Privacy Policy

1. Introduction

MobVex ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service"). By using the Service, you consent to the data practices described in this policy.

This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Google Play Developer Program Policies, and applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you register, we collect your email address, name, and authentication credentials (via Firebase Auth).
• Billing Information: Payment processing is handled by Stripe. We do not store full credit card numbers. Stripe collects and processes payment details in accordance with their privacy policy.
• App Inventory Data: Package names, app names, and competitor lists you add for monitoring and analysis.
• Communication Data: Information you provide when contacting support or responding to surveys.

2.2 Information Collected Automatically

• Usage Data: Tool usage, credits consumed, feature interactions, and page visits.
• Device Data: Browser type, operating system, device identifiers, IP address.
• Cookies and Similar Technologies: See our Cookie Policy for details.

2.3 Third-Party App Data

Our Service retrieves publicly available information from Google Play Store and Apple App Store, including app listings, reviews, ratings, and rankings. This data is publicly accessible and is used to provide analysis and insights to our users.

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Process transactions and manage your account
• Generate keyword rankings, review analyses, and ASO reports
• Send service-related communications (alerts, updates, security notices)
• Monitor and analyze usage patterns to improve Service performance
• Detect, prevent, and address technical issues or fraud
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), our legal basis for processing your data includes:

• Contractual necessity: Processing required to provide the Service you requested.
• Legitimate interests: Improving our Service, preventing fraud, and ensuring security.
• Consent: Where you have given explicit consent for specific processing (e.g., marketing emails).
• Legal obligation: Compliance with applicable laws and regulations.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

• Service Providers: Firebase (Google Cloud), Stripe (payments), DeepSeek AI (primary analysis), Google AI (Gemini, fallback analysis), and other subprocessors necessary for Service operation. App store review data transmitted to AI providers is anonymized prior to processing — reviewer identities are removed before transmission, and no personally identifiable information is shared with AI services.
• Legal Requirements: When required by law, subpoena, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Upon account deletion, personal data is removed within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, billing records).

7. Your Data Rights

7.1 GDPR Rights (EEA Users)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with your local data protection supervisory authority

7.2 CCPA Rights (California Residents)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising privacy rights

To exercise any of these rights, contact us at info@ceymob.com.

8. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and secure authentication via Firebase. However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your data is processed and stored on Google Cloud Platform servers located in the United States (us-central1 region). For EEA users, we rely on Standard Contractual Clauses (SCCs) and Google Cloud's GDPR-compliant data processing terms as the legal mechanism for data transfers.

App store review data may be processed by AI providers located outside the EEA, including DeepSeek AI (China) and Google AI (United States). All reviewer identities are anonymized before transmission to these providers, ensuring no personally identifiable information is transferred.

10. Children's Privacy

Our Service is not directed to individuals under 13 years of age (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children under this age threshold. If we become aware that a child under the applicable minimum age has provided us with personal data, we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or through a prominent notice on our Service. Continued use after changes constitutes acceptance.

12. Contact Us

For privacy-related inquiries or to exercise your data rights, contact us at: