Privacy policy

The data controller for Inbound Watch (the website and service at inbound.watch) is Ketryon AB, organisation number 559551-1030, Solbackavägen 13D, 632 22 Eskilstuna, Sweden.

For anything about your data, write to hello@ketryon.com. A person reads every message.

• Your account — your email address, the websites you ask us to watch, the competitors you name and your settings. There are no passwords.
• Sign-in records — when you ask for a sign-in email we store your address, the IP address you asked from, when it was sent and a hashed version of the code and link (never the code itself), so we can check it and limit guessing and automated sign-ups.
• The waitlist, from before sign-up opened — the email address of anyone who joined it, so we can tell them it's open.
• Link data for your websites — which pages link to them, when the links appeared or went missing, and estimated traffic. It comes from DataForSEO's index of the public web and from our own crawler visiting those pages (see below).
• Billing, if you take out Pro — Stripe handles the payment: your name, billing address, card and any tax ID go to Stripe, never to us. We keep only the link to your Stripe customer, and see your plan, its dates and your invoices.
• Visit statistics with Google Analytics, if you agree — counts visits, where they come from and which pages are used. Google's tag loads on every page but is told to deny everything until you choose; until then, and if you decline, it sets no cookies and sends only cookieless measurements without identifiers. If you accept, it sets cookies that recognise your browser between visits. The address it receives never includes a query string, and nothing is used for advertising.
• Technical logs — like every website, our hosting keeps short-lived request logs (IP address, browser, time, page) to run and protect the service.

What we don't collect: no cookies for statistics unless you accept them, no advertising cookies, no cross-site tracking, no location, no data bought about you. We don't sell or share your data, and we don't use it to train AI models.

To show you who links to you, we keep the addresses, titles and link text of public pages that link to the websites our users watch, and to their named competitors. It's used only to show those users their links.

Our crawler, InboundWatchBot, visits those pages about once a day to check the link is still there. It reads nothing else, honours robots.txt, and sends one request at a time per site. If a page about you shows up in someone's link list and you want it left out, write to hello@ketryon.com.

Under the GDPR every use of personal data needs a legal basis. Ours:

We use these processors. Each may only use your data to provide their service to us.

Where a provider handles data outside the EU/EEA, the transfer is protected by the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework.

• The waitlist — until we've told you sign-up is open, or sooner if you ask us to take you off it.
• Sign-in codes and links — work for 15 minutes, once; the records, IP address included, are deleted after a day.
• Your account and its websites — for as long as you have an account. Delete it in Settings and they're removed at once.
• Payment records — invoices and payments for Pro are kept for seven years, as Swedish bookkeeping law requires.
• Technical logs — kept by our hosting for days, not months.
• Google Analytics — up to 14 months.
• Emails you send us — as long as needed to help you, then deleted.

These are strictly necessary for the service you asked for, which is why we don't ask for consent first.

These two are set only if you accept statistics in the cookie banner. Change or withdraw your choice any time with Cookie settings in the footer; withdrawing deletes them straight away.

We email you sign-in codes when you ask for them. On Free, Hoot sends a short summary on Mondays; on Pro, also an email the day a link appears or goes missing. Turn either off in Settings. We don't send newsletters or marketing; if that ever changes, we'll ask first.

• All traffic uses HTTPS; our providers encrypt data at rest.
• Sign-in sessions are signed, so they can't be forged.
• Only the people who build Inbound Watch can reach the production systems, and only when needed.

Under the GDPR you can:

• get a copy of your data (access) and receive it in a portable format;
• correct it;
• have it deleted — delete your account in Settings, or ask us;
• withdraw consent, and object to, or ask us to restrict, uses based on legitimate interest.

Write to hello@ketryon.com and we'll answer within one month. If you think we've handled your data wrongly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or the authority where you live.

Inbound Watch isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has signed up, tell us and we'll delete it.

If we change how we use your data, we'll update this page and the date at the top. If a change matters — a new kind of data, a new purpose — we'll tell you by email before it applies.

Ketryon AB, organisation number 559551-1030, VAT number SE559551103001, Solbackavägen 13D, 632 22 Eskilstuna, Sweden. Email hello@ketryon.com.