Privacy Policy

Information we collect

• Account information — your name, email address, and organization details when you create an account or are invited to one.
• Connection credentials — the OAuth access tokens you authorize when you connect a third-party service. Tokens are encrypted at rest and used only to retrieve the data you ask us to analyze.
• Marketing & analytics data — the metrics and insights we retrieve from the services you connect (for example sessions, clicks, impressions, reach, engagement, conversions, and ad spend), stored as historical daily snapshots so we can show trends and generate reports.
• Usage data — basic logs needed to operate and secure the Service.

Services you connect

When you choose to connect an account, we access read-only marketing and analytics data from that provider — only with your authorization, and only the permissions you grant. Supported providers include:

• Google — Google Analytics 4, Search Console, Google Ads, Merchant Center, Business Profile, and YouTube;
• Meta — Facebook Pages, Instagram professional accounts, and Meta Ads;
• LinkedIn, X (Twitter), and TikTok — advertising and organic insights;
• Shopify and Amazon — store and advertising performance.

We retrieve performance metrics and insights only. We do not collect your private messages, your contacts, or the personal content of your followers or customers.

How we use information

• Retrieve and store the analytics data you authorize;
• Generate dashboards, trends, and AI-assisted reports for your organization;
• Deliver those reports to the recipients you choose, by email;
• Operate, secure, maintain, and improve the Service.

We do not sell your data, and we do not use it to serve advertising.

Meta (Facebook and Instagram) data

When you connect a Meta account, we access — with your permission and through the official Meta APIs — your Facebook Page insights, Instagram professional-account insights, and Meta Ads performance metrics, solely to display analytics and generate reports for you. We access only the permissions you grant during the Meta login (such as reading Page and Instagram insights and reading ads performance). We do not post on your behalf, we do not read your private messages, and we do not collect the personal data of your followers or customers. Our access to and use of Meta data complies with the Meta Platform Terms and the Meta Developer Policies. We do not share Meta data with anyone except the service providers needed to operate the Service (listed below), and we never sell it. You can disconnect your Meta account at any time from Settings → Connections, which stops collection and deletes the stored Meta data for that connection (see Data deletion and your rights below).

Google user data — Limited Use

MarketMetrica’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We access read-only Google data (such as Google Analytics 4, Search Console, Google Ads, Merchant Center, Business Profile, and YouTube) solely to provide and improve the user-facing reporting features described in this policy. We do not use Google user data for advertising, we do not sell it, and we do not transfer it to others except as needed to provide the service, comply with the law, or as part of a merger or acquisition. We do not allow humans to read your Google data unless we have your consent for specific data, it is necessary for security or to comply with law, or the data is aggregated and anonymized.

How we share data

We share data only with the service providers that help us operate MarketMetrica, and only so they can provide their service to us: hosting (Vercel), database and authentication (Supabase), AI report generation (Anthropic), and email delivery (Resend). These providers process data on our behalf under their own terms and confidentiality obligations. We do not send your data to be used for training AI models. We may also disclose data if required by law, or in connection with a merger or acquisition. We do not sell your data to anyone.

Data retention

We retain account information and historical snapshots for as long as your account is active. You can disconnect any service at any time from Settings → Connections, which stops further collection and removes that connection’s stored data.

Data deletion and your rights

You are in control of your data:

• Disconnect a providerfrom Settings → Connections to stop collection and delete the data stored for that connection;
• Revoke accessfrom the provider’s own security settings — for example your Google Account permissions, or Facebook → Settings & privacy → Settings → Business Integrations;
• Delete your account, or request deletion of all of your data, by emailing us at privacy@marketmetrica.com. We will delete your data within 30 days, except where we are required to retain it by law.

Security

Connection tokens and provider credentials are encrypted at rest (AES-256-GCM) and access is restricted. Data is transmitted over encrypted (TLS) connections. No method of storage or transmission is completely secure, but we take reasonable measures to protect your information.

Cookies

We use only the essential cookies needed to keep you signed in and to operate the Service. We do not use advertising or third-party tracking cookies.

Children

MarketMetrica is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 18.

International transfers

We may process and store data in the United States and in other regions where our service providers operate. By using the Service you consent to this transfer.

Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the “Last updated” date above.

Contact

This Service is operated by Mindsheep Labs LLC. Questions about this policy, or requests regarding your data, can be sent to privacy@marketmetrica.com.