Privacy Policy

Last updated: 4 October 2026

Sonar Analytics ("Sonar") is a website analytics service. Sonar Analytics is a trading name of FL1 Digital Limited, registered in England & Wales (company number 14742450), registered office: The Pinnacle, Midsummer Boulevard, Milton Keynes, MK9 1BP ("we", "us"). This policy explains what personal data we handle, and why, when you:

• visit our website or use the Sonar app (as a customer);
• browse a website that uses Sonar (as a visitor);
• use our WordPress plugin or Shopify app.

Questions? Email support@sonar-app.co.uk.

Our two roles

• For customers, we are the controller of your account information: we decide how it's used to run your account.
• For visitors to our customers' websites, the website owner is the controller and we are their processor: we collect and analyse visits only on their instructions, to provide their analytics. If you are a visitor with a question about a particular website, please contact that website's owner. We'll help them respond.

Information about customers

What	Why	Legal basis (UK/EU GDPR)
Email address, name and profile picture (from Google or GitHub if you sign in that way)	To create and secure your account and to contact you about it	Contract
Company name, websites you add, settings, dashboards, saved questions, email report recipients	To provide the service you've configured	Contract
Billing details: plan, billing history and a Stripe customer ID. We never see or store your card number: Stripe handles payments.	To charge for paid plans	Contract, legal obligation (tax records)
Support messages	To help you	Legitimate interests (customer support)
Technical logs (IP address, browser, errors) when you use the app	To keep the service secure and working	Legitimate interests (security, reliability)

We send you service emails (for example security notices, sign-in links, billing receipts, reports you've set up). We'll only send marketing emails if you've agreed, and you can unsubscribe at any time.

Information about website visitors

When a website uses Sonar, the Sonar script on its pages sends us:

• the page address and title, and the referring website or search engine;
• campaign tags in the address (UTM parameters);
• screen size, browser language and time zone;
• the browser's user agent (browser, operating system and device type);
• the visitor's IP address, which we use to estimate country and city and to tell visits apart.

The Sonar script doesn't set cookies or use similar storage on visitors' devices, and we don't track people across different websites or sell their data.

Depending on the features a website owner uses, we may also process:

• Live chat: messages a visitor sends, and any name or email they choose to give.
• Identify users: details the website owner chooses to attach to a visit (for example a customer ID or email).
• Shopify stores: add-to-cart, checkout and order events, with order ID, order total, currency and number of items. We don't receive shoppers' names, emails, addresses or payment details from Shopify.

Website owners can exclude IP addresses from tracking and ask us to delete their data. They are responsible for telling their visitors about analytics in their own privacy notice and, where the law requires it, for asking consent.

AI features

When you use an AI feature (for example a dashboard summary, a session summary or Ask Sonar), we send the relevant analytics figures or query results to Anthropic to generate the answer. Anthropic processes this data on our behalf and does not use it to train its models.

Who we share data with

We use these service providers (sub-processors) to run Sonar. Each may only use the data to provide its service to us:

Provider	Purpose
Supabase	Database and sign-in
Render	Application hosting
Stripe	Payments and invoices
SendGrid (Twilio)	Sending email
Anthropic	AI summaries and answers
Google, GitHub	Sign-in, if you choose them
Shopify	Our Shopify app, if a store installs it

We may also share information if the law requires it, to protect our rights or users' safety, or as part of a business sale or reorganisation (in which case this policy continues to apply).

International transfers

Some of our providers process data outside the UK and the European Economic Area, including in the United States. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.

How long we keep data

• Account information: for as long as your account is open, then deleted or anonymised, except what we must keep for legal reasons (such as billing records, typically six years).
• Visitor analytics: for as long as the customer's account is open, unless the customer deletes it sooner. When an account is closed, its analytics data is deleted.
• Support messages and technical logs: only as long as needed for the purposes above.

Security

We protect data with encryption in transit (HTTPS), access controls that limit each customer to their own data, and encryption of sensitive credentials at rest. No system is perfectly secure, but we work to keep your data safe and will tell you and the relevant authorities about a breach where the law requires it.

Your rights

Depending on where you live, you can ask us to access, correct, delete or export your personal data, or to restrict or object to how we use it. If you've given consent, you can withdraw it at any time. To make a request, email support@sonar-app.co.uk. If your request is about a website that uses Sonar, we'll pass it to (or help) that website's owner.

If you're in the UK, you can complain to the Information Commissioner's Office (ico.org.uk). In the EU, you can contact your local data protection authority. We'd appreciate the chance to help first.

Cookies on our own website and app

Our website and app use your browser's local storage to keep you signed in and to remember preferences such as your theme and selected site. These are strictly necessary for the app to work. We don't use advertising cookies. We may use Sonar itself to measure visits to our website, which doesn't use cookies.

Children

Sonar is a business service and isn't intended for children under 16.

Changes

We'll update this page when our practices change, and tell customers by email or in the app about significant changes.

Contact

FL1 Digital Limited, registered in England & Wales (company number 14742450), registered office: The Pinnacle, Midsummer Boulevard, Milton Keynes, MK9 1BP

Email: support@sonar-app.co.uk