Privacy Policy

Last updated: 18 July 2026

Btagly ("we", "us") is operated by Orlin Ralinov Martinov, a sole trader registered in Malta. This policy explains what data we collect when you use the Btagly website, Chrome extension, and service, and what we do with it.

What the Chrome extension reads

The extension reads the content of a web page only when you explicitly start an audit on that page. When you do, the following is sent to our servers to run the audit: the page URL, the links extracted from the page, anchor text, the presence and visibility of compliance-related text, and page metadata such as language and title.

The extension never collects:

• Your browsing history or the content of any page you did not audit
• Data from other tabs or windows
• Cookies, passwords, or form input
• Anything in the background: it has no ability to open pages or click links on its own

Account data

We store your email address, your organisation's name, plan and usage counters, the rule sets you create, and the results of audits you run (including link redirect chains and compliance findings). This is the product: audit history is retained so you can prove what a page looked like on a given date.

Payments

Payments are processed by Paddle.com as merchant of record. We never see or store your card details. Paddle's privacy policy applies to payment data.

Service providers

We use a small set of processors to run the service:

• Supabase (database and authentication, hosted in the EU)
• Railway (application hosting, EU region)
• Netlify (website hosting)
• Paddle (payments, merchant of record)
• Resend (transactional email: login links, alerts, reports)
• Residential proxy providers (used only to route link checks; no personal data of yours passes through them)

Retention and deletion

Audit data is retained for the lifetime of your account. Deleting your account permanently deletes your organisation's data, including audit history and rule sets. Contact us at privacy@btagly.app to request deletion or a copy of your data.

Legal basis and your rights (GDPR)

We process account and audit data to perform our contract with you, and minimal operational data (logs, security events) under legitimate interest. You have the right to access, correct, export, and erase your personal data, and to complain to a supervisory authority. The Maltese Information and Data Protection Commissioner (IDPC) is our lead authority.

Contact

Orlin Ralinov Martinov (sole trader)
46, St Mary Crt, Blk D, Fl 4, Triq Il-Prof. Nerik Vassallo, Is-Siggiewi, Malta, SGW 3402
privacy@btagly.app