Legal
Privacy Policy
Last updated: December 1, 2024
Introduction
EarlyCRO ("we", "us", or "our") is run by Spruik in Melbourne, Australia. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our conversion rate optimization platform and related services.
Information We Collect
Account Information
When you create an account, we collect:
- Name and email address
- Company name and website URL
- Password (hashed with Argon2, never stored in plain text)
Analytics Data
When our SDK is installed on your website, we collect data about your visitors:
- Page views and navigation patterns
- Click and scroll behavior for heatmaps
- Form interactions (which fields were used, not what was typed)
- Session recordings, if you turn them on (form inputs are masked)
- Device and browser information
- Experiment assignments and conversions
How We Use Your Information
We use the collected information to:
- Provide and maintain our services
- Generate analytics, heatmaps, and recordings for your dashboard
- Run A/B tests and calculate statistical results
- Send you service-related communications
- Improve our platform and develop new features
- Comply with legal obligations
Data Protection
How we protect your data:
- Data travels over HTTPS
- Each account can only reach its own data
- Data is held on servers in Germany, with daily backups
Privacy Controls for Your Visitors
What EarlyCRO does to respect your visitors' privacy:
- Input masking: Form inputs are masked in session recordings
- IP addresses: We don't store visitor IP addresses
- Data retention: Events are deleted after 90 days and recordings after 30 days
Your Rights
You can ask us to:
- Show you the personal data we hold about you
- Correct it if it's wrong
- Delete it
Email rye@spruik.co and we'll sort it out.
Data Retention
We keep your account details while your account is active. Analytics events are deleted after 90 days and session recordings after 30 days. If you delete your account, the rest goes within 90 days.
Third-Party Services
We use the following third-party services:
- Hetzner: Server hosting in Germany
- Google Analytics: Only if you connect your own GA4 property
- Shopify: Only if you connect your own store
Each provider has their own privacy policy and we only share the minimum data necessary to provide our services.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.