Privacy Policy

1. What Data We Collect

From Our Users (GetAttrib Account Holders):

• Account Data: Name, email address, password (hashed), and billing information.
• Integration Data: Read-only access to transaction data via Stripe and WooCommerce webhooks (e.g., revenue amounts, customer emails, order IDs). We do not collect or store credit card numbers.

From Your Website Visitors (via the GetAttrib Pixel):

When you install our tracking pixel on your website, we process the following information about your visitors on your behalf:

• Device & Browser Information: IP address (anonymized/hashed where applicable), browser type, operating system, and screen resolution.
• Traffic Data: Referrer URL, UTM parameters (source, medium, campaign), and pageview timestamps.
• Identifiers: A unique, randomly generated Visitor ID stored in sessionStorage.
• Form Data: Information submitted via lead forms on your website (e.g., name, email, phone number) for attribution purposes.

2. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process data relying on the following legal bases:

• Performance of a Contract: Processing your account and billing data to provide our services.
• Legitimate Interests: Processing visitor data to provide you with accurate marketing attribution (subject to your end-users' rights and any necessary consent).
• Consent: Where required by law, you are responsible for obtaining appropriate consent from your website visitors before loading the GetAttrib pixel.

3. How We Use Your Data

• To provide, operate, and maintain our services.
• To attribute sales and leads to the correct marketing campaigns for our users.
• To improve our product and analyze aggregate usage trends.
• To communicate with you regarding your account, support updates, and billing.

4. How Long Data is Retained

• User Data: Retained for as long as your account is active. If you delete your account, your data is removed from our active systems within 30 days.
• Visitor Data (Events/Pageviews): Retained for up to 12 months for attribution modeling, after which it is anonymized or deleted.

5. Third Parties We Share Data With

We do not sell your data. We share data only with trusted service providers necessary to operate our business:

• Supabase: For secure database hosting and authentication.
• Stripe: For processing payments (both our own subscription billing and your integrated read-only revenue webhooks).
• Vercel: For application hosting and edge computing.

6. Your Rights Under GDPR

If you are located in the EEA or UK, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure ("Right to be Forgotten"): Request deletion of your data.
• Portability: Request a structured, machine-readable copy of your data.
• Object/Restrict: Object to or restrict certain processing activities.

To exercise these rights, please contact us at support@getattrib.com.

7. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: support@getattrib.com