Privacy Policy

Paraito Inc. is the controller of BetterMeter account, billing, support, security, and product-usage information. For analytics data collected from a customer's property, the customer determines why the data is collected and BetterMeter generally acts as its processor.

Customers are responsible for an appropriate legal basis, notices, choices, and instructions for their properties. Configuration matters: anonymous defaults and explicitly enabled identity, advertising, fingerprint, or behavior features do not create the same privacy obligations.

We process information needed to operate an account, secure the service, provide requested features, communicate with users, and administer subscriptions.

• Account information such as email address, optional name and avatar, authentication records, team membership, preferences, and session data.
• Site configuration, goals, dashboards, reports, alert rules, API-key metadata, support communications, and Pulse conversations.
• Subscription, invoice, and payment status. Payment-card details are handled by Stripe and are not stored in BetterMeter's application database.
• Credentials for customer-enabled integrations are encrypted before storage and used only to operate that connection.

A standard web event can include the query-free page URL and path, query-free referrer, recognized campaign parameters, event name and customer-supplied properties, viewport width, timezone, parsed browser, operating system and device type, geographic region derived at the edge, timestamps, and event source.

An IP address and user agent are used transiently to derive site-scoped HMAC-SHA-256 identifiers and approximate geography. Raw IP addresses are not written to persistent analytics storage. Stored page URLs and referrers exclude query strings and fragments.

• Anonymous tracking sets no BetterMeter cookie and uses no browser storage by default.
• identify() stores a customer-supplied opaque ID in site-scoped local storage until reset(). Customers must not send an email or other direct identifier unless they have authority to do so.
• data-attribution can store recognized advertising and campaign identifiers in site-scoped local storage for up to 90 days and copy bm_* attribution properties to the visitor profile. It is disabled by default and suppressed under Do Not Track and Global Privacy Control.
• Fingerprint and behavior-signal collection are separate opt-ins. Behavior signals summarize interaction timing and movement for automation detection; BetterMeter does not record typed text, screens, or session video.
• Customers can add visitor properties, display names, lifecycle stages, and external opaque IDs. Those values may be personal data depending on what the customer supplies.

We use account data to perform our contract, secure and support the service, satisfy legal obligations, and pursue legitimate interests such as preventing abuse and improving reliability. We use analytics data only to provide the service under customer instructions, maintain security, and produce the reports and AI-assisted answers the customer requests.

Where consent is the applicable basis, the customer is responsible for collecting and honoring it before enabling the relevant feature. BetterMeter does not make decisions that produce legal or similarly significant effects about tracked visitors.

We use vendors only for defined operational purposes. Core providers include Vercel for hosting and edge execution, Neon for PostgreSQL, Upstash for queues and live presence, and Vercel Blob for stored images. Google, GitHub, and Resend support sign-in and transactional email; Stripe supports billing.

Requested features may send relevant data to OpenRouter and the selected model provider for Pulse, SerpAPI, DataForSEO, or Cloro for visibility research, and Meta or HubSpot when a customer connects those services. Customer-enabled providers receive only the data needed for the requested operation and are also governed by their own terms. We may disclose information when required by law or to protect the service and its users. We do not sell personal information.

BetterMeter is operated from Quebec, Canada, and providers may process data in Canada, the United States, or other regions where they operate. We use contractual and organizational safeguards appropriate to the transfer and customer configuration.

Security measures include TLS in transit, provider encryption at rest, access controls, hashed API keys, encrypted integration credentials, secret-keyed pseudonymous identifiers, logging controls, and incident response. No system is perfectly secure, so customers should avoid sending unnecessary or sensitive data.

Analytics-event retention follows the active plan: Free 30 days, Starter 365 days, Pro 730 days, and Business without a fixed event-retention limit while the account remains active. Plan configuration shown in the service is authoritative if these periods change.

Account configuration, profiles, goals, reports, integrations, conversations, and billing records may follow different operational or legal retention periods. Queue entries are normally flushed about once per minute but can remain longer during retry or degraded operation. Account deletion removes the account, its sites, and associated analytics events after subscription safeguards and identity verification; limited records may be kept when required for security, tax, dispute, or legal obligations.

Depending on location and our role, individuals may have rights to know, access, correct, delete, port, or object to processing, withdraw consent, and complain to a privacy regulator. We respond within the period required by applicable law, generally one month under the GDPR and 45 days under applicable California law, subject to permitted extensions and identity verification.

Dashboard users can export their account data and request account deletion in settings. A tracked visitor should normally contact the customer whose property collected the event; we assist that customer with verified requests. Browser-level Do Not Track and Global Privacy Control suppress BetterMeter's optional durable ad-attribution storage.

The Privacy Officer of Paraito Inc. is responsible for BetterMeter's privacy program and can be reached at the address below. Quebec residents may also contact the Commission d'accès à l'information du Québec. Technologies that can identify, locate, or profile a person are described in section 3 and are not all enabled by default.

We will update this policy when our practices or legal obligations materially change and will post the revised date here. Where required, we will provide a more prominent notice before the change takes effect.