Last updated: September 27, 2026
This policy explains what 007AJ Security and Analytics collects and how we use it.
When you create an account we store your email address and password (hashed). If you subscribe to a paid plan, payment is processed by PayPal; we receive confirmation and subscription details but never your full card details.
When you add a website and install our tracking code, we collect data about visits to that site: page URLs, referrers, approximate location (country/city derived from IP), device, browser and IP address. You are the controller of this data for your own sites; we process it to provide your analytics.
If you use our security tools or connect a site (including via our WordPress plugin), we receive request metadata (such as path, method, status, user agent and IP) to detect attacks, and we may store details of detected incidents.
The 007AJ Security plugin only sends data to 007aj.com after you connect it with your API key. It then sends request metadata for attack detection and fetches your IP blocklist. It does not send your site's content or your visitors' personal messages.
To provide and improve the Service, show you your analytics and security results, send you alerts and reports you have enabled, and process payments. We do not sell your personal data.
We use PayPal (payments), Resend (email delivery), Google (page speed and safe-browsing checks), and DB-IP (location lookups). Each processes data only to provide their part of the Service.
We keep analytics data while your account is active. You can delete a website (removing its data) or your account at any time, or email us to request deletion. You may unsubscribe from emails using the link in any message.
Email admin@007aj.com.