Privacy Policy

1. Introduction

metricx ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our advertising analytics platform and services.

By using metricx, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account
• Workspace Information: Company name and workspace settings
• Profile Information: Any additional information you choose to add to your profile

2.2 Advertising Platform Data

When you connect your advertising accounts (Google Ads, Meta Ads, etc.), we collect:

• Campaign Data: Campaign names, statuses, objectives, and hierarchy (campaigns, ad sets, ads)
• Performance Metrics: Impressions, clicks, conversions, spend, revenue, and other metrics provided by advertising platforms
• Account Metadata: Account IDs, currency settings, timezone information
• Creative Assets: Ad copy, images, and other creative elements (metadata only, not stored permanently)
• Authentication Tokens: OAuth access tokens and refresh tokens to maintain connection to your advertising accounts

2.3 Usage Information

• Log Data: IP address, browser type, pages visited, time and date of visits
• Query Logs: Natural language questions you ask our analytics system
• Device Information: Device type, operating system, unique device identifiers

2.4 Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session, remember preferences, and analyze usage patterns. You can control cookies through your browser settings.

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Core Service Delivery

• Display your advertising campaign performance in unified dashboards
• Generate analytics, insights, and visualizations of your advertising data
• Process natural language queries about your advertising performance
• Synchronize data from connected advertising platforms
• Calculate derived metrics (ROAS, CPA, CTR, etc.) from base data

3.2 Platform Improvement

• Analyze usage patterns to improve user experience
• Develop new features and capabilities
• Train and improve our natural language processing models
• Monitor system performance and troubleshoot issues

3.3 Communication

• Send service-related notifications and updates
• Respond to your inquiries and support requests
• Send important security or policy updates

3.4 Security and Compliance

• Detect and prevent fraud or unauthorized access
• Comply with legal obligations and enforce our terms
• Protect the rights and safety of metricx and our users

4. How We Share Your Information

We do not sell your personal information or advertising data to third parties. We may share your information only in the following circumstances:

4.1 With Your Consent

We will share information when you explicitly authorize us to do so.

4.2 Service Providers

We may share information with trusted third-party service providers who assist us in operating our platform:

• Cloud Infrastructure: AWS, Google Cloud, or similar providers for hosting and storage
• Analytics Services: Tools that help us understand platform usage (aggregated data only)
• AI/ML Services: OpenAI and similar services for natural language processing (query text only, not raw advertising data)

All service providers are contractually obligated to protect your data and use it only for specified purposes.

4.3 Legal Requirements

We may disclose information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to:

• Comply with legal process
• Protect our rights or property
• Prevent fraud or security issues
• Protect the safety of users or the public

4.4 Business Transfers

If metricx is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our platform of any such change.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption at Rest: All OAuth tokens and sensitive credentials are encrypted using AES-256 encryption
• Encryption in Transit: All data transmission uses TLS 1.3 or higher
• Access Controls: Strict workspace isolation ensures you can only access your own data
• Authentication: Secure password hashing (bcrypt) and JWT-based session management
• Regular Security Audits: We regularly review and update our security practices
• Secure Infrastructure: Production systems hosted on security-certified cloud providers

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained while your account is active and for up to 90 days after account deletion
• Advertising Metrics: Retained for the duration of your subscription and for up to 12 months after cancellation for historical reporting
• Authentication Tokens: Deleted immediately when you disconnect an advertising account
• Query Logs: Retained for up to 24 months for service improvement purposes
• Legal or Compliance Data: Retained as required by applicable law

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access and Portability

You can access and export your data at any time through your account dashboard.

7.2 Correction

You can update your account information and workspace settings directly in the platform.

7.3 Deletion

You can request deletion of your account and associated data. Note that some information may be retained for legal or legitimate business purposes.

7.4 Disconnect Advertising Accounts

You can disconnect any linked advertising account at any time, which will immediately revoke our access and delete associated authentication tokens.

7.5 Opt-Out of Communications

You can opt out of non-essential communications by adjusting your notification preferences or following unsubscribe links in emails.

8. Third-Party Services

metricx integrates with third-party advertising platforms (Google Ads, Meta Ads, etc.). When you connect these accounts:

• You are subject to the privacy policies and terms of those platforms
• We only access data you authorize through OAuth consent screens
• We do not control how those platforms collect or use your information
• We recommend reviewing the privacy policies of connected platforms

Links to third-party privacy policies:

• Google Ads: https://policies.google.com/privacy
• Meta Ads: https://www.facebook.com/privacy/policy

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using metricx, you consent to the transfer of your information to our facilities and service providers globally.

We take steps to ensure that your data receives adequate protection wherever it is processed, including through standard contractual clauses and other appropriate safeguards.

10. Children's Privacy

metricx is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it immediately.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of personal information collected, used, and shared
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: We do not sell personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of Access: Obtain confirmation of whether we process your data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restriction: Request restriction of processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

Our legal basis for processing your data includes: contract performance, consent, legitimate interests, and legal compliance.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email for material changes
• Display a prominent notice in the platform

Your continued use of metricx after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, you can contact us at: