Privacy policy
What ConvertDash collects, why, for how long, and your rights.
Last updated 17 October 2026
This policy covers analytics.convertnow.tools, the hosted ConvertDash service. The website convertnow.tools has its own privacy policy, which also covers buying a plan there.
Who is responsible
For your account, and for the visits to this website, the controller under the GDPR is Prateek Prashant Zare, Claudiusstr. 10, 10557 Berlin, Germany. Email [email protected].
For the visitors of the websites you track, you are the controller and we process their data for you, on your instructions. Our terms include that agreement.
Three groups of people
ConvertDash handles data about three groups, in very different amounts. Each has its own section below.
- You, the account holder. You sign up, add websites and read reports.
- Visitors to the websites you track. The tag on your website counts their page views.
- Visitors to this website. We count our own pages with ConvertDash too.
1. You, the account holder
| What | Why | How long |
|---|---|---|
| Name, email address and a hash of your password | To run your account, sign you in and send the emails you ask for | Until you close your account |
| Sign in sessions: a hash of your network address and your browser name | To keep you signed in and spot a session that is not yours | 30 days after the last use |
| The websites you add, your settings, goals, saved views and client links | To provide the service | Until you remove them or close your account |
| Your plan, licence key and the order number from the payment provider | To unlock what you paid for, and for tax records | As long as tax law requires, usually 10 years |
| Emails you send us | To answer you | Up to 3 years |
The legal basis is the contract with you (Art. 6 (1) (b) GDPR), our legal duties for invoices and tax records (Art. 6 (1) (c)), and our legitimate interest in keeping the service secure (Art. 6 (1) (f)).
We never see your card or bank details. Payments are taken on convertnow.tools by Stripe, Razorpay or Cashfree, and each handles your payment under its own privacy policy.
2. Visitors to the websites you track
The tag is built to collect as little as possible. For each page view it records:
- the page address and title, and the website the visitor came from;
- campaign tags in the address, such as utm_source, utm_medium and utm_campaign;
- browser, operating system, device type, screen size and language;
- the country, looked up from the network address;
- time on the page, how far the visitor scrolled, and the clicks and events you switch on.
The network address itself is never written to the database. To tell one visitor from another within a day, the service builds a hash from the address, the browser and a secret that changes every day. Yesterday’s visitor cannot be matched to today’s, and nobody, including us, can turn the hash back into an address.
The tag sets no cookies and stores nothing on the visitor’s device, so it needs no consent banner in most countries. It sends nothing to anyone but this service.
Detailed records are kept for as long as your plan and your retention setting say. On the free plan that is 90 days. Daily totals are kept for the life of your account. Closing your account deletes all of it within 30 days.
3. Visitors to this website
We count the pages of analytics.convertnow.tools with ConvertDash itself, in the same cookieless way as above. Our legal basis is our legitimate interest in knowing how the site is used (Art. 6 (1) (f) GDPR). Client links and embedded dashboards are not counted.
The app sets a few cookies of its own, only to sign you in and remember choices. They are listed in the cookie policy.
Who else handles data
| Provider | What they do |
|---|---|
| Hostinger | Runs the servers and the database, and sends our email |
| Cloudflare | Carries the traffic to this website, protects it from attacks and tells us the visitor’s country |
| Stripe, Razorpay and Cashfree | Take payments on convertnow.tools |
| Anthropic or OpenAI | Only if you switch on written AI summaries for a site: they receive that site’s report findings, never data about single visitors |
Some of these providers work outside the European Union. Where they do, the transfer is covered by an adequacy decision or the European Commission’s standard contractual clauses. We do not sell data, and we do not use it for advertising.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to limit how we use it, or to receive it in a portable format. You can object to processing based on our legitimate interest. Email [email protected] and we answer within one month.
If you are a visitor of a website that uses ConvertDash, please ask that website first: they decide what is collected. We help them answer you.
You can also complain to a data protection authority. Ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
Security
Every connection is encrypted. Passwords are stored only as strong hashes, and secrets such as payment and email keys are kept out of the database. Access to the servers is limited to the operator.
Children
ConvertDash is a tool for website owners and is not meant for anyone under 16.
Changes
When this policy changes, the date at the top changes too. If a change matters for your account, we email you before it takes effect.