Privacy Policy

Who we are (data controller)

Traffic Insights is operated by Vladyslav Titarenko, a sole trader trading as "Traffic Insights" (the "we", "us" and "operator").

Vladyslav Titarenko is the data controller for the personal data described in this notice.

Contact for any privacy matter: vladyslav@fame.space.

What we collect

Account data: email address, display name and avatar when you sign in with Google, or email and a password hash for email registration.

Content you upload: traffic exports (CSV, XLSX, PDF, text, screenshots), project names and metadata you enter, and analysis results generated from them.

Integration data: Google Sheets links and OAuth tokens, AppsFlyer/Adjust/Branch API credentials and webhook payloads. Credentials are stored encrypted (AES-256-GCM) and used only to fetch the data you request.

Technical data: interface language preference and session tokens stored in your browser's local storage, plus standard server logs.

How we use it

To provide the service: authenticate you, store your projects, run traffic analysis, KPI checks and valuations you request.

Uploaded datasets are sent to an AI model (via Lovable AI Gateway) to generate analysis. Datasets are not used to train models and are not shared with other users.

We do not sell your data and do not use your content for advertising.

Data isolation and access

Each account has an isolated workspace: projects, files, integration credentials and reports are visible only to their owner. Isolation is enforced at the database level with row-level security.

Access is additionally limited to the site operator for maintenance and abuse prevention.

Payment data

Traffic Insights is currently free to use. We do not sell subscriptions, do not take payments and therefore collect no billing address, card or invoicing data.

If paid plans are introduced later, this notice will be updated before any payment data is collected.

Legal basis for processing

Performance of a contract (GDPR Art. 6(1)(b)): creating and maintaining your account, running the analyses you request and storing your projects and reports.

Legal obligation (Art. 6(1)(c)): keeping transaction, invoicing and tax records for the periods required by law.

Legitimate interests (Art. 6(1)(f)): keeping the service secure, preventing fraud and abuse, maintaining server logs, and improving reliability — balanced against your rights.

Consent (Art. 6(1)(a)): optional connections you initiate, such as granting Google Sheets access. You can withdraw consent at any time by disconnecting the integration.

Third-party processors

Hosting, database and authentication: Lovable Cloud (Supabase infrastructure).

AI analysis: Lovable AI Gateway (model providers process prompts transiently to generate answers).

Sign-in: Google OAuth, if you choose it.

Professional advisers (accounting, legal) and competent authorities, where required by law.

Connected data sources (Google Sheets, AppsFlyer, Adjust, Branch) are accessed only on your request, using your own credentials.

Retention and deletion

Your projects and reports are stored until you delete them. You can delete individual projects and disconnect integrations at any time in the app.

To delete your account and all associated data, contact us at the email below — we remove or anonymise it within a reasonable timeframe, normally within 30 days.

Your rights

You may request access to, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent (for example by revoking Google access on your Google account permissions page).

We respond to requests within one month. You also have the right to lodge a complaint with your local data protection supervisory authority.

Contact: vladyslav@fame.space.

Changes

If this policy changes, we update the date above. Continued use of the service after an update means you accept the new version.