Legal
Privacy Policy
Last updated: March 2026
1. Who we are
ogma (ogma.fixli.eu) is an AI visibility analytics platform operated and owned by fixli.eu Kft, a Hungarian limited liability company registered in Hungary.
Data Controller: fixli.eu Kft, Hungary
Contact: support@fixli.eu
Supervisory authority: NAIH (Nemzeti Adatvédelmi és Információszabadság Hatóság), www.naih.hu
2. Data we collect
- Account data: email address and name (via Clerk authentication)
- Scan data: URLs you submit for analysis, scan results, scores, and raw crawl data
- Analytics data: pages visited, feature usage, events (only if you accept analytics cookies — see Section 7)
- Billing data: subscription status and payment history (managed by Stripe — we do not store card details)
- Email engagement: whether you open or click our emails (via Resend)
3. How we use your data
- To provide and improve the ogma service
- To send weekly digest and onboarding emails (opt-out available in Settings)
- To process payments and manage subscriptions
- To understand how the product is used and fix problems (analytics, only with consent)
- We do not sell your data to third parties
4. Sub-processors and international data transfers
We use the following third-party processors. Some are located in the United States. Where data is transferred outside the European Economic Area (EEA), we rely on Standard Contractual Clauses (SCCs) approved by the European Commission (GDPR Art. 46(2)(c)) or, where applicable, adequacy decisions.
| Processor | Purpose | Location | Transfer basis |
|---|---|---|---|
| OpenAI | Brand analysis, llms.txt generation, GEO roadmap task generation, AI visibility polling (ChatGPT) | US | SCCs |
| Anthropic | AI visibility polling — probing how Claude answers queries about your brand | US | SCCs |
| Google LLC (Gemini API) | AI visibility polling — probing how Gemini answers queries about your brand | US | SCCs + adequacy |
| Perplexity AI | AI visibility polling — probing how Perplexity answers queries about your brand | US | SCCs |
| Google LLC (PageSpeed Insights) | Core Web Vitals measurement | US | SCCs + adequacy |
| Clerk | Authentication, user management | US | SCCs |
| Stripe | Payment processing, subscription management | US | SCCs + adequacy |
| Resend | Transactional & marketing email delivery | US | SCCs |
| PostHog | Product analytics (only with your consent) | EU (eu.i.posthog.com) | No transfer — EU region |
| Hetzner | Server infrastructure, database hosting | EU (Germany) | No transfer — EEA |
When URLs are scanned, the submitted URL and the public page content are sent to OpenAI, Perplexity AI, and Google PageSpeed Insights for analysis. No account data or personal identifiers beyond the URL are included in those requests.
You can request a copy of the applicable SCCs for any processor by emailing support@fixli.eu.
5. Data retention
- Anonymous scans (no account): retained for 30 days, then automatically deleted by our retention cron job
- Free plan scans: retained for 30 days, then automatically deleted
- Starter plan scans: retained for 90 days
- Pro / Agency scans: retained for 1 year
- Authenticated user scans: retained as long as the account is active; deleted within 30 days of account deletion
- Email addresses (free scan gate): retained for up to 90 days for product follow-up emails, then deleted
- Account deletion: all personal data deleted within 30 days of account deletion request
- Analytics (PostHog): retained for 1 year if you have accepted analytics cookies
6. Your rights (GDPR Art. 15–22)
As a data subject under the GDPR, you have the following rights:
- Right of access (Art. 15): Request a copy of the personal data we hold about you and information about how we process it.
- Right to rectification (Art. 16): Ask us to correct inaccurate or incomplete personal data.
- Right to erasure / “right to be forgotten” (Art. 17): Request deletion of your personal data. You can also delete your account directly in Settings → Delete Account.
- Right to restriction of processing (Art. 18): Ask us to pause processing of your data — for example while a rectification request is being resolved.
- Right to data portability (Art. 20): Receive your personal data in a structured, machine-readable format (e.g. JSON) so you can transfer it to another service. Contact us to request an export.
- Right to object to processing (Art. 21): Object to processing of your data where we rely on legitimate interests (Art. 6(1)(f)). We will stop unless we have compelling legitimate grounds that override your interests.
- Right to withdraw consent (Art. 7(3)): You can withdraw consent for analytics cookies at any time. Clear the
ogma_consentkey from localStorage and reload the page to see the consent banner again. - Right not to be subject to automated decisions (Art. 22): ogma does not make legally significant automated decisions about individuals based solely on automated processing.
To exercise any of the rights above, email support@fixli.eu. We will respond within 30 days.
Right to lodge a complaint (Art. 77): If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Hungarian supervisory authority: NAIH (Nemzeti Adatvédelmi és Információszabadság Hatóság), www.naih.hu, postal address: H-1055 Budapest, Falk Miksa utca 9-11. You may also contact the supervisory authority in your country of residence or place of work.
7. Cookies and tracking
We use two categories of cookies:
Essential cookies — always active
__clerk_*— Clerk authentication session (required to stay logged in)ogma_consent— stores your cookie preference (localStorage)
Analytics cookies — only with your consent
ph_*— PostHog analytics (pages visited, feature usage). Retained for 1 year. Stored in localStorage.
PostHog is configured on the EU endpoint (eu.i.posthog.com) to keep analytics data in Europe.
No advertising cookies. No cross-site tracking. No third-party ad networks.
8. Marketing emails
If you sign up, you will receive onboarding and product update emails. You can unsubscribe at any time via the link in each email or in Settings.
9. Legal basis for processing
- Contract performance (Art. 6(1)(b)): account data, scan data, billing
- Consent (Art. 6(1)(a)): analytics cookies (PostHog), marketing emails
- Legitimate interests (Art. 6(1)(f)): security logging, fraud prevention