ledgers are kept up to seven years after the tax year they relate to, in line with Greek tax and commercial record-keeping requirements, with referred-user emails removed on erasure where possible.
• Sessions — sign-in sessions expire after 7 days; you can revoke them earlier.
• Customer analytics data — kept for as long as the customer's subscription instructs us to; the customer controls it.
• Partner attribution cookie — 90 days, then expires automatically.

Your rights

Under the GDPR you can ask us for access to your data, rectification, erasure, portability, restriction of processing, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time. Email [email protected] and we will respond within the statutory deadline.

You also have the right to lodge a complaint with a supervisory authority. Ours is the Hellenic Data Protection Authority (HDPA), dpa.gr.

Changes to this policy

When we change this policy, we update the date at the top. For material changes affecting account holders, we will notify you by email or in the app before they take effect.