Privacy Policy

Foretellr — registered address: [to be completed by the owner]

Last updated: 27 September 2026

Foretellr ("we", "us", "our", or "Company") operates the Foretellr platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services. By accessing and using Foretellr, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy.

We are the controller of the personal data you provide to us and are responsible for ensuring that the processing of your data complies with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Information We Collect and How We Use It: For Account Holders. When you create an account on Foretellr, we collect and process the following personal data: your name, email address, workspace and billing metadata (organization name, subscription tier, usage data), and payment information processed through LemonSqueezy (we do not store credit card data directly). If you sign in using Google OAuth, we receive your Google profile information (name and email). We use this information to provide our services, manage your account, process payments, send service announcements, and comply with legal obligations.

Information We Collect and How We Use It: For End-User Visitors. When Foretellr's SDK is deployed on a customer's website, we collect data about visitors to that site for the purpose of running and measuring experiments. This data includes: a randomly generated visitor ID (stored in localStorage on the visitor's device, not on Foretellr-controlled servers until an event is recorded); the page URL the visitor is viewing; device class (mobile, tablet, or desktop) and browser type (Chrome, Firefox, Safari, or Edge) derived from the user agent; the experiment ID and variation code assigned to the visitor; conversion events and their associated goal IDs; and optional custom attributes that the customer configures and the visitor provides. We do not set cookies on behalf of Foretellr; all tracking is initiated by the customer's implementation of the SDK.

We collect this visitor data to enable our customers to run and measure the effectiveness of their experiments. The data is used solely for statistical analysis and experiment measurement. Data is retained for 13 months from the date it is recorded; after this period it is automatically deleted.

Legal Basis for Processing: For account holders, we process your personal data on the basis of contract (to provide our services), your consent (for marketing communications), and our legitimate interests (to improve our services and prevent fraud). For end-user visitor data, we rely on our customers' lawful basis for directing the collection and measurement of experiments on their sites; our customers are responsible for obtaining appropriate user consent and providing transparency to their visitors.

Sub-processors: We engage the following sub-processors to help us provide our services: Amazon Web Services (AWS) in the eu-central-1 region for hosting our infrastructure, database backups, and email delivery via Amazon SES; Neon for PostgreSQL database services; LemonSqueezy for payment processing and subscription management (your payment card information is processed directly by LemonSqueezy and never transmitted to or stored by Foretellr); and Google for OAuth sign-in services. Each of these processors is contractually bound to protect your data in accordance with applicable data protection laws.

Data Retention: Account data (name, email, workspace information) is retained for as long as you maintain your account. Upon deletion of your account, your personal data is deleted within 30 days, except where we are required by law to retain it. Visitor event data collected through the SDK is retained for 13 months from the date of collection and is then automatically deleted.

Your Rights: Under the GDPR and other applicable data protection laws, you have the right to access, correct, port, restrict, or delete your personal data. You also have the right to object to our processing of your data and to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us at the email address below. We will respond to your request within 30 days of receipt.

International Transfers: Your personal data may be transferred to, stored in, and processed in countries other than your country of residence, including the United States and other countries. These countries may have data protection laws that differ from your country of origin. By using Foretellr, you consent to the transfer of your information to countries outside your country of residence, which may provide a different level of data protection than your home country. We implement appropriate safeguards, such as Standard Contractual Clauses, to protect your data during international transfers.

Data Processing Agreement: For customers who are subject to GDPR or other data protection regulations, we can provide a Data Processing Agreement (DPA) that sets out the terms and conditions for the processing of personal data. Please contact us to request a DPA.

Security: We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, please note that no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your personal data, we cannot guarantee its absolute security.

Changes to This Privacy Policy: We may update this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or other factors. We will notify you of any material changes by updating the "Last updated" date above and, where appropriate, by sending you a notice or requesting your consent. Your continued use of Foretellr following the posting of changes constitutes your acceptance of those changes.

Contact Us: If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at [owner to provide contact email].