Privacy Policy

1.Who we are

Acentics is run by M&J Astrexa Private Limited, a company in India. For the personal data in your account (your name, email, billing details), we decide how it's used: under the GDPR we're the controller, and under India's Digital Personal Data Protection Act we're the data fiduciary.

For data we handle on your behalf, such as the content of your sites and your Search Console data, your business is in charge and we act as its processor (see Data we process for you).

2.What we collect

• Account: your name, company name, email, phone number and password. Passwords are stored only as Argon2id hashes, which can't be turned back into the password. If you sign in with Google, we receive your name and email from Google.
• Team: the emails of people invited to your workspace, their roles and which features they can use.
• Billing: your billing name, email, phone, address, country and, if you give one, your GSTIN; your plan, payments and invoices. Razorpay tells us whether a payment succeeded, but we never see card or bank details.
• Your sites: the domains you add, their verification records, what crawls find on their public pages, fixes and their history, redirects, uptime and SSL checks, and performance test results.
• Connected services: clicks, impressions, queries and positions from Search Console and Bing, if you connect them, and the prompts and answers of AI visibility checks. Sign-in tokens and AI provider keys are encrypted with AES-256-GCM before they're saved.
• AI crawler tracking, if you turn it on for a site: the bot's name, the page path and visits per day. No IP addresses, and human visitors are never counted.
• Real-visitor speed, if you turn it on for a site: for each page view on a page with the Acentics script tag, the page path, whether the device is a phone, and five load and responsiveness timings, kept for 28 days. They're not stored with an IP address, cookie or anything else that identifies the visitor.
• Technical and support data: like any web service, our servers and hosting providers log requests (such as IP address, browser and time) to keep Acentics secure and working. We also keep the emails you send us.

3.How we use it

• to run Acentics: crawling your sites, writing and serving fixes, running the checks you set up;
• to email you about your account: verification, password resets, invitations, crawl reports, alerts you set up, renewal reminders and invoices;
• to take payments, issue invoices and keep the tax records the law requires;
• to keep Acentics secure, prevent abuse and fix problems;
• to answer you when you contact us.

We don't sell personal data, share it for advertising, or use it to build advertising profiles. We don't train AI models on your data. Anthropic, which writes AI fixes for us, doesn't train its models on data sent through its commercial API. AI visibility checks run on your own keys, under your own agreements with those providers.

4.Our legal reasons

Where the GDPR or UK GDPR applies, we rely on:

• contract, to provide the service you signed up for;
• legal obligation, to keep invoices and tax records;
• legitimate interests, to keep Acentics secure, prevent abuse and improve it, in ways you'd reasonably expect;
• consent, where we ask for it, such as connecting Search Console. You can withdraw it at any time.

Under India's DPDP Act, we process your data with the consent you give when you sign up, and for the legitimate uses the Act allows, such as complying with law.

5.Who we share it with

We use these providers to run Acentics. Each receives only what it needs for its job and must keep it secure.

AI engines you connect (OpenAI, Anthropic, Google, Perplexity) receive the prompts you write, on your own key. We may also share data with professional advisers, with authorities when the law requires it, or with a company that takes over Acentics, in which case we'll tell you first.

6.Data across borders

We're based in India, and our providers may store or process data in other countries, including the United States. Where the GDPR or UK GDPR applies, we protect those transfers with the European Commission's Standard Contractual Clauses or another lawful safeguard. We don't transfer data to any country the Indian government has restricted under the DPDP Act.

7.Cookies

Acentics uses only cookies it needs to work, so there's no cookie banner to accept. There are no analytics, advertising or third-party tracking cookies.

Your browser also stores a few preferences, such as your light or dark theme, the site you last picked in the dashboard and how you've set up its tables. These stay on your device. When you pay, Razorpay's checkout may set its own cookies, under Razorpay's privacy policy.

8.How long we keep it

• Account and workspace data: for as long as the workspace exists.
• When the owner deletes a workspace, we delete its sites, crawls, fixes, keys and reports. Copies in backups are removed as those backups expire.
• Invoices and payment records: as long as tax and accounting law requires, which in India can be up to 8 years, even after a workspace is deleted.
• Server logs: for a limited period, then deleted.

9.How we protect it

Keys and sign-in tokens are encrypted with AES-256-GCM, passwords are stored as Argon2id hashes, and sign-in cookies are HttpOnly and SameSite=Lax. If a breach affects your personal data, we'll tell you and the relevant authorities as the law requires. More detail is on our Safety page.

10.Your rights

Wherever you live, you can ask us to:

• tell you what personal data we hold about you, and give you a copy;
• correct anything that's wrong or out of date;
• delete your data, unless the law requires us to keep it;
• give you your data in a portable format;
• stop or limit some uses of it, or withdraw a consent you gave.

Email support@acentics.com. We reply within 30 days, and may need to confirm it's really you first. Many of these you can also do yourself: update your profile, disconnect a service, or delete the workspace from Settings.

India: under the DPDP Act you can also nominate someone to exercise your rights if you die or can't, and complain to the Data Protection Board of India once you've raised it with our Grievance Officer.

EU and UK: you can complain to your local data protection authority, or in the UK to the ICO.

California and other US states: we don't sell or share personal information, as those laws define it, and we won't treat you differently for using your rights.

11.Data we process for you

Acentics doesn't track the people who visit your sites. The installer changes tags in your pages, and AI crawler tracking counts bots only. Search Console and Bing data arrive as totals, not as data about individual people. If your business needs a data processing agreement, email support@acentics.com.

12.Children

Acentics is for people aged 18 and over. We don't knowingly collect data from children.

13.Changes to this policy

When we change this policy, we update it here and change the date at the top. For a significant change, we email workspace owners before it takes effect.

14.Contact

Acentics is run by M&J Astrexa Private Limited, Sripur, Asansol, Paschim Bardhaman, West Bengal 713373, India.

• General questions and privacy requests: support@acentics.com
• Billing and refunds: sales@acentics.com
• Phone: +91 80014 72811
• Grievance Officer: Suniti Roy Chowdhury, Head of Customer Relations, reachable at support@acentics.com. We acknowledge a complaint within 48 hours and resolve it within one month.