Privacy Policy

This Privacy Policy is effective from November 28, 2025. This supersedes and replaces any prior Privacy Policy or agreements, whether oral or written, notified by the Company.

Welcome to GAfix.ai, a website launched by NeenOpal Inc., a Delaware corporation with its principal place of business at105 Lock Street, #219, Newark, New Jersey, United States of America 07103(hereinafter referred to as “Company’’ or “us” or “we” or “our”). The Company is the owner and operator of GAfix.ai, which can beaccessed at https://www.GAfix.ai/ (hereinafter referred to as the “Website”),and we have formulated this Privacy Policy (hereinafter referred to as the “Policy”) in accordance with the General Data Protection Regulation, 2018 and other relevant applicable laws. 

This Policy describes the Company’s policies and procedures on the collection, use, and disclosure of the user information when the user uses the Website, and it tells the user about their privacy rights. We are committed to safeguarding the privacy of our users, visitors, and all other persons who use our website.

User, for the purposes of this Policy, shall mean an entity that integrates its Google Analytics or similar analytics account with GAfix.ai and transmits data of its end customers, for audit purposes (hereinafter referred to as “you”, “user” and “your” as the context may require).

By using the Website and voluntarily providing us with identifiable Personal Data, you are consenting to our use of it in accordance with this Policy and applicable laws. This Policy applies to the use of the Website, by providing the required information for signing in, and another personal information you communicate on call or email or in person. This Policy does not apply to third-party websites/ applications that are connected via links to our website. If you do not agree with this Policy, please do not proceed further to use / access our website. 

This Policy is a part of our terms of use available at https://www.GAfix.ai/terms-of-use (“Terms of Use”) and all capitalized terms under this Policy that have not been specifically defined herein shall have the meaning as ascribed to it under the Terms of Use. In the event, we collect your Personal Data and process it for any other purpose, we will treat it as per this Policy and relevant applicable laws. Unless otherwise defined in this Policy, the terms used in this Policy shall have the same meaning as in our Terms of Use. We may update this Policy from time to time. While we will always endeavor to notify you, you must periodically review the Policy for the latest information on our privacy practices.

1. Definitions

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

  1. Account” means a unique account created for you in order to use our Website;
  2. ‘‘Consent’’ of the user refers to the freely given, specific, informed, and unambiguous indication of the user’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
  3. Cookies” are small files that are placed on your device by a website, containing the details of your browsing history on that website among its many uses;
  4. Data Controller”, for the purposes of the GDPR (General Data Protection Regulation), refers to the Company as the legal person which, alone or jointly with others, determines the purposes and means of the processing of Personal Data;
  5. Personal Data” means any information relating to the user, who can be identified, directly or indirectly, particularly referring to identifiers such as the name, an identification number, email, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the user, or any other information of similar nature;
  6. Third-party’ means a natural or legal person, public authority, agency or body other than the user, the Company and persons who under the direct authority of the Company, are authorised to process personal data;
  7. User” means any person(s), who visits, uses, deals with the Website.

2. Use and description of the Website

GAfix.ai is an automated analytics and audit tool that integrates with third-party analytics services (primarily Google Analytics). Once connected, GAfix.ai:

  1. retrieves analytics and behavioral data from the user’s website(s),
  2. processes and analyses the data,
  3. provides audit reports, recommendations, behavioral insights, performance metrics, and related analytics (“Services”).

This Policy applies to the Personal Data provided by the user and any other data that the user provides for accessing or availing the Services, through the usage of our Website.

GAfix.ai does not determine, filter, or control the nature, type, sensitivity, or amount of data the user’s website or Google Analytics transmits. All data accessed by GAfix.ai is data that you have authorized Google Analytics to collect and have permitted GAfix.ai to access via integration.

3. Information collected 

Since GAfix.ai only receives data already collected and transmitted by Google Analytics, the categories include (but are not limited to):

1. Website and Behavioral Data

  • pages viewed, time spent, click paths;
  • heatmap information, scroll depth, interactions;
  • referrer URLs, session duration, exit points;
  • user journey behaviour.

2. Technical and Device Data

  • IP addresses, if not anonymized by the user;
  • browser types, OS versions, device types;
  • mobile IDs and cookie identifiers;
  • approximate geographic data.

3. Engagement and Marketing Attribution Data

  • UTM parameters, marketing campaign tags;
  • search terms, ad source metrics.

4. Revenue and Transaction Data

Where e-commerce tracking is enabled:

  • transaction amounts and revenue;
  • items purchased, cart behavior;
  • product performance.

5. Personal or Sensitive Data

GAfix.ai may receive the following if the user’s implementation captures them:

  • Personal Data and personal identifiers     entered into URLs or events;
  • user-specific financial or transactional data;
  • behavioral data linkable to identifiable individuals.

The Company does not verify, curate, or filter such data and bears no responsibility for unlawful orexcessive data collection by the user.

4. Consent and user obligations

By using the Website, providing us with your Personal Data, or by making use of the features provided by the Website, you hereby provide your consent to the collection, storage, processing, disclosure, and transfer of the Personal Data in accordance with the provisions of this Policy.
The user’s obligations are as follows:

  • All data collected from the end customers is your responsibility.
  • You will ensure full compliance with GDPR and other applicable laws.
  • You will not transmit prohibited categories of data unless legally permitted.
  • You indemnify the Company for any claims arising out of your data practices.
  • You shall ensure your privacy policies transparently discloses:
    1. use of analytics tools,
    2. nature of data collected,
    3.  sharing of such data with third-party processors such as GAfix.ai.

5. Information received from third parties

  1. We might obtain information about you from third parties, third-party data suppliers, and third-party information services. For instance, if you connect to or log in to the Services via a third party, the third party might give the Company information on how you use its service. This data could consist of, but not be limited to, the user ID linked to your account, an access token required to use that service, any details you have given the third-party permission to share with us, and any details you have made public in relation to that service.
  2. In order to obtain and combine this information with information that you give to us or other information that we gather when you use our Services, we could disclose your email address or other information. In order to give personalised offers and other services to you, such as serving pertinent offers to you by email, chatbots, phone, or personalised advertising, we use this information to better understand your profile and interests.
  3. Prior to linking or connecting third-party websites or services to the Services or the Website, you should always review, and if required, modify, your privacy settings on those third-party websites and services. By changing your preferences on the third-party service, you can easily unlink your account from the Website. We will no longer get any information about you that was gathered in connection with that service if you unlink your third-party account.

6. Log file information

Each time you access the Services on the Website, your browser or mobile device automatically reports information from log files. Our servers automatically capture specific log file information when you use our services. These server logs may contain anonymous data about your web request, browser type, referring and exit pages and URLs, the number of clicks you make and your interactions with Website links, domain names, landing pages, the pages you view, and other similar data.

7. Cookies

We use Cookies and similar tracking technologies to track the activity on our Website. You can instruct your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if you do not accept Cookies, you may not be able to use some functions of our Website. Unless you have adjusted your browser setting to refuse Cookies, our Website may use Cookies.

When you visit or log in to our Website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address. We (or service providers on our behalf) may then send communications and marketing to these email or home addresses. You may opt out of receiving this advertising by visiting

https://app.retention.com/optout

8. Use of The Personal Data

The purpose of collecting the Personal Data is to provide the user and to allow them the access to the Website and provide the Services as defined in Clause 2 above. We may use the information provided by the user, including but not limited to, for the following purposes:

  1. to identify and reach the user;
  2. to enable and facilitate the Services;
  3. to supervise, administer, and monitor the Services;
  4. to resolve technical issues that might obstruct the user from using the Website;
  5. to provide the user with further information about our Services;
  6. to better understand the users’ needs and interests;
  7. to provide a personalized and customized experience to the users;
  8. to improve the Services offered to the current and future users by improving the functionality of the Website, including but not limited to, the content, design, structuring, etc;
  9. to detect and protect the Company against any error, fraud or other criminal activity;
  10. to make disclosures as may be required under applicable law;
  11. to allow us to better our approach in responding to user service requests;
  12. providing analytics, reporting, audits, and insights;
  13. analysing website performance, user behaviour, and engagement;
  14. generating dashboards and visual summaries;
  15. internal quality control, debugging, and security monitoring.

We may share your Personal Data in the following situations:

  1. With Service Providers: We may share your personal information with Service Providers to monitor and analyse the use of our Website.
  2. With Affiliates: We may share your information with our affiliates, in which case we will require those affiliates to honour this Privacy Policy. Affiliates include our parent company and any other subsidiaries, joint venture partners or other companies that we control or that are under common control with us.
  3. With business partners: We may share your information with our business partners to offer you certain Websites, services or promotions.
  4. With Your consent: We may disclose your personal information for any other purpose with your consent.

9. Retention of Your Personal Data

The Company will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

10. Storage and transfer of Your Personal Data

The information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to and maintained on computers located outside of your state, province, country or other governmental jurisdictions where the data protection laws may differ from those of your jurisdiction. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. The Company will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

11. Disclosure of Personal Data

We will not sell or trade your Personal Information to third-parties without obtaining your consent for the same. This however does not apply to any storage or transfer to and from server/website hosting partners and other parties who assist us in operating the Website, conducting our business, or servicing you. We may also release your information only when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety. However, visitor information that is not personally identifiable may be provided to other parties for marketing, advertising, or other uses.

12. Limitation of liability

To the maximum extent permitted by law:

  • The Company is not liable for the lawfulness, accuracy, sensitivity, or completeness of data transmitted from the user’s website.
  • The Company disclaims liability for data collected without end customer’s consent.
  • The user fully indemnifies the Company for claims, penalties, damages, or regulatory actions arising from:
    • improper or unlawful data collection,
    • misconfigured analytics,
    • unauthorized transfer of sensitive or personal data.

The user acknowledges and agrees that:

  • GAfix.ai has no control over the type or extent of data received;
  • GAfix.ai processes data as-is, without modification or validation.

13. Disclaimer

  1. We make no claims or guarantees, either stated or implied, regarding the accuracy, sufficiency, legality, reliability, availability, or completeness of the content available on our Website.
  2. We shall not be held accountable for any losses, damages, cost or other liabilities whatsoever arising with the use of the Website through any third party, connection failure, the introduction of any broadcast while operating the Website, error, any unauthorised virus, worm, or damaging component or issues in your system leading to possible damage or loss.
  3. We shall not be held liable for any exceptional, overall, indirect, direct or significant damages that may have risen from the use or inability to use the Website.
  4. Each account is intended for use by a single user only. Sharing of accounts is expressly prohibited. Each user must have their own unique account. If we detect or reasonably suspect that an account is being accessed by multiple individuals, we reserve the right to:
    1. Suspend or terminate the account in question without notice.
    2. Take appropriate action to recover any losses or damages incurred due to non-compliance with these terms.

14. Security and confidentiality

We employ administrative, physical, and technical measures designed to safeguard and protect information under our control from unauthorised access, use, and disclosure. At the time of collecting, maintaining, accessing, using or disclosing your Personal Information we shall do so by using systems and processes consistent with industry standards in information privacy and security.

In spite of the security measures undertaken by us, we strongly discourage you from posting your Personal Information in forums, comments or any other publicly accessible places on our Website. It is the responsibility of the user to protect the privacy and security of their email account and phone numbers so that it is not accessed by third parties.

We undertake to protect your information with utmost confidentiality. If you access the Website through a third-party platform you agree to indemnify us against any data breaches that may occur due to any acts of commission or omission from the third-party platform.

15. Legal Basis for Processing Personal Data

We may process your Personal Data under the following conditions: 

  1. Consent: You have given your consent for processing Personal Data for one or more specific purposes.
  2. Vital interests: Processing Personal Data is necessary in order to protect your vital interests.
  3. Legitimate interests: Processing Personal Data is necessary for the purposes of the legitimate interests pursued by the Company. In any case, the Company will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to access the Website.

16. User’s rights (For users within the EU)

The Company undertakes to respect the confidentiality of your Personal Data and to guarantee that you can exercise your rights. You have the following rights under this Privacy Policy, and by law if you are within the EU, to:

  1. Request access to your Personal Data. The right to access, update or delete the information we have of you. Whenever made possible, you can access, update or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you. This also enables you to receive a copy of the Personal Data we hold about you.
  2. Request correction of the Personal Data that we hold about you. You have the right to have any incomplete or inaccurate information we hold about you corrected.
  3. Object to processing of your Personal Data. This right exists where we are relying on a legitimate interest as the legal basis for our processing and there is something about your particular situation, which makes you want to object to our processing of your Personal Data on this ground. You also have the right to object where we are processing your Personal Data for direct marketing purposes.
  4. Request erasure of your Personal Data. You have the right to ask us to delete or remove Personal Data when there is no good reason for us to continue processing it.
  5. Request the transfer of your Personal Data. We will provide to you, or to a third-party that you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information which you initially provided consent for us to use.
  6. Withdraw your consent. You have the right to withdraw your consent on using your Personal Data. If you withdraw your consent, we may not be able to provide you with access to certain specific functionalities of the Website.

You may exercise your rights of access, rectification, cancellation and opposition by contacting us.

17. Children’s privacy

We do not knowingly collect personally identifiable information from anyone under the age of 16. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of 16 without verification of parental consent, we take steps to remove that information from our servers. We rely on consent as a legal basis for processing personal information, hence, we may require the parent's consent before we collect and use that information.

18. Links

The Website may contain certain links to other third-party sites and it is not necessarily under our control. These third-party sites may collect data or solicit Personal Data from the users, for which we are not responsible or liable. We are also not responsible for the privacy practices of such third-party sites. We encourage you to read the privacy policies of that website before accessing / visiting it. If you decide to visit a third-party website linked to our website, you do this entirely at your own risk. We will not be responsible for the use of any Personal Data that our user voluntarily discloses on any other website / platform.

19. Changes to Policy

We reserve the right to change or remove any part of the Policy without notice or liability to any third party. We are in no way obligated to inform or give notice when there is a change in the Policy. However, reasonable effort to intimate our users will be taken from our side. If the user wishes to discontinue using our website, then they can deactivate their account from the Website directly. Unless stated otherwise, our current Policy applies to all information about the user and their account. A continued usage of the Website after a notice of change has been sent to you or published on the Website shall constitute your consent to the changed terms.

20. Grievance Redressal

To address any grievances of the user, we have set up a Redressal Forum. We further assure you a time bound response within 7 days.  The name and contact details of the Grievance Officer are provided below:

Name: Pavel Gupta

Designation: Co-Founder and Director

Email: admin@GAfix.ai

21. Jurisdiction

Any dispute between the user and us in relation to this Policy shall be brought and maintained exclusively in the competent courts of New Jersey.

22. Data Protection Officer

Our data protection officer is responsible for overseeing what we do with your information and for monitoring our compliance with the relevant data protection laws. If you have any concerns regarding the use of your personal information, then you can contact our data protection officer at admin@GAfix.ai.