Privacy Policy

Last updated: October 11, 2026

This Privacy Policy explains what data Smart Analytics (smartanalytics.site), operated by Thynkai Corp ("we", "us"), collects, how it is used, and your rights. The short version: we collect almost nothing.

1. What we do NOT collect

  • We do not collect your name, address, phone number, or payment information
  • We do not require an account or login
  • We do not use tracking cookies or fingerprinting
  • We do not build user profiles
  • We do not sell, rent, or share personal data with third parties
  • We do not store the URLs you scan on the server (scan results exist only in your browser)

2. What we do collect

Google Analytics (GA4)

We use Google Analytics to understand how many people use the tool and which features are useful. GA4 collects:

  • Anonymous page view data
  • General geographic region (city-level, not precise location)
  • Device type and browser
  • Referral source (how you found the site)

GA4 does not identify you personally. We cannot see who you are from this data. Google processes this data under their own privacy policy.

Email (optional, only if you provide it)

If you voluntarily provide your email address for weekly reports — either through the signup button or through the Ask AI chat — we store it in a database (Turso) for the sole purpose of sending you the reports you requested. We do not use your email for marketing, newsletters, or anything you did not ask for. You can unsubscribe from any email with one click.

Anonymous site category

When you scan a website, we detect the general industry category (such as "ecommerce" or "healthcare") and log it anonymously via GA4. We do not log the actual URL you scanned. This helps us understand what types of businesses use the tool.

3. Ask AI chat

When you use the Ask AI chat feature, your questions and a summary of your scan results (scores, issue titles, category scores) are sent to OpenAI's API to generate responses. We do not send personally identifiable information to OpenAI. The scan summary contains only technical metrics about the website you scanned, not about you. Chat conversations are not stored on our servers — they exist only in your browser session and disappear when you close the page.

4. Browser storage (localStorage and sessionStorage)

We use your browser's local storage to enhance your experience:

  • Scan history (localStorage): We store a compact summary of your scan results (score, date, top issues) keyed by URL. This allows the AI to reference your previous scan when you re-scan the same site. Maximum 20 entries. This data never leaves your browser — it is never sent to our servers.
  • Security results (sessionStorage): If you run the Vulnerability Check, the results are stored temporarily in your browser tab so the AI chat can reference them. This data is cleared when you close the tab.

You can clear this data at any time through your browser settings (Clear Site Data).

5. Data processing

When you scan a URL, the tool fetches that URL's public HTML from the server side, analyzes it, and returns the results to your browser. The HTML is not stored. The results are not stored on the server. When you close the tab, the results are gone.

If you subscribe to weekly reports, your email and the URL you chose are stored in a database hosted by Turso (turso.tech) in their US infrastructure. This data is used only to send your weekly report.

6. AI data processing

We use AI in two ways:

  • Ask AI chat: Your questions and scan score summaries are sent to OpenAI (gpt-4o-mini) to generate conversational responses. No personally identifiable information is sent. Only technical scan metrics and your question text.
  • Competitor discovery: When you use "Find My Competition", publicly available content of the scanned website is sent to OpenAI for analysis. No personal information is included — only the page's public HTML content.

AI-generated content on this site is disclosed as AI-assisted. The weekly report email states "This report uses AI-assisted analysis."

7. Third-party services

  • Google Analytics (GA4): anonymous usage data
  • Google Preferred Sources (publisher.js): allows users to follow us in Google Search
  • Vercel: hosting provider (processes requests)
  • Turso: database for email subscriptions
  • Brevo: email delivery for weekly reports
  • OpenAI API: AI-powered chat and competitor analysis

Each of these services has their own privacy policy. We choose services with strong privacy practices and do not share user data beyond what is necessary for each feature to function.

8. Cookies

Smart Analytics does not set its own cookies. Google Analytics may set a first-party measurement cookie (_ga). No advertising cookies, no third-party tracking cookies.

9. Your rights

You have the right to:

  • Know what data we hold about you (if you gave an email, that is what we have)
  • Request deletion of your email from the weekly reports database
  • Unsubscribe from emails at any time with one click
  • Use the tool without providing any personal information
  • Request a copy of your data in a portable format

For Canadian residents (PIPEDA)

Smart Analytics is operated by Thynkai Corp, a Canadian company. Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to access, correct, and request deletion of your personal information. We collect only what is necessary (email address, if voluntarily provided) and state the purpose clearly (weekly reports). To exercise your rights, contact us at support@smartanalytics.site.

For EU/UK residents (GDPR)

You have additional rights under GDPR including data portability and the right to lodge a complaint with a supervisory authority. Since we hold minimal data (an email if you chose to provide one), exercising these rights is straightforward.

10. Data retention

Email subscriptions are retained until you unsubscribe or request deletion. Feature requests on the wishlist are retained indefinitely for product development purposes. Anonymous GA4 data is retained according to Google's default settings (14 months). Browser localStorage data is retained until you clear it.

11. Age requirement

This tool is intended for users aged 17 and older. We do not knowingly collect data from anyone under 17. If we learn that we have collected personal information from a person under 17, we will delete it promptly.

12. Security

The site uses HTTPS encryption. Database access is restricted by authentication tokens. API routes are rate-limited to prevent abuse. We take reasonable measures to protect any data we hold but cannot guarantee absolute security (no one can).

13. Changes

We may update this policy. The "Last updated" date at the top will change when we do. Material changes will be reflected here.

14. Contact

Privacy questions: support@smartanalytics.site

Thynkai Corp · Canada

Data Processing Agreement (DPA)

Smart Analytics does not process personal data on behalf of other organizations. There is no controller-processor relationship because the tool does not collect or store personal data beyond voluntary email subscriptions. A formal DPA is not applicable. If you need written confirmation that your users' data is not stored when using this tool, contact us directly.

Refund Policy

There is nothing to refund. Smart Analytics is free. No payments are collected, no subscriptions are charged, no credit cards are stored. If a paid feature is introduced in the future, a separate refund policy will be published at that time.

Service Level Agreement (SLA)

There is no SLA. This tool is provided free of charge with no uptime guarantees, no guaranteed response times, and no committed availability. We make reasonable efforts to keep it running but outages can happen.

Cyber Liability and Transparency

Smart Analytics scans publicly available web pages. It does not access restricted areas, bypass authentication, or perform penetration testing. If you believe the tool has produced an incorrect result about your website, you can disregard it. No results from this tool should be treated as a definitive security assessment. For actual security audits, consult a qualified cybersecurity professional.

If you discover a security vulnerability in Smart Analytics itself, please report it to support@smartanalytics.site. We will address it promptly.