Ertori
Last updated October 20, 2026

Privacy Policy

Ertori reads data from services you connect (app stores, analytics, payments) so it can show it on one screen. This page explains exactly what we keep and what we don't.

Who we are

Ertori is operated by Yury Holod, an individual entrepreneur based in Georgia. Contact: hello@ertori.com.

What we store

  • Your account: email address, optional name, which sign-in methods you used (email, Google, Apple), your plan.
  • Credentials you connect: API keys, tokens, key files and OAuth tokens for the services you add. They are encrypted with AES-256-GCM before they are written to the database, bound to your account and that connection, and never shown again — not to you, not to us in the interface.
  • Data pulled from your sources: daily totals (views, visitors, downloads, revenue, subscriptions and similar), the names and identifiers of your apps and sites, and reviews or feedback including the reviewer's public nickname, country, rating and text as the store or your form provides them. When your App Store key can't read reviews, we take your apps' reviews from Apple's public review pages. If a site visitor leaves an email in your feedback widget, we store it with that message.
  • Your settings: project names, order, which projects are collapsed or archived, read/archived status of feedback.
  • Billing: Paddle, our reseller, handles payments. We receive your Paddle customer and subscription identifiers and the subscription status, never card details.

What we don't do

  • We don't sell or rent your data, show ads, or use your data to train AI models.
  • We ask each source for read-only access where the vendor offers it. Where it doesn't, we ask for its narrowest role, or, if its keys always have full access, our code only calls read endpoints. Each source's setup page says which of these applies.
  • We don't change anything in your connected services and never reply to reviews. The one exception is App Store analytics: if you switch it on, we ask Apple once per app to start preparing reports, with an Admin key you upload for that step and that we don't store.
  • The app uses one strictly necessary cookie to keep you signed in. There are no advertising or cross-site tracking cookies.

Claude

If you connect Ertori to your own Claude (claude.ai, Claude Desktop, the mobile apps or Claude Code), Claude can read your Ertori data, read-only, when you ask it to. What Claude reads becomes part of your conversation with Anthropic and is handled under your agreement with Anthropic. You can disconnect Claude at any time in Settings → Claude, or by removing the connector in Claude.

If the in-app Claude panel is enabled, the questions you type and the data needed to answer them are sent to Anthropic's API to generate the answer. Anthropic does not use API data to train models by default.

Google user data

When you connect Google Analytics or Search Console with Google sign-in, Ertori requests only the read-only scopes analytics.readonly and webmasters.readonly. We use that access solely to show your own metrics to you in Ertori. Ertori's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't let humans read this data except with your permission for support, for security reasons, or where the law requires it.

Who processes data for us

  • Cloudflare — hosting, database, file and key-value storage, email delivery (worldwide network).
  • Paddle — payments and tax, as merchant of record.
  • Anthropic — only when you use Claude features as described above.
  • The services you connect — we call their APIs with the access you gave.

How long we keep it

Account data is kept while your account exists. Disconnecting a source deletes its stored key and everything pulled from it straight away. Deleting your account (Settings → Account) deletes all of your data at once: account, keys, numbers, feedback, projects and Claude connections.

Our database keeps point-in-time recovery snapshots for up to 30 days to protect against accidents; deleted data disappears from them when they expire. Feedback that your own site visitors send through the widget is kept until you archive or delete it, or delete your account.

Your rights

You can export everything we keep about you (Settings → Account → Export data), correct it, or delete it at any time. If you are in the EU, UK or a similar jurisdiction, you have the rights of access, rectification, erasure, restriction, portability and objection; our legal bases are the performance of our contract with you and, for security logs, our legitimate interest in keeping the service safe. Write to hello@ertori.com for anything you can't do in the app.

Security

See https://ertori.com/security for how keys are handled. If you believe your data was exposed, write to hello@ertori.com; we'll respond within 72 hours.

Children

Ertori is not intended for anyone under 16.

Changes

If we change this policy in a way that matters, we'll show a notice in the app before it takes effect.