Privacy Policy

1. Who We Are

Spectra is a website intelligence suite operated by Cosmos Web Tech, a division of Ganda Tech Services (ABN 000 000 000), based in Australia. References to "we", "us", or "our" in this policy refer to Cosmos Web Tech / Ganda Tech Services.

Contact: support@g-t-s.com.au

2. What Data We Collect

Account & billing data: When you subscribe, Stripe collects your name, email address, and payment details on our behalf. We receive your email address and subscription status, but never your full card number.

Usage data: We log API requests (URL analysed, timestamp, response time) to operate and improve the service. Logs are retained for 30 days.

Content you submit: URLs, post titles, and content snippets you submit for SEO or content analysis. This data is processed in memory to generate results and is not stored after the response is returned.

Review request data (Spectra Reputation): Customer names, email addresses, and phone numbers you enter to send review requests. This data is stored only for the purpose of sending the request and is not shared with third parties.

No cookies or tracking pixels: The Spectra dashboards do not use advertising cookies or third-party tracking scripts.

3. How We Use Your Data

• To provide and operate the Spectra service
• To process subscription billing via Stripe
• To send transactional emails (subscription confirmations, review requests)
• To diagnose errors and improve service reliability
• To comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-Party Services

We use the following sub-processors:

• Stripe — payment processing. See Stripe Privacy Policy.
• Google Cloud (Cloud Run) — API hosting. Data processed in australia-southeast1.
• Cloudflare — static site hosting and CDN.
• Wix — app platform for Wix Marketplace apps. See Wix Privacy Policy.

5. Data Retention

Subscription records are retained for the duration of your subscription plus 7 years for tax compliance. API request logs are deleted after 30 days. Content submitted for analysis is not stored. You may request deletion of your account data at any time by emailing us.

6. Your Rights

Under the Australian Privacy Act 1988 (and where applicable, the GDPR), you have the right to access, correct, or delete personal data we hold about you. To exercise these rights, contact us at support@g-t-s.com.au.

7. Security

We use TLS for all data in transit, AES-256 encryption for stored credentials, and least-privilege access controls on all infrastructure. Stripe is PCI DSS Level 1 certified for card data.

8. Changes to This Policy

We may update this policy from time to time. We will post the revised policy on this page with an updated date. Continued use of the service after changes constitutes acceptance.

9. Contact

Questions about this policy? Email support@g-t-s.com.au.