This Privacy Policy explains how OptiConvert (“OptiConvert”, “we”, “us”) collects, uses, and discloses personal information when you use our website and web application at opticonvert.ai (the “Service”). The Service is marketed to users in the United States.
Controller/Contact: OptiConvert, 2248 Broadway #2001, New York, NY 10024, United States • hello@opticonvert.ai
OptiConvert is a B2B SaaS that analyzes a user‑submitted URL and generates AI‑assisted conversion‑rate optimization (CRO) audits (scores and recommendations). We use Next.js, server‑side headless Chromium/Puppeteer, and Google’s Generative AI (Gemini) to analyze page content and (optionally) a screenshot. We authenticate with Supabase (including Google OAuth), stream results using SSE, send emails via Resend/Supabase, process payments via Stripe, and measure usage with our first‑party analytics system stored in Supabase. Email verification is required on sign‑up; two‑factor verification (2FA) is available but not required.
Our AI‑generated scores and recommendations are informational tools to assist your decision‑making. They are not automated decisions that produce legal or similarly significant effects.
We use cookies and similar technologies to run and secure the Service and to measure usage.
For details and controls, see our Cookie Policy.
We use service providers to operate the Service and do not knowingly sell personal information.
We do not allow third parties to collect personally identifiable information about your online activities while you use our Service, except as described in this policy (e.g., Stripe during checkout).
We may disclose information to comply with law, protect rights and safety, or in connection with a corporate transaction.
If you enable the OptiConvert optimization pixel on your website, a lightweight script is loaded on your pages. The script reads DOM elements and applies CSS or attribute mutations according to the rules you have saved in the OptiConvert editor. The script fetches its configuration payload from the OptiConvert API.
The optimization script does not track your website's visitors, does not collect analytics or personal data from visitors, and does not set cookies on visitor browsers. The script fetches its configuration from OptiConvert's servers, which may result in incidental IP address logging by hosting infrastructure consistent with standard web traffic; we do not use these logs to identify or profile your visitors. The script operates entirely within the visitor's browser to apply the visual changes you have configured.
The Service is marketed to U.S. users and processed primarily in the United States. If you access from outside the U.S., your information may be transferred to and processed in the U.S. by us and our providers.
Delete my data: the in‑app control deletes personal data from OptiConvert’s databases. It does not automatically delete information held by independent providers (e.g., Stripe invoices/receipts). We will assist with feasible deletion requests to processors where appropriate and lawful, and we retain records required for legal or security purposes (e.g., credit ledgers and invoices).
Access/portability/correction: email hello@opticonvert.ai. We may require identity verification before processing your request. We will respond within forty‑five (45) days of receiving a verifiable request. If we need additional time, we will notify you of the extension and the reason.
Authorized agents: you may designate an authorized agent to make a request on your behalf. We may require the agent to provide proof of authorization and may still verify your identity directly.
Appeal: if we deny your request, you may appeal by emailing hello@opticonvert.ai with the subject line "Privacy Appeal." We will respond to your appeal within forty‑five (45) days.
U.S. state privacy laws: where applicable (e.g., California), you may have rights to know, delete, correct, and opt out of certain processing. OptiConvert does not sell personal information or share it for cross‑context behavioral advertising as defined by California law.
The Service is intended for adults 18 years or older. We do not direct the Service to children under 13 and do not knowingly collect personal information from them.
We use industry‑standard safeguards, including TLS, access controls, CSRF protection, Supabase Row‑Level Security (RLS), least‑privilege key management, optional 2FA, email verification, webhook signature verification, and scoped in‑memory caching. No method of transmission or storage is 100% secure.
We require our service providers to maintain appropriate administrative, technical, and physical safeguards for personal data.
In the event of a data breach involving your personal information, we will notify you as required by applicable law.
When personal data is no longer needed for its stated purpose and no legal retention obligation applies, we securely delete or de‑identify it.
We will post changes on this page and revise the Effective Date. For material changes, we may notify you by email or in‑app.
OptiConvert, 2248 Broadway #2001, New York, NY 10024, United States • hello@opticonvert.ai