Privacy Policy

Controller and scope

2-UA is operated by Aleksei Galiev, an individual operating a registered micro business in Georgia under identification number 305576392, trading as 2-UA ("2-UA", "we", "us", or "our").

We are the controller of personal data processed through 2-ua.com and its related services, except where a third-party provider acts as an independent controller under its own policy. This Policy applies to visitors, registered users, customers, free-tool users, and people who contact us.

We process personal data under the laws of Georgia, including the Law of Georgia on Personal Data Protection. Where another law applies to a particular user or processing activity, including the EU General Data Protection Regulation, we also respect the mandatory rights provided by that law.

Data we collect and its sources

Depending on how you use 2-UA, we may collect:

• Account data: name, email address, password hash, account identifiers, preferences, and account status.
• Subscription data: selected plan, billing status, dates, PayPal subscription and transaction identifiers, and payment-related correspondence. PayPal processes payment credentials; we do not store complete card or PayPal login details.
• Website and monitoring data: domains, URLs, project settings, public page content, technical measurements, check history, reports, and notification destinations you configure.
• AI visibility data: brand names, aliases, competitors, prompts, AI answers, citations, model and engine information, and usage records.
• Connected-service data: Google account identifiers, OAuth tokens, selected properties, and Google Analytics or Search Console data when you connect those services.
• Communications: your name, email address, subject, message, support history, feedback, and chat content.
• Device and usage data: IP address, browser and device information, language, referring page, timestamps, requested pages, cookies, security events, and diagnostic logs.
• Free-tool data: submitted URLs, brands, prompts, results, rate-limit identifiers, and abuse-prevention signals.

We receive data directly from you, automatically from your browser or use of the service, from services you choose to connect, and from publicly accessible websites that you ask us to inspect. Do not submit passwords, payment credentials, special-category data, or confidential personal information in prompts, URLs, support messages, or monitored page content.

Why we process data

• Contract: to create and administer accounts, provide checks and reports, operate subscriptions, process requested integrations, send service notifications, and provide support.
• Legitimate interests: to secure the service, prevent fraud and abuse, enforce limits, diagnose failures, maintain logs, improve reliability, understand aggregate product usage, and establish or defend legal claims.
• Consent: to use optional analytics or advertising technologies, connect optional third-party accounts, and send direct marketing where consent is required. You may withdraw consent at any time.
• Legal obligations: to keep required transaction and accounting records, respond to lawful requests, and comply with tax, consumer, and data-protection requirements.

Information required to create an account, purchase a subscription, or run a requested check is contractual. If you do not provide it, we may be unable to provide that feature. Optional profile, integration, marketing, and analytics data is not required for basic access.

AI processing and connected services

When you run AI visibility features, the prompt and relevant brand, competitor, or website context are sent through OpenRouter to the selected AI model provider, which may include OpenAI, Google, Perplexity, or another provider shown or configured for the feature. Their systems return the answers and citations that we store in your measurement history.

AI inputs may be processed outside Georgia. Do not include personal, sensitive, or confidential information in tracked prompts. AI answers may be inaccurate and are not used by 2-UA to make decisions that produce legal or similarly significant effects about you.

If you choose Google sign-in or connect Google Analytics or Search Console, Google provides the data needed for that feature. You can disconnect an integration from 2-UA; you may also revoke access in the provider's account settings.

2-UA browser extensions

2-UA browser extensions process the active page URL and the minimum page information required for the feature the user explicitly starts. Depending on the extension, this may include public page metadata, headings, links, structured data, visible content structure, HTTP responses, or a baseline saved in local browser storage. Extension-specific handling is described in the applicable Chrome web store listing.

AI SEO & GEO Readiness Checker runs its readiness analysis in the browser. It requests the selected public page and that website's public robots.txt, sitemap.xml, and llms.txt files without cookies. Page content, optional brand input, and local audit results are not sent to 2-UA. If the user explicitly clicks Open full report, the selected page URL is sent to 2-UA over HTTPS in the url query parameter to prefill the requested audit form.

SEO Release Guard runs only when the user opens it on a page. It reads SEO-related fields from that page and, when requested, downloads the public HTML of a live or reference URL without cookies. Access to a different website origin is requested only after the user enters that URL. Dated page versions, extracted SEO values, and comparison results are stored locally in the browser and are not sent to 2-UA. Public HTML is parsed only as data; all executable code is packaged with the extension.

Information received through Chrome APIs is used only to provide the extension's disclosed user-facing feature. We do not sell this information, use it for personalized advertising or credit decisions, or allow human access except where permitted by the Chrome web store User Data Policy. Our use of information received through Chrome APIs adheres to the Chrome web store User Data Policy , including its Limited Use requirements.

Who receives data

We do not sell or rent personal data. We share only the data reasonably necessary for the purposes described above with:

• PayPal for subscription and payment processing.
• OpenRouter and selected AI model providers for AI visibility requests.
• Google for sign-in and user-requested Analytics or Search Console integrations.
• Telegram and Slack for notifications you configure; contact-form messages are also delivered to our support team through Telegram.
• Smartsupp for live chat and FingerprintJS BotD for abuse and bot detection.
• Google Analytics, Yandex Metrica, and Meta for optional analytics and advertising technologies when enabled by your cookie choice.
• Hosting, database, object-storage, email, queue, security, and logging providers that help us operate 2-UA under contractual or equivalent confidentiality obligations.
• Professional advisers, courts, regulators, law-enforcement bodies, or other parties when disclosure is required by law or reasonably necessary to protect legal rights and service security.

Third parties may process data as our processors or as independent controllers. Independent controllers describe their processing in their own privacy notices. For example, review the PayPal Privacy Statement .

International transfers and retention

Some recipients operate in countries outside Georgia or your country of residence. Where required, we use provider agreements, contractual protections, consent, or another lawful transfer mechanism. You may contact us for information about safeguards relevant to your data.

We retain data only for as long as necessary for the stated purpose:

• Account and project data is retained while the account is active and is deleted or anonymized after a verified deletion request, subject to the exceptions below.
• Check, report, and AI measurement history is retained according to the applicable plan or while needed to provide history, enforce limits, and resolve service issues.
• OAuth tokens are retained until the integration is disconnected, access expires, or the account is deleted.
• Support, security, and diagnostic records are retained while reasonably needed to resolve the request, prevent abuse, maintain security, and establish or defend claims.
• Transaction and subscription records are retained for the period required by accounting, tax, payment, and dispute-resolution laws.
• Backups are removed on their normal secure rotation and are not restored for ordinary business use after a valid deletion request.

Cookies and similar technologies

Essential cookies keep you signed in, protect forms, remember security and interface settings, and record your cookie choice. These cookies are necessary for the service to work.

With your permission, we use optional analytics and advertising technologies from Google, Yandex, and Meta to understand visits and measure marketing. You can accept or reject optional technologies in the cookie banner. Rejecting them does not prevent you from using essential service features.

You can also remove cookies in your browser. Removing essential cookies may sign you out or reset preferences. To review your choice, open the cookie banner again.

Your privacy rights

Subject to applicable law, you may ask us to:

• confirm whether we process your data and provide access to or a copy of it;
• correct inaccurate or incomplete data;
• erase data or stop, restrict, or block particular processing;
• provide data you supplied in a structured, commonly used, machine-readable format where portability applies;
• object to processing based on legitimate interests or direct marketing;
• withdraw consent without affecting processing completed before withdrawal; and
• lodge a complaint with the State Audit Office of Georgia or another competent supervisory authority.

Email requests to support@2-ua.com. We may request information needed to verify your identity. We respond within the period required by applicable law: generally within 10 working days under Georgian data-protection law, subject to a permitted extension in special cases, or within one month where the GDPR applies.

You may also begin account deletion from Profile Settings. Deletion does not remove records we must retain by law, records needed to establish or defend claims, or data already anonymized so it no longer identifies you.

Security and children

We use reasonable technical and organizational safeguards designed to protect data against unauthorized access, alteration, loss, or disclosure. No internet transmission or storage system can be guaranteed completely secure. Please use a unique password and notify us if you suspect unauthorized account access.

2-UA is intended for business and professional use and is not directed to children under 18. If you believe a child submitted personal data, contact us so we can investigate and delete it where required.

Changes and contact

We may update this Policy when our services, providers, or legal obligations change. We will post the revised version here, update the effective date, and provide additional notice when a change materially affects your rights or our processing.

Questions, requests, and complaints may be sent to support@2-ua.com or to the postal address in Section 1.

Effective and last updated: 12 August 2026.