1. Information we collect

When you use ConversionNaija, we collect:

• Audit inputs — the URLs you submit for analysis, the device mode you selected, and the site type you identified.
• Audit outputs — the verdict, JDI checklist, revenue leaks, and psychological scores we generate.
• Account information (if you sign up) — your email address and a hashed password. Google sign-in users share a name and email via Google's OAuth flow.
• Rate-limit data — for anonymous users, your IP address is held briefly in server memory to enforce the free-tier cap. It is not written to disk and is cleared on server restart.
• Session cookies — small cookies set by our authentication provider to keep you signed in.
• Usage analytics — anonymized events (audit started, completed, failed) sent to Mixpanel for aggregate product measurement. Properties include device type and the audited URL's hostname; no full URLs, passwords, or page content are included.

2. Information we deliberately do not collect

• Screenshots of audited sites — when the tool analyzes a page, it captures visual frames in server memory for AI evaluation, but these are never written to disk, never transmitted to you, and never stored in any database or storage bucket. They are discarded the moment the request finishes.
• Payment information — we do not currently process payments.
• Data about visitors to the sites you audit — we analyze page layouts, not user traffic.

3. How we use your information

• To run the audit you requested and return the report.
• To save your audit history (signed-in users only) so you can revisit past reports.
• To enforce fair-use limits for anonymous and signed-in users.
• To send essential service information (sign-up confirmation, policy updates).

We do not sell your data, and we do not use it to train third-party AI models.

4. Third-party services

Running ConversionNaija requires sending data to these providers. Each has its own privacy practices:

• Supabase — authentication and database; stores your email, account data, and audit history.
• Google Gemini API — receives the page context for CRO analysis (see Google's AI privacy notice).
• OpenRouter — receives the same context when fallback models (GPT-4o, Claude) are used.
• OAuth providers — Google (if you sign in with Google) shares your basic profile data per your OAuth consent.
• Mixpanel — product analytics. Configured for EU data residency and localStorage-only persistence (no tracking cookies). Session replay is enabled to help us reproduce bugs; replays mask password and sensitive form fields.

5. Cookies and storage

We use session cookies only to keep you signed in. Our analytics provider (Mixpanel) uses localStorage-only persistence — no advertising cookies, no cross-site identifiers, no data sold or shared with advertisers.

6. Data retention

• Audits (signed-in users): stored until you delete your account or ask us to remove them.
• Anonymous audits: not stored.
• Account information: stored until you delete your account.
• Rate-limit records: cleared automatically on server restart or after 30 days, whichever comes first.

7. Your rights

You have the right to:

• Access the data we hold about you.
• Correct any inaccurate information.
• Delete your account and associated audits.
• Object to specific uses of your data.
• Export your audit history in machine-readable form.

Email hello@conversionnaija.com to exercise any of these rights. We respond within 30 days.

8. Security

All connections are encrypted in transit (HTTPS). Passwords are stored only in hashed form by our authentication provider. We follow industry-standard practices, but no system is completely immune to breaches — please use a strong, unique password.

9. Children

ConversionNaija is intended for users aged 18 and over. We do not knowingly collect data from children. If you believe a child has submitted data to us, please contact us and we will delete it.

10. Changes to this policy

We may update this policy as the product evolves. When we make material changes, we will update the "Last updated" date above and notify signed-in users by email.

11. Contact

Aivra Lab — ConversionNaija
Email: hello@conversionnaija.com