Welcome to OTAlytics ("we," "us," or "our"). We are committed to protecting your personal data and respecting your privacy rights. This Privacy Policy explains how we collect, use, store, and protect your information when you use our search ranking tracking service for tour operators across OTA platforms (GetYourGuide, Viator, Tripadvisor).
This policy applies to all users of OTAlytics, regardless of their subscription plan (Free, Starter, Growth, or Pro). By using our service, you agree to the collection and use of information in accordance with this policy.
OTAlytics operates under the laws of the European Union. For the purposes of the General Data Protection Regulation (GDPR), we are the data controller responsible for your personal data.
Contact Information:
Email: support@otalytics.com
For data protection inquiries: privacy@otalytics.com
When you create an account, we collect:
To provide our ranking tracking service, we collect:
We automatically collect:
Payment processing is handled by Stripe. We do not store your full credit card information on our servers. We only store:
Our service collects publicly available data from OTA platforms (GetYourGuide, Viator, Tripadvisor) including:
This data is collected using automated web scraping in compliance with applicable laws and platform terms of service.
We process your personal data for the following purposes:
You can unsubscribe from marketing communications at any time using the link in our emails.
We do not sell, rent, or trade your personal data. We only share your data in the following limited circumstances:
We share data with trusted third-party service providers who assist us in operating our service (see Section 6 for details). These providers are contractually obligated to protect your data and use it only for the purposes we specify.
We may disclose your data if required by law, including:
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. You will be notified of any such change and your options regarding your data.
We may share anonymized, aggregated statistics that do not identify you personally (e.g., "80% of Pro users track 10+ keywords").
We use the following third-party services to operate OTAlytics. Each service has its own privacy policy:
Purpose: User authentication and session management
Data Shared: Email, password (encrypted), authentication tokens
Location: EU/US data centers
Privacy Policy: https://supabase.com/privacy
Purpose: Subscription billing and payment processing
Data Shared: Name, email, payment method, billing address
Location: Global (GDPR compliant)
Privacy Policy: https://stripe.com/privacy
Purpose: Product analytics and feature usage tracking
Data Shared: Usage events, page views, feature interactions
Location: EU instance
Privacy Policy: https://posthog.com/privacy
Purpose: Error tracking and performance monitoring
Data Shared: Error logs, stack traces, user IDs
Location: US data centers
Privacy Policy: https://sentry.io/privacy
Purpose: Scraping OTA platforms for ranking data
Data Shared: Search queries (keywords, locations)
Location: US data centers
Privacy Policy: https://www.zenrows.com/privacy
Purpose: Sending account notifications and alerts
Data Shared: Email address, name, email content
Location: US data centers
Privacy Policy: https://www.twilio.com/legal/privacy
We retain your data for the following periods:
Historical ranking data is retained according to your subscription plan:
Backup copies of your data may persist for up to 30 days after deletion from production systems.
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
You can request a copy of all personal data we hold about you. We will provide this in a structured, machine-readable format (JSON/CSV) within 30 days.
You can update or correct your personal data at any time through your account settings or by contacting us.
You can request deletion of your account and all associated data. We will delete your data within 30 days, except where retention is required by law.
You can export your ranking data in CSV or JSON format through your dashboard settings.
You can request that we pause processing of your data while we verify or investigate your concerns.
You can object to processing based on legitimate interests or for direct marketing purposes.
Where we process data based on your consent (e.g., marketing emails), you can withdraw consent at any time.
If you believe we have violated your privacy rights, you can file a complaint with your local data protection authority.
To exercise any of these rights, contact us at: privacy@otalytics.com
We implement industry-standard security measures to protect your data from unauthorized access, disclosure, alteration, or destruction:
While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
OTAlytics operates primarily within the European Union. However, some of our service providers (Sentry, ZenRows, SendGrid) are based in the United States.
When we transfer data outside the EU/EEA, we ensure adequate protection through:
You have the right to obtain information about these safeguards by contacting us at privacy@otalytics.com.
OTAlytics is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.
If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@otalytics.com, and we will delete the information promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:
Your continued use of OTAlytics after such changes constitutes acceptance of the updated policy. If you do not agree with the changes, you may delete your account.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: privacy@otalytics.com
Support: support@otalytics.com
Data Protection Officer:
For GDPR-related inquiries, contact our DPO at dpo@otalytics.com
We will respond to all requests within 30 days.