Privacy Policy

Introduction

BetterNamer is operated by Revision Labs, Inc., a Delaware corporation, doing business as BetterNamer ("we," "our," or "us"). We are the data controller for the personal information described in this policy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our domain name generation and analysis service.

Information We Collect

Personal Information

Account Information: When you create an account, we collect your email address and any profile information you choose to provide.
Authentication Data: We use FusionAuth for secure authentication and may collect related authentication tokens and session data.
Billing Information: Payments are processed by Stripe. We receive limited billing details (such as your name, email, transaction amounts, and the last four digits and brand of your card) but we never receive or store your full card number.
Domain Registration Data: When you register a domain, we collect the registrant contact details (name, postal address, email, phone) that registries and ICANN policy require.

Usage Information

Search Queries: We collect the domain name searches and criteria you submit to improve our service and provide personalized recommendations.
Generated Names: We may store domain names generated for you to enhance your experience and provide search history.
Usage Analytics: We collect information about how you interact with our service, including pages visited, features used, and time spent on the platform.

Technical Information

Device and Browser Information: We collect information about your device, browser type, operating system, and IP address.
Cookies and Tracking Technologies: We use cookies and similar technologies to enhance your experience and analyze usage patterns.

How We Use Your Information

We use the collected information to:

Provide and improve our domain name generation services
Process payments and fulfill domain registrations, renewals, and transfers
Personalize your experience and recommendations
Authenticate users and maintain account security
Analyze usage patterns to enhance our algorithms
Communicate with you about service updates and important notices
Identify you as a user for marketing and publicity purposes (unless you opt out as described in our Terms of Service)
Create aggregated and de-identified datasets as described below
Comply with legal obligations and prevent fraud

Legal Bases (EEA/UK Users)

Where the GDPR or UK GDPR applies, we process your personal data on these legal bases:

Performance of a contract: providing the Service, your account, billing, and domain registrations you order
Legitimate interests: improving and securing the Service, product usage analytics linked to your account (described under Third-Party Services → Analytics), fraud prevention, and creating aggregated/de-identified data
Consent: optional analytics/advertising cookies and marketing communications (withdrawable at any time)
Legal obligation: tax, accounting, and compliance record-keeping

Third-Party Services

Payments

Payments are processed by Stripe, Inc. Your card details are provided directly to Stripe and handled under Stripe's privacy policy.

Domain Registration Partners

Domains are registered through an ICANN-accredited registrar partner. To fulfill a registration, we transmit your registrant contact details to that registrar, which shares them with the applicable registry and other parties as required by ICANN policy (for example, escrow providers and WHOIS/RDDS where applicable). Each registrar processes this data under its own privacy policy.
Our current registrar partner is Hosting Concepts B.V. d/b/a Openprovider (IANA ID 1647). Section 1 of the Domain Registration Agreement carries the authoritative, maintained list.
We may add or change registrar partners, and may use different registrars for different TLDs. When we do, we update this policy and the Domain Registration Agreement to name the new registrar before it receives your data. If we transfer a domain you already own to a different registrar, your registrant contact details are transmitted to that registrar so it can take over the registration, and we email you at least 30 days beforehand — see section 2 of the Domain Registration Agreement.

AI and Analysis Services

We use various AI services including Google Gemini, OpenAI GPT, and other language models to generate and analyze domain names
We may share anonymized search queries with these services to improve name generation quality

Authentication

We use FusionAuth for user authentication and account management
FusionAuth processes your authentication data according to their privacy policy

Analytics

We use Google Analytics for aggregate site-traffic analytics. Its cookies stay disabled until you opt in through our cookie banner (see Cookies and Tracking below).
We use PostHog for product analytics. This is not aggregate-only: when you use the Service while signed in, we record product events linked to your account identifier — such as completing a signup, running a name search or a trademark/web check, purchasing a domain, or starting a subscription — so we can understand how the product is used and improve it. These events are recorded by our servers under our legitimate interests (see Legal Bases above) and do not depend on the cookie banner, which governs browser-side storage. PostHog's browser script also collects page-view data; it uses no cookies or local storage unless you choose "Accept all" in the banner. Analytics events are deleted from PostHog when your account is erased, and are retained for no longer than 24 months (see Data Retention).

Aggregated and De-Identified Data

We may create aggregated data (statistics combined across many users, such as naming trends, keyword popularity, or TLD demand) and de-identified data (records processed so they can no longer reasonably be linked to you). This data is not personal information.

We may use, license, sell, or share aggregated and de-identified data for any lawful purpose, including commercial licensing to research or industry partners.
We commit to maintaining de-identified data in de-identified form and not attempting to re-identify it, and we contractually require the same of any recipient.
If you prefer that your records not be included in de-identified record-level datasets we license to third parties, you may opt out at any time in Account → Privacy & Data, or by emailing privacy@betternamer.com with the subject line "Data Licensing Opt-out". The opt-out takes effect immediately: every dataset we build checks it, so your records are left out of anything produced after you opt out. Opting out does not affect aggregated statistics, which cannot be traced to any individual, and it does not retroactively change datasets already licensed before you opted out.
Closing your account excludes you from these datasets. The sign-in and security records we keep after an account closes (see Data Retention) are never included in a de-identified dataset, regardless of what your licensing preference was — they are kept to defend against fraud and takeover, and for nothing else.

We do not sell or share your personal information, as those terms are defined under applicable privacy laws such as the CCPA. Aggregated and de-identified data (described above) is not personal information. We may share your personal information in the following circumstances:

With your consent for specific purposes
For publicity as described in our Terms of Service (unless you have opted out)
With service providers who assist us in operating our platform — including Stripe, our registrar partner(s) named above, FusionAuth, our AI providers, our analytics providers (PostHog and Google Analytics), and our hosting and email providers — subject to confidentiality obligations
For legal compliance when required by law or to protect our rights and safety
In business transfers if BetterNamer is acquired or merged with another company

Data Security

We implement appropriate technical and organizational measures to protect your information, including:

Encryption of data in transit and at rest
Secure authentication mechanisms
Regular security assessments and updates
Limited access to personal information on a need-to-know basis

Data Retention

We retain personal information only as long as needed for the purposes described in this policy:

Account data and search history: retained while your account is active; deleted or de-identified within 90 days after account deletion, except for the sign-in and security records described below and except where longer retention is legally required
Product analytics events: retained for up to 24 months from the event; deleted from our analytics processor (PostHog) as part of account erasure
Sign-in and account security records: retained for up to 12 months from the event — see below
Billing and transaction records: retained for up to 7 years to meet tax, accounting, and legal obligations
Domain registration records: retained as required by ICANN and registry policies
Server and security logs: typically retained for up to 12 months

We keep a record of sign-ins, sign-outs, and security-relevant changes to your account — each with the time, the IP address, and the browser and operating system it came from. You can read this record yourself at any time in Account → Privacy & Data, and it is included in the copy of your data you can download there.

These records are kept for up to 12 months even if you close your account. That is the one exception to the 90-day deletion described above, and we want to be plain about it rather than bury it:

Why. They are how we investigate fraud and account takeover. An account that was taken over is often closed by the attacker afterwards, so deleting this record on closure would destroy the evidence of exactly the attack it exists to detect — including attacks on other people's accounts from the same source.
For that purpose only. Retained records are not used for analytics, personalization, or product development, and they are excluded from the de-identified datasets described above, whether or not you had opted out of data licensing.
Bounded. The 12 months runs from each event, not from the day you close your account — so closing your account never extends how long anything is kept, and the record empties itself on a schedule with nothing left to delete afterwards.
What it is linked to. When your account is deleted, your login identity is permanently deleted with it. What remains is keyed to an internal account identifier that no longer corresponds to a name or email address in anything we hold.

If you are in the EEA or UK, we rely on our legitimate interest in securing the Service for this (see Legal Bases above, and GDPR Recital 49). You can object to it — see Your Rights and Choices below — and we will consider your objection on its own facts rather than refusing as a matter of policy.

You may request deletion of your account and associated data at any time.

Your Rights and Choices

Depending on your location, you may have the following rights:

Access: Request information about the personal data we hold about you
Rectification: Request correction of inaccurate personal information
Erasure: Request deletion of your personal information
Portability: Request a copy of your data in a machine-readable format
Restriction and objection: Restrict or object to certain processing, including processing based on legitimate interests
Opt-out: Unsubscribe from marketing communications, and opt out of de-identified data licensing as described above

Access and portability you can exercise yourself: sign in and go to Account → Privacy & Data, where you can build and download a copy of your data as a ZIP of JSON files plus a spreadsheet-readable summary. We email your account address whenever a copy is requested, so you will know if anyone else asks for one. The download expires after a few days and is then deleted. A copy leaves out details that identify someone else, domain transfer authorisation codes, and our own commercial data; the archive lists what it omits and why.

You can also correct your name and time zone in Account → Profile, your domain registrant details in Account → Contact Info, opt out of de-identified data licensing in Account → Privacy & Data, and close your account in the same place.

One limit on erasure, stated up front: closing your account does not delete your sign-in and account security records, which we keep for up to 12 months from each event to defend against fraud and account takeover. Everything that applies to them — why, how long, and what they are and are not used for — is set out under Data Retention above. If you want them deleted sooner, write to privacy@betternamer.com; we will weigh your request against the security interest rather than declining automatically, and we will tell you the outcome and our reasoning either way.

For any right you cannot exercise in the product, contact privacy@betternamer.com. We will verify your request using your account email and respond within the timeframe required by applicable law. We will never discriminate against you for exercising a privacy right.

California Residents (CCPA/CPRA)

The categories of personal information we collect are described in "Information We Collect" above; we collect them from you directly and from your use of the Service, and disclose them only to the service providers listed above.
We do not sell your personal information and do not share it for cross-context behavioral advertising, and we have not done so in the preceding 12 months.
You may exercise your rights to know, delete, and correct in Account → Privacy & Data or via privacy@betternamer.com, and you may designate an authorized agent to act on your behalf.

EEA/UK Residents

You may lodge a complaint with your local data protection supervisory authority. We would appreciate the chance to address your concern first at privacy@betternamer.com.

Cookies and Tracking

We use cookies and similar technologies to:

Maintain your login session
Remember your preferences
Analyze usage patterns
Improve our services

Analytics cookies and browser storage. We use Google Analytics for aggregate site traffic and PostHog for product analytics. Analytics and advertising cookies — and PostHog's browser-side storage — stay disabled until you opt in through our cookie banner: choose "Accept all" to enable them or "Essential only" to keep just what is required for the site to function. With "Essential only", PostHog's browser script still reports page views but stores nothing on your device, so each page load is counted anonymously and separately. You can change your mind at any time via the banner or by clearing this site's data in your browser.

What the banner does not govern: product events our own servers record about your signed-in account activity (described under Third-Party Services → Analytics). Those are first-party telemetry processed under our legitimate interests, not browser tracking; you can object as described under Your Rights and Choices.

You can also control cookie settings through your browser preferences, though disabling essential cookies may affect some functionality of our service.

Age Requirement

Our service is intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us with personal information, please contact us immediately and we will delete it.

International Data Transfers

We are based in the United States, and your information is processed in the United States and in the countries where our service providers operate. For transfers of personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (or our providers' equivalent certified mechanisms).

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Every version is posted on this page with the "Effective Date" at the top updated.

For material changes — anything affecting your rights, how we use your data, or how long we keep it — posting is not enough. We will tell you directly, by email to your account address or by a notice in the product, before or when the change takes effect. We will not make a material change to how we handle your data and rely on you noticing a quietly reposted page.

Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: privacy@betternamer.com
Website: https://betternamer.com

This privacy policy was last updated on August 14, 2026.