Privacy Policy
This policy explains what personal data Mind Your Buyer ("we", "us") collects when you use our website and application at mindyourbuyer.com, why we collect it, who we share it with, and the choices you have. Mind Your Buyer is a product of Bitami d.o.o. ("the Company"), registered at V Murglah 211, 1000 Ljubljana, Slovenia (VAT ID SI10053034). For any privacy question or request, contact hello@mindyourbuyer.com.
We are the data controller for the personal data described below. Where the EU General Data Protection Regulation (GDPR) applies, we process data on the legal bases stated in each section.
1. What we collect
Data you give us
- Account details. When you sign in, we use Google Sign-In. We receive your email address and basic profile information from Google. We do not receive or store your Google password.
- URLs and assets you submit. The web addresses you ask us to analyze, and any text, images, or files you upload for testing.
- Content you create. Personas, experiments, findings, notes, and other records you generate in the app.
- Email you provide for a free report. If you request an anonymous Conversion Friction Check, the email address you enter to receive or claim it.
Data we generate or collect automatically
- Analysis artifacts. To produce a report, our system loads the page you submit in an automated browser and captures screenshots, page text, and the link structure of that page. These artifacts are stored as evidence behind the findings we show you.
- Usage and product events. Anonymous funnel events (for example, that a report was started or completed) and in-app activity, used to operate and improve the product.
- Network identifiers. For abuse prevention and rate limiting on anonymous free reports, we process your IP address. We store only a salted hash of it — we do not retain raw IP addresses for this purpose.
- Essential storage. First-party functional storage needed to keep you signed in and to run the app. [If any analytics or non-essential cookies are added, disclose them here and obtain consent.]
We do not collect or store your payment card details. Payments are handled by our payment processor (see §3); we receive only a confirmation that a payment succeeded and the credits it purchased.
2. Why we use it, and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Provide the analysis you request and run your account | Performance of a contract |
| Process payments and grant credits | Performance of a contract |
| Prevent abuse, fraud, and cost-draining automated use | Legitimate interests |
| Operate, secure, debug, and improve the service | Legitimate interests |
| Send you the free report you requested and service messages | Consent / performance of a contract |
| Send product or marketing email (if any) | Consent — you can withdraw it at any time |
3. Who we share it with (subprocessors)
We do not sell your personal data. We share it only with the service providers that make the product work, each bound to protect it and to process it only on our instructions:
| Provider | What it processes |
|---|---|
| Google Cloud / Firebase (Google LLC) | Authentication, database, file storage, and our hosting |
| Google Gemini / Vertex AI (Google LLC) | The AI model that analyzes submitted pages and generates findings |
| Browserbase / Stagehand | The automated browser that loads and captures the pages you submit |
| Stripe | Payment processing (card data is handled directly by Stripe) |
Some of these providers may process data outside your country, including in the United States. Where required, such transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses. [Confirm the current transfer mechanism for each provider with counsel.]
Note that content generated by the AI (Google Gemini/Vertex AI) is subject to that provider's terms; per Google's enterprise terms, prompts and content are not used to train its foundation models. [Verify against the plan and terms you are actually on before relying on this.]
4. How long we keep it
- Account data and content you create are kept while your account is active and until you delete them or ask us to.
- Transient job and analysis state (the working data behind a run) may be purged automatically after a retention window.
- Anonymous free reports are kept for a limited period and then removed if not claimed; claimed reports are retained with your account.
- Payment records are retained as long as required for tax and accounting law.
5. Your rights
Subject to applicable law, you can request to access, correct, export, or delete your personal data, object to or restrict certain processing, and withdraw consent at any time. You can also delete content directly in the app. To make a request, email hello@mindyourbuyer.com; we will respond within the time the law requires. If you are in the EU/EEA and believe we have not handled your data properly, you may complain to your local data protection authority — in Slovenia, the Information Commissioner (Informacijski pooblaščenec).
6. Security
Access to the application requires an authenticated, verified account, and each customer can only reach their own data. Evidence media is served through short-lived, signed links rather than public URLs, and we apply rate limits and abuse controls. No system is perfectly secure, but we work to protect your data and to limit what any request can reach.
7. Children
The service is intended for business use and is not directed to children. We do not knowingly collect personal data from anyone under 15 (the age of digital consent in Slovenia).
8. Changes
We may update this policy as the product evolves. We will change the "last updated" date above and, for material changes, take reasonable steps to notify you.
9. Contact
Questions or requests: hello@mindyourbuyer.com.