Privacy policy

Last updated: April 22, 2026.

This policy describes what data Convalytics collects, how we use it, and the rights you have over your data.

Owner and data controller

Tethered Software Inc.
305 Chapel Hill Road, Atlantic Highlands, NJ 07716, United States

Owner contact email: dan@prompthub.us
Product support: hello@convalytics.dev

The two data flows

Convalytics has two distinct data flows. Understanding both helps clarify what each section below covers.

  1. Analytics data your application sends us. When you install Convalytics in your app, your app emits events about your end users. We store and display these events in your dashboard.
  2. Dashboard account data. When you sign in to convalytics.dev to view your analytics, we store the minimum data needed to identify you and manage your team and billing.

Analytics data your application sends us

Page view events (browser script tag)

  • The URL and referrer of each page load on your site
  • An anonymous visitor ID stored in localStorage of the visitor's browser
  • Viewport dimensions and user agent string
  • UTM parameters if present in the URL

Custom events (server-side and browser-side track calls)

  • The event name, userId, sessionId, timestamp, and any props you pass. You control the data.

User identifiers

  • Whatever you pass to convalytics.identify() or the userEmail / userName fields on analytics.track(). These are the identifiers of your end users, supplied by you.

Retention

Event data is retained for the duration specified by your plan: 90 days on Free, 1 year on Solo, 5 years on Pro. After retention expires, records are deleted automatically.

Dashboard account data

When you sign in to convalytics.dev, we store:

  • Your Google account email and display name (via Google OAuth)
  • Team membership and role
  • Billing information (handled by Stripe; we never receive card numbers)
  • Session cookies for your Convalytics login

What we don't do

  • We do not fingerprint visitors (no canvas, WebGL, audio, or font enumeration)
  • We do not cross-site track visitors between different Convalytics projects (each writeKey is scoped to exactly one project)
  • We do not store analytics visitor IP addresses beyond request processing
  • We do not sell or rent any of the data described above

Third parties

  • Convex. Backend hosting for both the dashboard and the ingest endpoints. Governed by Convex's privacy policy.
  • Stripe. Payment processing for paid plans. Governed by Stripe's privacy policy.
  • Resend. Transactional email (usage alerts, billing notifications).
  • Google. OAuth sign-in only. We only receive the account information you authorize during sign-in.

Your rights

  • Access and export. Export your project's analytics data as CSV from the dashboard.
  • Delete. Delete your entire project at any time, which removes all associated analytics data.
  • Account deletion. Request deletion of your account and all associated data by emailing hello@convalytics.dev.

For GDPR, CCPA, or other statutory data rights, email us and we will honor requests within the statutory window.

Cookies on convalytics.dev

The marketing pages and dashboard set only the cookies required for authentication session management. We do not run Convalytics analytics (or any other third-party analytics) on the public pages of this site.

Changes

If we update this policy, we will update the "Last updated" date at the top. For material changes, we will notify active account holders by email.

Contact

Privacy and data-controller questions: dan@prompthub.us. General product support: hello@convalytics.dev.