Privacy notice — pre-launch draft

This notice requires business-owner review before public launch. Operator: Mellizos Services, Malta. Contact: info@mellizosservices.com (delivery must be verified before launch).

Information processed

We store your agency name, account email, monitored site addresses, configuration, encrypted integration credentials, daily aggregate form and analytics counts, connection status, alerts, audit records, and Stripe customer/subscription identifiers. The connector does not send form field values, names, visitor emails, IP addresses, ad click identifiers, or lead-level records. Do not include personal data in site names.

Purpose and providers

Account authentication, subscription administration, and measurement monitoring. Proposed processors are Cloudflare (hosting/database), Google (your authorized analytics and Ads API), Stripe (billing), and Resend (transactional email). Cards are entered on Stripe, not in our application. Processor contracts, processing locations, lawful bases and transfer safeguards must be finalized before launch. No marketing enrollment is implied by registration.

Controls and retention

You can disconnect Google in the app and revoke it in your Google account, rotate the WordPress pairing key, pause monitoring, and manage billing. Sessions last 24 hours; sign-in links expire after 15 minutes. Audit records expire after 90 days. An enforceable aggregate-data retention policy and self-service account deletion/export are not yet implemented; contact the operator for requests once launched. Cancellation stops renewal in Stripe according to the portal configuration and is separate from deletion. This draft does not claim compliance certification.

Cookies

One essential secure session cookie is used. This application has no advertising cookies or third-party marketing scripts.