1. Acceptance of Terms

By accessing or using the AnalyticsProof platform ("Service"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree, you may not use the Service.

2. Service Provider

The Service is operated by:

Dataras s.r.o.
IČO: 19362731
Roháčova 145/14, Žižkov (Praha 3), 130 00 Praha
Czech Republic
Email: info@analyticsproof.com

3. Description of Service

AnalyticsProof provides automated compliance and analytics testing across three platforms:

• Web: Web Compliance Scan (CMP validation, cookie consent, vendor audit) and Web Journey Scan (diff-based DataLayer integrity monitoring)
• Android: Android Compliance Scan (GDPR consent testing for Android apps) and Android Journey Scan (proxy-based analytics validation)
• TV: TV Compliance Scan (consent and tracking compliance) and TV Journey Scan (analytics integrity monitoring)

Services are organized on a project-based model. Each project can contain multiple scan targets and team members.

4. Subscription Plans and Pricing

The Service is available in the following tiers:

• Free (€0/month): 1 website and 1 recorded journey of up to 10 steps, checked about every two weeks (actions such as clicks and typing count; scrolling does not), a Web Compliance scan at least once a month, email alerts, 3-month results history, 1 project
• Starter (€49/month): 1 website, 3 recorded journeys per website (up to 60 steps each) and Web Compliance scans, checked every day, manual journey re-runs, unlimited results history, email and Slack alerts, API access, email support
• Professional (€149/month): Your website plus Android and TV apps, all 6 scan types, 5 recorded journeys per website and per app (up to 200 steps each), daily checks at a set hour, manual rescans, Git/CI checks (the GitHub pull request check and CI/CD preview runs), API access, priority support
• Enterprise (price on request): Everything in Professional, up to 20 recorded journeys per website and per app (up to 1,000 steps each), invoice-based billing, dedicated support

On the Free plan, results of scans older than 3 months are not viewable; they are not deleted, and upgrading to a paid plan restores access to them.

After verifying their email, a new user may receive a 14-day free trial of the Starter plan for one project; no payment card is required. Unless a paid plan is chosen, the project switches to the Free plan when the trial ends.

Plans are billed per project. With annual billing you pay for 10 months and get 2 months free (Starter €490/year, Professional €1,490/year). Prices are in EUR and are final. We are not registered as a VAT payer. EU businesses with a valid VAT ID account for VAT in their own country.

A discount code applies either to the first payment only or for as long as the subscription runs; you'll see which when you order. Free months with a code are available once per customer. After them, the subscription continues automatically and we charge the first payment to the card you entered. You'll see the date and amount of that first payment when you order, and we'll send you a reminder email 7 days before. Until then, you can cancel any time in Billing and pay nothing.

5. Payments and Billing

All payments are processed securely through Stripe. Subscriptions are billed in advance on a monthly or annual basis and renew automatically unless cancelled. We will provide at least 30 days' notice before any price changes take effect.

6. Refunds and Cancellation

Money-back guarantee. If AnalyticsProof isn't right for you, let us know within 14 days of your first subscription payment via "Complaints and refunds" in Billing or at info@analyticsproof.com, and we'll refund everything you paid for the subscription. No reason needed. Each customer can use the guarantee once. If your subscription started with free months, those months are your try-out, so the guarantee doesn't cover the first payment after them.

When we refund, the subscription ends right away and the project moves to the Free plan. Your projects and results stay, and the Free plan's results history rules apply to them.

Cancellation. You can cancel any time in Billing. Your plan runs until the end of the paid period, then the project moves to the Free plan.

We look at every request individually. If something went wrong, we're happy to help outside the guarantee too.

Right of withdrawal (consumers). As a consumer, you may withdraw from the contract within 14 days of concluding it (the day you ordered the subscription), without giving a reason. Just send us any clear statement: use "Withdraw from contract here" in Billing, email info@analyticsproof.com, or use the model form below. We'll refund everything you paid straight away, by the same payment method, within 14 days of your withdrawal at the latest. You pay nothing for the days you used the service. If your subscription started with free months, withdrawing ends it and nothing is charged. If you withdraw online, we'll confirm receipt by email straight away, including its content and the date and time it was sent.

Model withdrawal form

(complete and return this form only if you wish to withdraw from the contract)

To: Dataras s.r.o., Roháčova 145/14, Žižkov (Praha 3), 130 00 Praha, Czech Republic, info@analyticsproof.com
I hereby give notice that I withdraw from my contract for the provision of the AnalyticsProof service (project: …).
Concluded on: …
Name of consumer: …
Address of consumer: …
Email: …
Signature of consumer (only if this form is sent on paper): …
Date: …

6.1 Complaints

If something doesn't work as it should, tell us via "Complaints and refunds" in Billing or at info@analyticsproof.com. We'll confirm receipt by email straight away. We'll resolve your complaint without undue delay, within 30 days at the latest (a refund request within 14 days at the latest), and email you the outcome with our reasons. Money you're entitled to goes back the same way you paid, the moment we decide; it usually shows in your account within 5–10 business days.

Consumers' statutory rights are not affected in any way. If we can't settle a dispute together, a consumer may turn to the Czech Trade Inspection Authority (ČOI), which handles out-of-court consumer disputes and is also the supervisory authority: https://coi.gov.cz.

7. Account Creation and Security

You may register using email/password, Google, Microsoft, or GitHub authentication. You are responsible for maintaining the security of your account credentials and for all activities under your account. Projects support four roles: Owner (full control), Admin (manage settings, team and billing), Editor (manage scans and tests), and Viewer (read-only access).

8. Acceptable Use

You agree not to:

• Scan websites or applications without proper authorization from their owner
• Use the Service for any unlawful purpose or to violate any applicable laws
• Attempt to reverse engineer, decompile, or disassemble any part of the Service
• Share account credentials with unauthorized third parties
• Interfere with or disrupt the integrity or performance of the Service
• Use the Service to harm, exploit, or target others

9. Data Processing and Privacy

We process personal data in accordance with the General Data Protection Regulation (GDPR) and our Privacy Policy (see below). All data is stored within the European Union. Scan results are stored as structured JSON in PostgreSQL databases hosted in EU data centers.

10. Email Communications

We distinguish between the following types of email communications:

• Transactional emails: Password resets, scan result notifications, team invitations, and invoices are necessary for service operation and are sent without separate opt-in.
• Marketing emails for paying customers: Based on legitimate interest pursuant to § 7(3) of Czech Act No. 480/2004 Coll., we may send commercial communications related to our services to paying customers. Every marketing email includes an unsubscribe link.
• Marketing emails for free users: Sent only with your explicit consent, given during registration via a separate checkbox. Consent is voluntary, not required for registration, and can be withdrawn at any time.

You can manage your marketing email preferences in your profile settings or via the unsubscribe link in any marketing email.

11. Intellectual Property

All content, features, functionality, trademarks, and branding of the AnalyticsProof platform are owned by Dataras s.r.o. and are protected by applicable intellectual property laws. You retain all rights to your own data and scan results generated through the Service.

12. Limitation of Liability

To the maximum extent permitted by law, Dataras s.r.o. shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from or related to your use of the Service. Compliance scan reports are informational tools and do not constitute legal advice. You should consult a qualified legal professional for compliance decisions. For consumers, this does not affect their statutory rights in respect of defective performance.

13. Disclaimer of Warranties

The Service is provided "as is" and "as available" without warranties of any kind, whether express or implied. We do not guarantee that the Service will be uninterrupted, error-free, or that all compliance issues will be detected. For consumers, this does not affect their statutory rights in respect of defective performance.

14. Term and Termination

These Terms remain in effect while you use the Service. Either party may terminate at any time. We reserve the right to suspend or terminate your account for violation of these Terms, with reasonable notice where possible.

15. Changes to Terms

We may modify these Terms at any time. For material changes, we will provide at least 30 days' notice via email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the modified Terms.

16. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the Czech Republic. Any disputes shall be resolved by the competent courts in Prague, Czech Republic. In case of any discrepancy between language versions, the Czech version prevails.

---

Privacy Policy

1. Data Controller

The controller of your personal data is:

Dataras s.r.o.
IČO: 19362731
Roháčova 145/14, Žižkov (Praha 3), 130 00 Praha
Czech Republic
Email: privacy@analyticsproof.com

2. Information We Collect

2.1 Information You Provide

When you register and use our Service, we collect:

• Account information: name, email address, password (hashed)
• Authentication data: OAuth sign-in data from Google, Microsoft, or GitHub (if used)
• Payment information: processed and stored by Stripe; we do not store full card details
• Project data: project names, scan target URLs, team member assignments
• Communication preferences: marketing consent status

2.2 Information Collected Automatically

When you access our Service, we may automatically collect:

• IP address and approximate location
• Browser type and version
• Operating system
• Pages visited and time spent
• Referring website

2.3 Scan Data

When scans are executed, we collect and store:

• Scan results (compliance scores, detected vendors, violations) as structured JSON
• Technical metadata (scan duration, viewport settings, timestamps)
• Target website information (URLs, detected CMP implementations)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Contract performance (Art. 6(1)(b)): Account creation, service delivery, subscription management, scan execution
• Legitimate interest (Art. 6(1)(f)): Service security, fraud prevention, analytics for service improvement, marketing communications to paying customers (§ 7(3) Czech Act No. 480/2004 Coll.)
• Consent (Art. 6(1)(a)): Marketing communications to free users
• Legal obligation (Art. 6(1)(c)): Tax and accounting records, responding to legal requests

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process subscriptions and payments
• Execute compliance scans and generate reports
• Send transactional communications (scan results, invoices, account notifications)
• Send marketing communications (with appropriate legal basis)
• Respond to inquiries and provide customer support
• Detect and prevent fraud or unauthorized access
• Comply with legal obligations

5. Email Communications

We send the following types of email communications:

5.1 Transactional Emails

These are necessary for service operation and are sent without separate opt-in:

• Password reset links
• Scan result notifications
• Team invitations
• Invoices and payment confirmations
• Account security notifications

5.2 Marketing Emails for Paying Customers

Based on legitimate interest pursuant to § 7(3) of Czech Act No. 480/2004 Coll., we may send commercial communications related to our services to paying customers. These include product updates, tips, and offers related to services you have purchased. Every marketing email contains an unsubscribe link.

5.3 Marketing Emails for Free Users

We send marketing emails to free users only with explicit consent, given during registration via a separate, unchecked checkbox. Consent is:

• Voluntary — not required for registration or use of the Service
• Specific — covers product updates, tips, and offers from AnalyticsProof
• Revocable — can be withdrawn at any time via profile settings or unsubscribe link

5.4 How to Unsubscribe

You can opt out of marketing emails at any time by:

• Clicking the unsubscribe link in any marketing email
• Toggling the marketing preference in your profile settings

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Google Cloud: Scan execution infrastructure, including Cloud Storage and Vertex AI, which analyses pages during scans (as data processor)
• Hostinger: Server hosting and email delivery (as data processor)
• Oxylabs: Network proxy for scans
• Stripe: Payment processing (as data processor)
• MyInvoice: Invoicing
• Google, Microsoft, GitHub: Sign-in, if you choose it
• Legal authorities: When required by law or to protect our rights

Error reporting (GlitchTip), bug reports (BugPin), and website and product analytics (Umami) run on our own servers; this data is not shared with third parties.

7. Data Storage and Security

All data is stored within the European Union:

• PostgreSQL databases hosted in EU data centers
• Redis caching within EU infrastructure
• Scan results stored as structured JSON in PostgreSQL

We implement appropriate technical and organizational measures including encryption in transit (TLS), hashed passwords (Argon2), and access controls to protect your data.

8. Data Retention

We keep account and project data while your account exists. Scan results are kept until you delete them (or the test or project they belong to); on the Free plan, results older than 3 months are not viewable but are not deleted. You can delete projects and your account in the Service. Payment and accounting records are kept as required by tax and accounting law.

9. Your Rights Under GDPR

As a data subject, you have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate personal data (Art. 16)
• Erase your personal data ("right to be forgotten") (Art. 17)
• Restrict processing of your personal data (Art. 18)
• Data portability — receive your data in a machine-readable format (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time without affecting lawfulness of prior processing (Art. 7(3))

To exercise these rights, contact us at privacy@analyticsproof.com. We will respond within 30 days.

10. Cookies

We use only first-party cookies and browser storage: necessary ones for sign-in and security, functional ones for your settings, and analytics ones for our own website and product analytics, based on legitimate interest. The full list is in our Cookie Policy. We do not use third-party tracking or advertising cookies.

11. International Transfers

Scan data and account data are stored within the European Union. Some sub-processors may process certain data outside the EU/EEA: payment data is processed by Stripe (incl. the United States) under the EU Standard Contractual Clauses. Sign-in through Google, Microsoft, or GitHub and parts of the AI page analysis during scans may also take place outside the EU/EEA. We rely on appropriate safeguards for any such transfer.

12. Children's Privacy

Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide notice via email or through the Service. The date of the last update is displayed at the top of this page.

14. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. The relevant authority for our company is:

Úřad pro ochranu osobních údajů (ÚOOÚ)
Pplk. Sochora 27, 170 00 Praha 7
Czech Republic
Website: www.uoou.cz

15. Contact

For questions about this Privacy Policy or to exercise your data protection rights, contact us at:

Dataras s.r.o.
Email: privacy@analyticsproof.com
Roháčova 145/14, Žižkov (Praha 3), 130 00 Praha
Czech Republic