Privacy Policy

This Privacy Policy explains how Vertifo (“we”, “us”, “our”) processes information when you use the Vertifo dashboard and when visitors access sites published through Vertifo (the “Service”).

This document is intended to be practical and conservative. It does not promise outcomes that are not technically enforced.

1) Summary

• We process account and billing information to provide the Service.
• We provide privacy-friendly analytics for published sites. Analytics are aggregated and may be incomplete or approximate.
• We may process IP addresses transiently for security and rate-limiting and may store a non-reversible hash for analytics deduplication.
• We may use cookies for authentication and basic product functionality in the dashboard. The analytics system is designed to avoid cookies.

2) Information we process

A) Account and usage (dashboard)

We may process:

• Account identifiers (such as email address, name, user ID).
• Authentication and session data (for sign-in and account security).
• Plan and billing state (for example, subscription status and plan tier).
• Content you create in the dashboard (site name, pages, blocks, images, domains you configure, and related settings).

B) Public site requests

When visitors access a published site, servers and intermediaries typically process technical data such as:

• IP address (generally transiently, as part of HTTP request handling).
• User agent and device/browser characteristics.
• Requested path and referrer (when provided by the browser).

C) Privacy-friendly analytics

If analytics are enabled for a site and plan, we may process and store:

• Page view counts (views) and estimates of unique visitors.
• Referrer domain (when available).
• Domain and path (to attribute analytics to the correct site/page).
• A pseudonymous visitor identifier (hash) that helps deduplicate visits. It is designed to rotate and is not intended to directly identify individuals.

Analytics may be incomplete or approximate because some visitors block tracking, do not send referrer information, or due to other technical limitations.

See /docs/analytics/metrics-definitions for the canonical description of analytics behavior.

3) Cookies and similar technologies

• The dashboard may use cookies necessary for authentication and session management.
• The Service may use cookies for basic preferences (for example, interface language).
• The analytics system is designed to be privacy-friendly and avoid cookies; however, technical storage and request processing still occur as part of operating a website.

4) How we use information

We use information to:

• Provide and operate the Service (build, publish, and serve sites).
• Authenticate users and protect accounts.
• Enforce plan limits and feature access.
• Provide analytics and reporting.
• Prevent abuse, fraud, and security incidents (including rate limiting).
• Communicate with you about the Service and support requests.

5) Sharing and third parties

We may share or process information with service providers that help us operate the Service, such as:

• Payment processors (for example, Stripe) for billing and subscription management.
• Infrastructure/hosting and database providers.
• Email providers (for transactional emails), if configured.

Third-party services operate under their own terms and privacy policies. We do not control and do not guarantee their behavior.

6) Data retention

We retain information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods can vary by data type, plan status, and operational needs.

Analytics data may be retained in aggregated form and may not always be immediately deletable from backups.

7) Security

We take reasonable measures designed to protect information, but no system can be guaranteed secure. You are responsible for maintaining the confidentiality of your credentials.

8) Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data. We will handle requests where required by applicable law.

9) Changes to this policy

We may update this Privacy Policy from time to time. The updated version will apply when posted.

10) Contact

For privacy inquiries, contact us at the support email shown in the Service.