JustAnalytics

Privacy Policy

Last updated: March 1, 2026

1. Introduction

JustAnalytics ("we," "our," or "us") is operated by Velocity Digital Labs LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website analytics platform at justanalytics.app (the "Service").

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password (hashed). If you sign in via Google OAuth, we receive your name, email, and profile picture from Google.

Analytics Data We Collect on Behalf of Our Customers

Our tracking script collects the following non-personal data from visitors to our customers' websites:

  • Page URLs and page titles
  • Referrer URLs
  • Browser type and version
  • Operating system
  • Device type (desktop, mobile, tablet)
  • Country (derived from IP address, which is never stored)
  • Screen resolution
  • Session duration and page view counts

What We Do NOT Collect

  • We do not use cookies
  • We do not collect personal data or PII from website visitors
  • We do not store IP addresses
  • We do not track users across websites
  • We do not sell or share data with third parties

3. How We Use Information

We use collected information to:

  • Provide and maintain the Service
  • Display analytics dashboards to our customers
  • Send account-related emails (password resets, billing)
  • Improve the Service and fix bugs

4. GDPR Compliance

JustAnalytics is designed to be GDPR compliant by default. Because our tracking script does not use cookies, does not collect personal data, and does not track users across sites, no consent banner is required when using JustAnalytics on your website. Visitor data is aggregated and cannot be used to identify individual users.

5. CCPA Compliance

Under the California Consumer Privacy Act, we do not sell personal information. Since our analytics tracking does not collect personal information from website visitors, CCPA obligations related to visitor data do not apply. For account holders, you may request access to or deletion of your account data by contacting us.

6. Data Retention

Analytics event data is retained for the duration of your subscription. Account data is retained until you delete your account. When you cancel your subscription, your data is deleted within 30 days.

7. Data Security

We implement industry-standard security measures including encrypted connections (TLS/SSL), hashed passwords (bcrypt), and secure infrastructure hosted on Railway. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Mobile Application

Data Display Only

The JustAnalytics mobile app is a companion application that displays analytics data already collected by our servers. The mobile app itself does not collect analytics data from your device or from end users of your websites.

Push Notification Tokens

If you enable push notifications, we store a device push token on our servers solely for the purpose of delivering notifications about your analytics data (such as traffic anomalies, error spikes, and performance regressions). Push tokens are associated with your account and are deleted when you disable notifications or delete your account.

Biometric Authentication

The app offers an optional biometric lock feature (Face ID, Touch ID, or fingerprint). All biometric processing is handled entirely by your device's operating system. We do not receive, store, or transmit any biometric data. We only store a boolean preference indicating whether you have enabled biometric lock.

Secure Token Storage

Authentication tokens are stored in your device's secure enclave (iOS Keychain or Android Keystore) using Expo Secure Store. These tokens are encrypted at rest and are not accessible to other applications.

No Third-Party SDKs

The mobile app does not include any third-party analytics, advertising, or tracking SDKs. We do not collect device identifiers, advertising IDs, or usage telemetry from the app itself.

9. Third-Party Services

We use the following third-party services:

  • Railway - Infrastructure and database hosting
  • Google OAuth - Optional authentication provider
  • Resend - Transactional emails (password resets)
  • Apple Push Notification Service (APNs) - iOS push notifications
  • Firebase Cloud Messaging (FCM) - Android push notifications

10. Children's Privacy

Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@justanalytics.app.

Velocity Digital Labs LLC