Privacy Policy

1. Introduction

Embaze (“we”, “us”, or “our”) provides privacy-focused website analytics. This Privacy Policy explains how we collect, use, store, and protect information when you use our website, applications, and analytics services (collectively, the “Services”).

By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you disagree with any part of this policy, please do not use the Services.

2. Data Controller

The data controller responsible for your personal data is Embaze, contactable at privacy@embaze.com.

3. Information We Collect

We collect information in two ways: (a) information you provide directly to us, and (b) information collected automatically through your use of the Services.

3.1 Information You Provide

• Account information: email address, password, and billing details when you register for an account;
• Communications: messages, support requests, and feedback you send us;
• Site settings: website URLs and configuration choices you add to your workspace.

3.2 Information Collected Automatically

When visitors access websites that have installed the Embaze tracking script, we collect aggregated analytics data on behalf of our customers. This may include:

• Page URL and referrer URL;
• Country and city-level location (derived from IP address);
• Device type, operating system, and browser;
• Screen size and viewport;
• UTM parameters and campaign data;
• Custom events defined by the website owner.

We do not use cookies, device fingerprints, or cross-site identifiers to track visitors. IP addresses are processed only to derive approximate location and are not stored in a way that identifies individual users.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Services;
• Authenticate users and manage accounts;
• Process payments and send billing notices;
• Respond to support requests and communicate updates;
• Monitor usage, diagnose technical issues, and prevent fraud;
• Comply with legal obligations and enforce our Terms of Service.

5. Legal Basis for Processing

We process personal data on the following legal bases:

• Performance of a contract — to provide the Services you signed up for;
• Legitimate interests — to operate and improve our Services, keep them secure, and communicate with users. This includes collecting limited analytics data about how visitors use our own website;
• Consent — where required by law, such as for marketing communications or non-essential cookies;
• Legal obligation — to comply with applicable laws and regulations.

6. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Services. Analytics data collected on behalf of our customers is retained according to the customer's plan and deleted in accordance with our data retention schedule. When you delete your account, we will delete or anonymize your personal data within a reasonable period, except where retention is required by law.

7. Data Sharing and Third Parties

We do not sell your personal data or analytics data. We share information only in the following limited circumstances:

• Service providers — trusted vendors who help us host, process payments, send emails, and provide customer support, bound by confidentiality obligations;
• Legal compliance — when required by law, court order, or to protect our rights, users, or the public;
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to confidentiality protections.

8. Cookies, Consent, and Tracking Technologies

The Embaze analytics script does not set cookies on visitor browsers, on this site or any site it's installed on — there is no analytics cookie to opt in or out of. The only thing embaze.com itself stores in your browser is your login session (if you sign in) and an acknowledgment that you've seen this notice, both in local storage, never a cookie. We do not use third-party advertising or tracking cookies.

You can make the notice reappear at any time by clearing the “embaze-cookie-consent” item from your browser’s local storage and refreshing the page.

9. Your Privacy Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your personal data;
• Object to or restrict certain processing activities;
• Withdraw consent where processing is based on consent;
• Receive a copy of your data in a portable format.

To exercise these rights, contact us at privacy@embaze.com. We will respond within the timeframe required by applicable law.

10. Security

We implement reasonable administrative, technical, and physical safeguards to protect your data. However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

11. International Data Transfers

We may process and store data in countries other than your own. When we transfer personal data internationally, we use appropriate safeguards, such as Standard Contractual Clauses, to ensure your data receives adequate protection.

12. Children’s Privacy

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Services before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the revised policy.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@embaze.com.