Privacy Policy

Overview

BlueFrogAnalytics ("we," "us," or "our") operates the website bluefroganalytics.com and provides GTM auditing, analytics implementation, and tracking remediation services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Information We Collect

Information You Provide

Contact information: name, email address, phone number, company name when you fill out forms or request a scan
Account information: email and authentication data if you create an account
Communication data: messages you send through our contact form or email
Payment information: processed securely through Stripe; we do not store card numbers

Information Collected Automatically

Usage data: pages visited, time spent, referral source, and interactions with our site
Device data: browser type, operating system, screen resolution, and language preference
Network data: IP address (anonymized in analytics), general geographic location
Cookies and similar technologies: see "Cookies" section below

Scan and Audit Data

Website URLs: domains you submit for scanning
Technical findings: GTM container issues, analytics configuration problems, and performance metrics from public-facing pages
We only scan publicly accessible pages. We never access private or authenticated areas of your website.

How We Use Your Information

To provide and improve our scanning and audit services
To communicate with you about your account, scans, or service requests
To send you audit results and recommendations
To process payments for paid services
To analyze site usage and improve our website and services
To send marketing communications (only with your consent; unsubscribe anytime)
To comply with legal obligations

Cookies and Tracking Technologies

We use cookies and similar technologies to operate our site and understand how you interact with it. You can manage your preferences using the cookie settings banner that appears on your first visit, or by clicking "Cookie Settings" in the footer at any time.

Information Sharing

We do not sell your personal information. We may share data with:

Service providers: Stripe (payments), Google (analytics), Mailchimp (email), Smartlead (outreach) — all bound by data processing agreements
Legal compliance: when required by law, subpoena, or regulatory request
Business transfers: in connection with a merger, acquisition, or sale of assets

Data Retention

Account data: retained while your account is active, then deleted within 90 days of account closure
Scan results: retained for 12 months from the date of the scan
Marketing data: retained until you unsubscribe or request deletion
Server logs: retained for 30 days

Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you
Correct inaccurate personal information
Delete your personal information
Port your data to another service
Opt out of the sale of personal information (CCPA)
Withdraw consent for non-essential data processing

To exercise these rights, visit our Data Rights page or email privacy@bluefroganalytics.com.

We will respond to all verified requests within 30 days (45 days for complex requests with notice).

California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act:

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information held by businesses
Right to opt out of the sale of personal information
Right to non-discrimination for exercising your CCPA rights
Right to correct inaccurate personal information (CPRA)
Right to limit use and disclosure of sensitive personal information (CPRA)

We do not sell personal information as defined by the CCPA.

European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland:

Our legal bases for processing are: consent, contract performance, legitimate interest, and legal obligation
You have the right to lodge a complaint with your local data protection authority
International transfers are protected by Standard Contractual Clauses

Security

We implement industry-standard security measures including:

TLS encryption for all data in transit
Encrypted storage for sensitive data at rest
Regular security audits and penetration testing
Access controls and least-privilege principles
Incident response procedures

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated "Last updated" date. For significant changes, we may also notify you by email.

Contact Us

For privacy questions or to exercise your data rights:

Email: privacy@bluefroganalytics.com
Data rights form: bluefroganalytics.com/data-rights
General inquiries: bluefroganalytics.com/contact