Changelog.

v3.6

Privacy policy updated ahead of campaign attribution

4 Aug 2026

We are about to record which link brought you here, so we can tell whether a post we wrote was worth writing. That is a new category of data, so the policy changes first and this notice goes out before the capture does.
What will be stored: the three campaign parameters in the link you clicked, utm_source, utm_medium and utm_campaign. Nothing else. Not the referring page, not your IP address, not your device, not a cookie. If you arrive without those parameters, which is most people, nothing is recorded at all.
They are held against your signup and against an autopsy purchase, so a customer can be traced to the campaign that produced them. They are a label for a link, not a description of you: two people arriving from the same post store identical values.
No new supplier is involved. This is our own database, and the values never leave it. No advertising trackers, no cookies requiring a banner, so nothing to consent to.
Plausible has been removed from the subprocessor lists in the same release. It was named in the DPA, the privacy policy and the security page and had never received a single request, because it was never switched on. Naming a processor we do not use overstates our data sharing, so it is gone rather than installed.
Nothing changes for existing workspaces.

v2.2

28 Jul 2026

ratelytics.io/autopsy no longer starts with a payment. Upload a usage export with no account and we compute the findings from your actual rows: your real monthly total, how many findings there are, and one of them opened in full with its evidence table, formula and fix. £99 unlocks the rest, the PDF, and an account with the analysis already loaded.
Where a check could not be run, we now say so and say which column would unlock it, rather than leaving it out. "We found nothing" and "we could not look" are different answers and the report gives you the right one.
Fixed a real defect in the analysis, on paid reports as well as free ones. An export that carries dates but no times of day parses to midnight, which made every row look like it ran overnight and produced an off-hours finding that described the missing column rather than your usage. Night-derived findings are now computed only from rows that say when they ran, and are named as unavailable when nothing does.
Uploads are capped at 3.5MB, which is stated before you choose a file. A larger one gets three ways forward instead of a platform error: a shorter window, a split file, or connecting the provider directly, which has no limit.

v2.1.1

28 Jul 2026

The free autopsy teaser is about to open for uploads, and a public page that accepts a file needs a cap on how many one network can send in an hour. Doing that means recognising repeat requests, which is new processing, so the policy changes first and this notice goes out before the cap does.
What is stored: a one-way hash of your IP address, salted with a secret that changes daily. Never the address itself, and yesterday's hashes cannot be matched to today's. It is a count per hash per hour, not a log of individual requests, so there is no record of when you did anything.
It lives in its own table with no key in common with the findings from your upload and no way to join the two. The existing promise stands unchanged: the token holding your result is not linked to your address.
It is deleted by the same hourly clean-up as everything else, so it exists for at most two hours. No new supplier is involved: it is the database we already use.
Nothing changes for existing workspaces.

v2.1

28 Jul 2026

We are about to let anyone try an autopsy on their own usage export without creating an account. That means processing a file from someone who is not yet a customer, which is a new purpose, so the legal text changes first and this notice goes out before the feature does.
What will happen: your CSV is read in memory to compute the result and is never written to storage. Only the computed findings are kept, against a random token that is not linked to your email, your IP or your device, and they are deleted two hours later whether or not you buy: one hour being the lifetime of the payment page, plus an hour of margin for the confirmation to reach us.
The DPA now says plainly that its controller-and-processor framing starts at account creation and does not cover anonymous uploads; for those two hours we are the controller. The Terms gain a section on the teaser: the file stays yours, upload only what you are entitled to share, and a free unattended tool carries no warranty.
Nothing changes for existing workspaces. Retention, export and deletion for accounts are exactly as they were.

v2.0

27 Jul 2026

Every signed-in screen has been rebuilt on a darker, denser layout: the Ledger, Customers, Autopsy, Connections, Alerts, Settings and the guide. Nothing moved between plans and no figures changed: the same numbers, read more easily.
On a phone, wide tables no longer scroll sideways. Each row becomes a stacked record, so the number a screen exists to show, whether margin, spend or savings, is visible without dragging the table across.
Accessibility: text that was too faint against the dark background has been brightened to meet WCAG AA, every control now has a touch target of at least 44px, and form fields, disclosures and scrollable tables are reachable by keyboard and screen reader.
Fixed: a £99 autopsy claimed into a Starter or Growth workspace was not delivered. A new report was generated and the paid one stayed pending. If this happened to you, reply to your purchase email and it will be put right.
The public site, pricing and docs are unchanged.

v1.3

27 Jul 2026

Deleting a workspace now holds for a full 24 hours before anything is removed, and cancelling inside that window restores it untouched. Previously the deletion was queued immediately and the next purge run could be minutes away. The v1.0 note below said “hard delete within 24 hours”, which was true of the deletion but overstated the time you had to change your mind.
The confirmation email, the deletion screen, the privacy policy and the DPA now all state the same window, and the screen names the exact deadline.

v1.0

20 Jul 2026

Ledger: cross-provider spend joined at daily rate across OpenAI, Anthropic and OpenRouter, plus CSV import with six presets.
Customers: Stripe revenue joined to spend; margin per customer with loss-red rows and a one-page board pack PDF.
Autopsy: five findings with formulas and evidence, covering caching, batch, right-sizing, retries and off-hours. £99 standalone or monthly on Starter+.
Alerts: budgets at 80% and 100%, anomaly detection within two hours of onset, email and Slack delivery.
Weekly digest: totals, movers, renewals due, one autopsy teaser. Monday 08:00, workspace time.
Security: AES-256-GCM key storage, masked display, log redaction, full export, hard delete within 24 hours.