acceleroi

Privacy Policy

Last updated: 2 November 2026

acceleroi OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia ("acceleroi," "we," "us," or "our") operates the website acceleroi.com. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website, tools, and services.

1. Information We Collect

Information you provide directly

  • Contact form submissions: name, email address, website URL, and revenue range.
  • Audit tool data: when you use our free CRO audit tool, we collect your website URL and capture screenshots of your website to generate the audit report.
  • Email communications: any information you share when you contact us via email.

Information collected automatically

  • Analytics data: pages visited, time on site, referral source, device type, browser type, and general geographic location.
  • Cookies and tracking technologies: see Section 3 below for details.

2. How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries and provide requested services.
  • Generate CRO audit reports when you use our audit tool.
  • Improve our website, tools, and services.
  • Analyze website traffic and user behavior to improve user experience.
  • Send relevant communications about our services (only with your consent).
  • Comply with legal obligations.

3. Cookies and Tracking

How measurement starts depends on where you are. In the European Union, the European Economic Area, the United Kingdom, Switzerland, Monaco, Andorra, San Marino, Vatican City, the Faroe Islands, Gibraltar, Guernsey, Jersey and the Isle of Man (the listed countries), and whenever acceleroi's website cannot tell where you are, a consent banner on your first visit lets you choose between "Accept" (analytics cookies enabled) and "Necessary only" (no analytics cookies). Until you accept, analytics runs in cookieless mode only and session recording is disabled. There, acceleroi uses no advertising cookies, even after "Accept". Everywhere else there is no banner: analytics and Google Ads conversion measurement are on from your first visit, as if you had chosen "Accept".

To know where you are, acceleroi's website asks acceleroi's server for the country of your IP address, as acceleroi's host, Vercel, reports it. acceleroi's code there reads only the country and does not store your IP address or the answer; Vercel, as the hosting provider, keeps its standard request logs. Outside the listed countries, or after "Accept", your browser keeps the answer for 30 minutes in acceleroi's cookie "ac_geo", for www.acceleroi.com only, holding only a two-letter country code. Google Ads conversion measurement runs only when acceleroi's server places your connection outside the listed countries, or after you choose "Accept" in the banner shown there. Ad personalization is always off.

If your browser sends a Global Privacy Control signal, acceleroi treats it as "Necessary only" wherever you are, unless you choose "Accept" yourself. You can change your choice at any time via the your privacy choices link in the footer. Choosing "Necessary only" there turns off analytics cookies and Google Ads conversion measurement, and deletes the analytics, advertising and "ac_geo" cookies set on acceleroi.com. It is also how California residents opt out of the sale or sharing of personal information. acceleroi does not sell personal information. Outside the listed countries, acceleroi lets Google measure whether a click on an acceleroi ad led to a request or a signup; ad personalization and remarketing stay off. "Necessary only" or a Global Privacy Control signal turns this off.

The services acceleroi uses for analytics and ad measurement: Google Analytics 4 (GA4), Google Ads, Microsoft Clarity and PostHog.

What each one does:

  • Google Analytics 4 (GA4): collects data about how visitors interact with the website, including pages visited, session duration, and traffic sources. Google may process this data on servers outside the EU. See Google's Privacy Policy.
  • Google Ads: outside the listed countries, Google Analytics 4 may use advertising cookies to connect a click on an acceleroi ad with what happens next, so Google Ads can count whether that visit led to a request or a signup. Ad personalization and remarketing are off. In the listed countries, this does not run. See Google's Privacy Policy.
  • Microsoft Clarity: records anonymized session replays and heatmaps that show acceleroi how visitors use the website. Clarity does not collect personally identifiable information. It loads only after "Accept", or by default outside the listed countries, and does not load after "Necessary only" or with a Global Privacy Control signal. See Microsoft's Privacy Statement.
  • PostHog: PostHog loads from acceleroi's own address. After "Accept", or by default outside the listed countries, it records the pages you view, your clicks (with the text of what you click), form starts and submissions, page speed, where you click and scroll (for heatmaps), a replay of your visit and the errors the page runs into (the error message and where in the page's code it happened). Every form field, and every element acceleroi marks as personal, is masked in replays and never sent; an email address written in a page's text, and the key of a private link, are removed before anything is sent. It sets a cookie named "ph_" followed by acceleroi's project key, for www.acceleroi.com only, holding a random visitor ID (replaced by your acceleroi account number once you sign in) and the current session, and keeps a copy in your browser's storage. Inside the listed countries until you make a choice in the banner, and everywhere after "Necessary only" or with a Global Privacy Control signal, acceleroi's website only tells PostHog that a page was opened and left (and, when you send a form, acceleroi's server tells it which form, the page's address without its query, store names or report IDs, the country of your connection and the kind of device), without loading PostHog's own script: no cookie, nothing of PostHog's stored in your browser (after "Necessary only", only your banner choice is kept, in local storage), no clicks, heatmaps, page speed or replay. Each of these visits is counted with a hash PostHog computes on its own servers from your IP address and browser. acceleroi's website sends nothing that connects this count to what PostHog records after "Accept": the count carries no visitor ID, and "Accept" starts a new random one. PostHog receives your IP address and uses it to estimate your country and city. PostHog stores this data in the United States; transfers from the EU are covered by the European Commission's standard contractual clauses. See PostHog's Privacy Policy.

Video: the one-minute video on the home page is hosted on YouTube. Until you press play, the page shows a still of it from acceleroi's own address and loads nothing from YouTube or Google. When you press play, the video plays in YouTube's privacy-enhanced mode (youtube-nocookie.com), and Google receives your IP address and browser details to deliver it. With analytics on, acceleroi's analytics record that you played it and how much of it you watched. See Google's Privacy Policy.

Campaign cookie: after "Accept", or by default outside the listed countries, acceleroi's own cookie "ac_ft", for www.acceleroi.com only, keeps the campaign tags (such as utm_source) of the visit that first brought you, for 180 days. A link from the website to the acceleroi app then carries your PostHog visitor ID and those campaign tags in its address. Choosing "Necessary only", or reopening your privacy choices, deletes it and PostHog's cookie.

Ad clicks: if you arrive from an acceleroi ad on Google, Microsoft or Meta and Google Ads conversion measurement is on for you (outside the listed countries), acceleroi keeps the ad's click identifier and campaign tags in your browser's local storage for up to 90 days. If you then apply, acceleroi stores them with your application and tells Google Ads whether the click led to an application, a qualified lead or a customer (with the deal's value), to see which ads work. PostHog receives only the campaign tags and the kind of ad the click came from, never the identifier. "Necessary only" and Global Privacy Control turn this off.

Forms: when you send a form (a request, an audit signup, the newsletter, a score claim or a calculator's results), acceleroi stores what you entered (never a password) in its customer database (Attio), together with the country of your connection as acceleroi's host, Vercel, reports it, the page you sent the form from, the page that referred you there (when your browser shares it), the campaign tags in their addresses, and the kind of device you used (phone, tablet, computer or an automated client, read from your browser's user agent, which is not stored). With an audit signup or the newsletter, the ad click identifier and campaign tags kept under "Ad clicks" are stored with it too. The newsletter asks you to confirm your address first: until you click the link in the one email it sends, acceleroi keeps your request only in its own database, for up to 31 days if you never confirm, and nothing reaches Attio or acceleroi's mailing list.

Identifiers: if you create an account or identify yourself (for example by requesting an audit report), and analytics cookies are on (after "Accept", or by default outside the listed countries), acceleroi associates your sessions with a pseudonymous internal user ID in Google Analytics (the "User-ID" feature) to understand usage across devices. acceleroi may also send your email address to Google Analytics through its user-provided data feature; it is hashed (made unreadable) in your browser before transmission. Outside the listed countries, Google may also use that hashed address to measure ad conversions. With analytics cookies on, acceleroi sends PostHog that internal user ID and your email address as written, kept on your PostHog profile, so a request, a signup and later use of the acceleroi app read as one journey. When you send a form (a request, an audit signup, the newsletter, a score claim or a calculator's results), acceleroi's server also records it in PostHog: with analytics cookies on, linked to your PostHog visitor ID, with your email address and, where you gave one, your store's address, the page you sent it from, the page that referred you there and the campaign tags; with them off, with no cookie, identifier, email address or store, only which form it was, the page it came from (with any store name or report ID in its address left out), the country of your connection and the kind of device. For the newsletter, PostHog first records only that a confirmation email was sent, without your email address, and the signup itself once you confirm, with these details only if analytics cookies were on both when you signed up and when you confirmed. The server also counts each finished audit and its score, with nothing that identifies you or your store. When a page or a request fails on acceleroi's server, the server records the error in PostHog (its type, the first line of its message and where in acceleroi's code it happened, with email addresses, private link keys and query strings removed) and the page's address without its query: with analytics cookies on, linked to your PostHog visitor ID; with them off, with no cookie or identifier. You can object at any time by selecting "Necessary only" in your privacy choices or by contacting acceleroi.

Linked records: when you send one of those forms with analytics cookies on, acceleroi's customer database (Attio) also keeps a link to your PostHog visitor profile and, when there is one, to the replay of that visit, and PostHog keeps the address and ID of your Attio record. Until you confirm a newsletter signup or a score claim, that link waits with your request in acceleroi's own database. With analytics cookies off, no such link is made.

Short questions: with analytics cookies on, acceleroi may ask one short optional question, such as what stopped you from sending an application or how useful your audit report was. Your answer is stored in PostHog, with any email address in it removed. If acceleroi already has your contact (you sent a form before, or you are signed in), the answer is also added to your record in Attio; otherwise acceleroi's servers keep nothing of it. With analytics cookies off, no question is asked.

You can additionally manage or disable cookies through your browser settings. Disabling cookies may affect the functionality of the website.

4. Data Sharing

We do not sell, rent, or trade your personal data to third parties.

We may share your data with:

  • Service providers: trusted third-party processors that help us operate our website and deliver our services:
    • Vercel: hosting, including the servers that capture the pages the audit tool checks.
    • Neon: the website's database.
    • Resend: the emails the website sends, and acceleroi's mailing list. Each contact holds an email address, a first name if given, which list it is on and where the signup came from. An audit signup also holds the audited site's address, the audit date, its score and counts of serious issues. It also holds whether the report is public or private, the follow-up stage, how many follow-ups were sent and when the last one was sent.
    • Attio: acceleroi's customer database, where form submissions go (see "Forms" in Section 3).
    • Anthropic: AI analysis of the pages and screenshots the audit tool captures.
    • PostHog, Google (Analytics 4 and Ads) and Microsoft (Clarity): analytics and ad measurement, as Section 3 describes.
    • Explee: the service acceleroi uses to send cold outreach emails. When someone replies with interest, acceleroi's server collects the reply from Explee and adds it to Attio.
    • Clearbit and Google's favicon service: a store's logo on the audit pages, looked up by the store's web address and loaded from them by your browser.
  • Legal requirements: if required by law, regulation, or legal process.

All third-party processors are contractually bound to protect your data and use it only for the purposes we specify.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Specifically:

  • Contact form data: retained for the duration of our business relationship and up to 2 years after last contact.
  • Audit tool data: a daily cleanup deletes each audit made on the website 12 months after it was made, with its screenshots, results and any analytics data. Published score pages are deleted too. The audit's mailing-list contact in Resend is deleted, unless it is subscribed to the newsletter. A subscriber keeps the contact without the audit's site address, date, score, issue counts, report visibility, follow-up stage, emails sent and last follow-up. An acceleroi account stays while it exists; the address of an audit it was waiting for is cleared. The audit tool's lead records older than 12 months are deleted too, such as a page address entered before signing up. acceleroi's record of sending a sign-up to Attio keeps only the email address after 12 months; the audited site's address is cleared.
  • Plan records: the plans and code acceleroi's engine writes for changes in the Shopify app are deleted 30 days after they were last updated.
  • Analytics data: retained according to the default retention periods of each analytics platform.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of access: request a copy of the personal data we hold about you.
  • Right to rectification: request correction of inaccurate or incomplete data.
  • Right to erasure: request deletion of your personal data.
  • Right to restrict processing: request that we limit how we use your data.
  • Right to data portability: receive your data in a structured, machine-readable format.
  • Right to object: object to the processing of your data for certain purposes.
  • Right to withdraw consent: withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at info@acceleroi.com. We will respond to your request within 30 days.

7. Contact for Privacy Inquiries

If you have any questions or concerns about this Privacy Policy or our data practices, please contact:

Denys Pankov
acceleroi OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia
info@acceleroi.com

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.