Privacy Policy

This policy explains what data Comparly.ai collects, why, how long we keep it, and the rights you have over it. We collect the minimum needed to run the site and attribute affiliate clicks — we do not collect account profiles, and we never sell personal data to data brokers.

The data controller for this site is the company that operates Comparly.ai, incorporated in Singapore; its full registered details are available on request at hello@comparly.ai. This policy covers only what happens on this site. Once you click through to a third-party tool, that vendor becomes an independent controller of whatever data you give it, under its own privacy policy — we have no visibility into or responsibility for that processing.

What we collect

• A random visitor identifier (`vid`) — not tied to your name or email, only set once you accept cookies.
• Click events — which partner link you clicked, from which page, and campaign parameters (e.g. `utm_source`, `gclid`) if you arrived from an ad. Your raw IP address is never stored; we store a one-way salted hash of it for fraud detection only.
• Usage analytics — page views and session-level usage measured with Google Analytics only when the applicable consent rules allow it. Analytics is a separate choice from advertising: declining advertising leaves this measurement working, and declining analytics switches it off entirely.
• Advertising audiences— only if you accept advertising cookies. We then allow the advertising platforms we work with to add your visit to an audience, so you may see our ads elsewhere afterwards. Audience membership expires automatically after at most 540 days, and you can withdraw at any time by rejecting advertising cookies. If you decline, no audience is built from your visit. A current list of those platforms is available on request using the contact channel below. We never sell your personal information for money; under California law, using cookies for cross-context advertising counts as "sharing", which the Do Not Sell or Share control opts you out of. A Global Privacy Control signal from your browser switches advertising off on its own, whatever the banner shows.
• Conversion measurement — if you arrived from an ad and later sign up with a partner, we report that a conversion occurred to the advertising platform that referred you, matched only on the click identifier that platform gave us (e.g. `gclid`) plus the amount and time. We do not send your name, email, phone number, or IP address. This is measurement — it tells the platform which ad worked, and this conversion report itself is not used to target ads at you. A current list of the analytics and advertising platforms we report to is available on request using the contact channel below.
• Chat concierge metadata — if you use the chat widget, we record that a session happened, how many messages were exchanged, and which category it routed you to. We do not store the text content of your chat messages — the one exception is the short goal summary described in the next point.
• Your email address — only if you subscribe to the newsletter or ask Ellie for a personalized plan. We store the address, your consent date, and, for a plan, a short summary of the goal you described. It is used only to send those emails, handled by an email delivery provider acting as our processor, and never sold or shared with the vendors listed on this site. Our basis is your consent; every email has an unsubscribe link, or write to us to have it deleted.

Cookies

Data retention

• Click and visitor records are retained for 24 months, after which they are anonymized (identifiers removed) by an automated process.
• Chat session metadata follows the same 24-month cycle; chat message content is never stored to begin with.
• Conversion records used for partner revenue reconciliation are retained as long as needed for accounting/reconciliation purposes.
• Email addresses and any plan saved with them are kept until you unsubscribe or ask us to delete them.
• Event and user-level analytics data held by Google Analytics is deleted after 14 months; aggregated reports are unaffected. Advertising audience membership expires after at most 540 days.

EU/UK/EEA visitors — GDPR

If you are located in the EU, UK, or EEA, our legal basis for setting the `vid` identifier and related analytics is your consent, collected via the cookie banner — nothing is set until you accept. You have the right to: access the data we hold about you, request correction, request erasure, restrict or object to processing, and request data portability. Because our visitor identifiers are anonymous by design, most requests can be satisfied simply by clearing your cookies; for anything else, contact us using the channel below.

US visitors — CCPA/CPRA

If you are a California resident (or a resident of a state with a similar law), you have the right to know what personal information we collect, request deletion, request correction, and opt out of the "sale" or "sharing" of personal information. Because affiliate click data can be considered "sharing" under CPRA, we treat every visitor's cookie-consent rejection (see the banner shown on your first visit) as an opt-out, and we honor the Global Privacy Control (GPC)signal from your browser as a valid opt-out request automatically — no separate form needed. To exercise any of these rights, or to submit a manual "Do Not Sell or Share My Personal Information" request, email us at hello@comparly.ai.

Other jurisdictions

For visitors in Japan (APPI), Singapore (PDPA), and South Korea (PIPA), we currently apply the same GDPR-level opt-in consent behavior described above as the strictest common baseline, pending any jurisdiction-specific requirements.

Exercising your rights / contact

Email hello@comparly.ai with your request. We will respond within the timeframe required by the applicable law (typically 30 days under GDPR, 45 days under CCPA/CPRA).