Privacy policy

Who we are

Big Tony is run by made by courage, s.r.o.. We are the controller of your personal data. Questions or requests: uncle@bigtony.io.

What we collect

When you ask for an audit: your store URL, your email address, the language of the audit and your IP address.

When you unlock a plan: Stripe handles the payment. We only get a record that the audit was paid (amount, currency, Stripe session ID). We never see your card details.

When you rate an audit: your vote, your optional comment and a random ID stored in your browser. No name or email.

Why we use it

To run the audit and email you the link (contract). To send you updated audits of your store and a short personal note asking how the audit helped (legitimate interest, you can unsubscribe in any email). To handle payments and refunds (contract, accounting law). To stop abuse, such as too many audits from one IP address (legitimate interest). To measure which of our ads work: we send Meta a hashed (unreadable) version of your email when you ask for an audit (legitimate interest).

Audit pages are public

Each audit lives at a long random link that is not listed anywhere. Anyone with the link can open it, and search engines may find it if the link is shared. The page shows your store and Tony's findings, never your email. Want an audit taken down? Write to us.

Cookies and browser storage

One cookie remembers the language you picked. Your browser also stores which to-dos you ticked and your feedback ID. Our analytics (Ahrefs Web Analytics) use no cookies. No advertising cookies.

Who helps us

MailerSend (emails), Stripe (payments), Meta (ad measurement), Ahrefs (visit statistics), OpenAI (AI analysis of your store's public pages), ScrapingBee (loading your store's pages) and our server host. They process data only on our behalf. Some of them are outside the EU and are covered by EU standard contractual clauses or the EU-US Data Privacy Framework.

How long we keep it

Audits and your email stay until you ask us to delete them or we shut down the service. Payment records stay as long as accounting law requires (10 years in Slovakia).

Your rights

You can ask for a copy of your data, a correction, deletion, a restriction, or object to how we use it. Write to uncle@bigtony.io, we will answer within a month. You can also complain to the Slovak data protection authority (Úrad na ochranu osobných údajov SR, dataprotection.gov.sk).