Privacy Policy

Last updated: 14 June 2026 · BobRay, Inc.

1. Who we are

BobRay, Inc. ("BobRay", "we", "us") provides privacy-first website analytics. This policy explains what personal data we process about you as a customer of our service, and how we handle the data we collect on behalf of customers who use our analytics on their websites.

For the analytics service, BobRay acts as a data processor on behalf of our customers (the website owners), who are the data controllers. For our own customer relationship — your account, billing, and support — BobRay is the data controller.

2. Information we collect about customers

When you create an account, request a trial, or contact us, we collect:

• Account details: your name, email address, and company name.
• Billing information: the billing name, address, and payment confirmation provided by our payment processors. We do not store full card numbers.
• Communications: messages you send to our sales, support, or billing teams.
• Usage of our dashboard: basic logs needed to operate and secure your account.

3. What we collect about your website visitors

This is what makes BobRay different. When our analytics script runs on a customer's website, we are designed to collect no personal data and no cookies. Specifically, we do not:

• Set or read any cookies on a visitor's device;
• Use device fingerprinting or any persistent identifier;
• Store IP addresses (they are hashed transiently and immediately discarded);
• Track individuals across different websites or sessions.

We record only aggregate, anonymous measurements such as page URL, referrer, browser type, operating system, country (derived without storing the IP), and screen size. These cannot be used to identify a person.

4. How we use information

• To provide, maintain, and improve the analytics service;
• To set up accounts, process trials, and arrange payment;
• To respond to your sales, billing, and support requests;
• To send service-related notices and, where you have opted in, product updates;
• To detect, prevent, and address fraud, abuse, or security issues.

5. Legal basis for processing

Where the GDPR applies, we rely on: performance of a contract (to provide the service you signed up for), our legitimate interests (to secure and improve the service), legal obligation (for tax and accounting), and consent (for optional marketing emails, which you can withdraw at any time).

6. Sharing and disclosure

We do not sell personal data — not yours, and not your visitors'. We share data only with:

• Payment processors who handle your transactions securely on our behalf;
• Infrastructure providers who host our service within the EU;
• Authorities, where we are legally required to do so.

Each processor is bound by a data processing agreement. A current list of sub-processors is available on request.

7. Data retention

Aggregate analytics data is retained according to your plan (1 to 5 years), after which it is deleted. Account and billing records are kept for as long as your account is active and for the period required by law afterward. You can request deletion of your account data at any time.

8. Your rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, to object to or restrict processing, and to withdraw consent. To exercise any of these rights, email privacy@bobray.io. You also have the right to lodge a complaint with your local data protection authority.

9. Security

We protect data with encryption in transit and at rest, strict access controls, and regular security review. No system is perfectly secure, but we work hard to keep yours safe and will notify you promptly of any breach affecting your data as required by law.

10. Contact

Questions about this policy or your data can be sent to privacy@bobray.io or by post to BobRay, Inc., Prinsengracht 263, 1016 GV Amsterdam, Netherlands.

Back to home