Privacy Policy

1. Information We Collect

We collect information you provide directly to us and information we obtain automatically when you use our service:

Information You Provide:

• Account information (name, email address)
• Google Analytics data (when you connect your account)
• Payment information (processed securely by Stripe)
• Communication preferences

Automatically Collected Information:

• Usage data and analytics
• Device and browser information
• IP address and location data
• Cookies and similar technologies

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process payments and manage subscriptions
• Send you important service updates and notifications
• Respond to your questions and support requests
• Ensure security and prevent fraud
• Comply with legal obligations

3. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party services like Stripe for payment processing and Google for OAuth authentication
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

4. Google OAuth, Analytics Data, and Google Sheets Data

When you connect your Google account:

• We access only the Google data necessary to provide our dashboard services
• We do not mine, analyze, or use your data for any purpose other than providing our service
• We do not share your Google data with third parties
• We store your data only as long as necessary to provide our service
• You can revoke access to your Google data at any time

Google Analytics 4 & Google Sheets Limited Use

The use of raw or derived user data received from Google Analytics 4 APIs will adhere to the Google Workspace API user data and developer policy, including the Limited Use requirements.

We strictly comply with Google's Limited Use requirements for Google Analytics 4 data:

• We do not use, transfer, or sell your Google Analytics 4 data to create, train, or improve any foundational machine learning or artificial intelligence models
• We do not use your data for generalized AI/ML model training
• All data aggregated, anonymized, or derived from Google Analytics 4 is used solely for providing our dashboard and analytics services to you
• We maintain full compliance with Google Workspace API user data and developer policy requirements

5. Payment Processing and Stripe

For payment processing, we use Stripe, a PCI DSS compliant payment processor:

• Payment information is processed directly by Stripe and not stored on our servers
• We only receive confirmation of successful payments and basic billing information
• Stripe"s privacy policy applies to the collection and use of payment information
• We maintain records of your subscription status and billing history

6. Data Security

We implement industry-standard security measures to protect your data:

• End-to-end encryption for data transmission (TLS/SSL)
• Encryption at rest for stored data
• Regular security audits and vulnerability assessments
• Access controls and multi-factor authentication
• Secure development practices and code reviews
• Regular security updates and patches

7. Data Retention

We retain your information only as long as necessary:

• Account data: Until you delete your account or request deletion
• Google Analytics data: Only while your account is active and connected
• Payment records: As required for accounting and legal purposes
• Logs and analytics: For up to 12 months for security and service improvement

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Opt-out: Unsubscribe from marketing communications
• Revoke Access: Disconnect your Google Analytics account at any time

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and authentication status
• Remember your preferences and settings
• Analyze service usage and performance
• Provide personalized content and features

You can control cookie settings through your browser preferences.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any material changes by:

• Sending an email to your registered email address
• Posting a notice on our website
• Updating the "Last updated" date at the top of this policy

Your continued use of our service after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us:

• Email: privacy@graphed.com
• For data subject requests: privacy@graphed.com