Privacy
This page describes the working system, not promises “for later”. Contact: avtonomuss@gmail.com.
What this data is for
The public site explains the product. The app runs the business analysis. We take only what is needed to open a page, create an account, run a check, or answer you.
Creating an account is consent to the personal-data processing and cross-border transfer described below. No extra checkbox is required: the action is stored as evidence.
Operator
Privacy contact: avtonomuss@gmail.com.
What we process
- Site: pages you open, language, language-preference cookies, Yandex Metrica cookies and identifiers, IP, and technical browser data.
- App: internal ID, email, name if you gave it or Google sent it, workspace membership, consent records, a payment link.
- Analysis: site, niche, market, public products, services, prices, SERP, competitors, site structure, recommendations. This is business data, not a personal form.
- We do not ask for IIN, date of birth, gender, home address, or a personal phone number.
Purpose and legal basis
The basis is your consent (articles 7–8 of the Republic of Kazakhstan Law on Personal Data and Their Protection). Purposes: show the site, create an account, run an analysis, tell one run apart from the next, accept payment if you start it, and keep the service safe.
Where it is stored
Account records and consents are kept on a server in Kazakhstan (Almaty). Analysis data is in hosted Supabase, ap-northeast-1 (Tokyo). The public site runs in Docker on the same Kazakhstan VPS. Sign-in is processed by Supabase Auth.
Who else receives data
- Supabase — account and database.
- Vercel — the app.
- Railway — the analysis worker and MCP.
- OpenAI — chat text and analysis facts after personal identifiers are removed.
- Google — app sign-in and, if you choose, connecting your Search Console.
- Yandex Metrica — visits to the public site, including Webvisor of public pages.
- Providers of search-demand and results data — only what the business analysis needs.
- Tole — payment, if you start it.
Cross-border transfer and AI
Data leaves the country when the services above run. Creating an account confirms this too. The model should not receive email, password, tokens, or payment data. Accidental personal contacts on collected pages are masked. Analysis and recommendations are formed in part by artificial intelligence systems.
Retention
Account data — until you delete it or withdraw consent. Guest analysis — until you create an account or the guest space sits unused. Consent evidence stores a hash of the consent text, not extra personal fields. We do not store a competitor’s full HTML. Host logs follow the host’s usual periods.
Your rights
You can ask for access, correction, withdrawal, and deletion. In the app: Settings → “Withdraw consent” or “Delete account”. Or write to avtonomuss@gmail.com. Withdrawal is reviewed within 15 working days, unless another legal basis requires keeping the data.
Version
Policy version: 2026-08-26. The current text is always on this page.
What are people already searching for in your niche?
Check in about 5 minutes. The first data is free.