Privacy Policy

1. Controller

Hamatra
Zurichstrasse 45
6004 Lucerne
Switzerland
Represented by Michael Trachsel
hi@hamatra.com

1a. Our role

Hamatra is the controller for the personal data described in this notice and decides why and how it is processed. Where our providers process data on our instructions, they act as processors. Paddle acts as our reseller and Merchant of Record and is an independent controller for the order and payment data it collects.

2. Data we process

• Account data: your email address and authentication details when you create an account.
• Analysis data: the website addresses you submit and the results generated from crawling them.
• Report and branding data: client names, logos and colours you add for white-label reports.
• Billing data: your name, email address, country, subscription and purchase records needed to provide and account for paid plans. Card details are collected by Paddle, never by us.
• Support messages: the content of messages and suggestions you send us.
• Technical data: server log data such as IP address, browser type and time of request, created automatically when the website is accessed.

3. Purposes and legal bases

We process this data to provide the service you requested and maintain your account and saved reports (performance of our contract), to handle purchases, subscriptions, invoicing and tax compliance with Paddle (contract and legal obligation), to answer support requests (contract and legitimate interest), to keep the service secure and prevent fraud and abuse (legitimate interest), to measure website usage with Google Analytics (your consent), and to comply with legal record-keeping obligations (legal obligation).

4. Google Analytics

We use Google Analytics 4, a service provided by Google Ireland Limited, to understand how this website is used, for example which pages are viewed and how visitors arrive. Google Analytics sets cookies and processes usage data such as a shortened IP address, pages visited, approximate location, device and browser information, and the language you selected. This data may be transferred to and processed in countries outside Switzerland and the EU, including the United States. We use it only in aggregated form to improve the website; we do not use it for advertising or profiling.

5. Cookies and your consent

Cookies and similar storage that are technically necessary — for example to keep you signed in, to remember your language, or to run checkout — are always active. Google Analytics is only loaded after you agree in the cookie banner. If you decline, no analytics cookies are set and no usage data is sent to Google. You can change your decision at any time by clearing this website's stored data in your browser, which makes the banner appear again.

6. Who we share data with

• Paddle.com Market Limited, our reseller and Merchant of Record, receives the billing data needed to sell our plans, manage subscriptions, take payments, handle refunds, calculate and remit tax, and issue invoices. Paddle also handles buyer enquiries about orders.
• Service providers acting on our instructions: Lovable, which hosts and operates this website and its backend.
• Google Ireland Limited, for website usage statistics, only after you consent.
• Professional advisers, such as accountants or lawyers, where needed to run and account for the business.
• Authorities or courts, where we are legally required to disclose data.

7. International transfers

Some of these recipients are located outside Switzerland and the EEA, including in the United States and the United Kingdom. Where that is the case, transfers rely on an adequacy decision or on standard contractual clauses with additional safeguards. We do not sell personal data.

8. Retention

Temporary analyses are removed automatically after a short period. Saved reports and account data are kept while your account exists and are deleted or anonymised on request. Billing and invoicing records are kept for as long as accounting and tax law requires, normally ten years. Technical log data is kept only as long as needed for security and troubleshooting.

9. Your rights

You may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, and a copy of the data you provided. You may also object to processing based on legitimate interests and withdraw consent at any time. We respond within one month. If you are in the EEA or the UK you may also complain to your supervisory authority; in Switzerland, to the Federal Data Protection and Information Commissioner. To exercise these rights, write to hi@hamatra.com.

10. Analysing third-party websites

When you submit a website address, we retrieve publicly accessible pages of that website. You are responsible for ensuring that you are entitled to analyse the website you submit.

11. Security

We apply appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, including encryption in transit, access controls and limited administrative access. No transmission over the internet can be guaranteed to be completely secure.

12. Changes

We may update this policy when the service or legal requirements change. The current version is always published on this page.