Privacy Policy

This Privacy Policy explains how AlfaUMi ("we", "us", or "our") collects, uses, and protects your personal data when you use our visibility analysis service at https://www.alfaumi.pro. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

2. What Data We Collect

We collect and process the following types of data:

• Analyzed URLs: The website URLs you submit for visibility analysis
• Analysis Results: The visibility scores, recommendations, and other data generated from analyzing your submitted URLs
• Usage Data: Technical information such as browser type, device information, IP address, pages visited, and interaction patterns with our service
• Local Storage Data: Analysis history stored locally in your browser for your convenience

3. How We Use Your Data

We use your data for the following purposes:

• Providing Analysis Services: To perform visibility analysis on the URLs you submit and generate actionable recommendations
• Service Improvement: To understand usage patterns and improve our analysis algorithms and user experience
• Technical Operations: To maintain, secure, and optimize our service infrastructure
• Legal Compliance: To comply with applicable laws and respond to lawful requests from authorities

The legal basis for processing your data is our legitimate interest in providing and improving our services (Article 6(1)(f) GDPR), and your consent where applicable (Article 6(1)(a) GDPR).

4. Data Storage and Retention

We handle your data with the following retention practices:

• Analysis Results: Stored temporarily on our servers for service delivery. Results can be deleted upon request.
• Browser Storage: Analysis history is stored locally in your browser and can be cleared at any time using your browser settings or our built-in history management feature.
• Usage Logs: Technical logs are retained for a maximum of 90 days for security and debugging purposes.

Your data is stored on secure servers located within the European Union and/or in jurisdictions that provide adequate data protection as recognized by the European Commission.

5. Third-Party Services

To provide our visibility analysis service, we use the following third-party services:

• Google Analytics: Used for website traffic analysis and understanding how visitors use our service. We use Google Analytics with Consent Mode v2, which means data is only collected after you provide consent. Data is subject to Google's Privacy Policy.
• OpenAI API: Used for AI-powered analysis and recommendations. Data sent to OpenAI is subject to their Privacy Policy.
• Google Gemini API: Used for AI-powered analysis and recommendations. Data sent to Google is subject to their Privacy Policy.
• Amazon Web Services (AWS) S3: Used for secure file storage and content delivery. AWS is GDPR-compliant and data is processed according to their Privacy Notice.

We have appropriate data processing agreements in place with these providers to ensure your data is handled in compliance with GDPR requirements.

6. Cookies

We use the following types of cookies:

Essential Cookies

• Theme Preference: Stores your light/dark mode preference for a better user experience
• Cookie Consent: Remembers your cookie preferences so we don't ask you again

Analytics Cookies (with consent)

• Google Analytics: Helps us understand how visitors interact with our website. These cookies are only set after you provide consent via our cookie banner. You can withdraw consent at any time by clearing your browser cookies.

We implement Google Consent Mode v2, which means analytics data is only collected when you explicitly accept cookies. If you reject cookies, no tracking data is collected. You can manage cookies through your browser settings at any time.

7. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate personal data
• Right to Erasure: You can request deletion of your personal data ("right to be forgotten")
• Right to Data Portability: You can request your data in a structured, commonly used, machine-readable format
• Right to Restrict Processing: You can request limitation of processing of your personal data
• Right to Object: You can object to processing based on legitimate interests
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit using TLS/SSL, secure server infrastructure, and regular security assessments.

9. International Data Transfers

Some of our third-party service providers may process data outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR requirements.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data protection rights, or have concerns about how we handle your data, please contact us:

You also have the right to lodge a complaint with a supervisory authority, particularly in the EU Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.