Privacy Policy

1. Information We Collect

We collect data to create and manage your Fluxion Analytics account and to display GA4 reports on your behalf.

1.1 Account information

When you sign up, we collect your email address, name or display name, company name, and authentication data (such as a password managed by our authentication provider). This is used to create and manage your account and to communicate with you about the Service.

1.2 Google user data (via Google APIs)

If you choose to connect your Google account, we access certain Google user data via Google OAuth and the Google Analytics APIs, with your explicit consent on the Google consent screen. Depending on the scopes you approve, we may access:

• Google Analytics 4 data via the https://www.googleapis.com/auth/analytics.readonly scope, including property identifiers (for example, properties/{id}) and aggregated metrics and dimensions such as users, sessions, page views, events, conversions, traffic sources, devices, and similar analytics data.
• Basic profile and email information via the openid and https://www.googleapis.com/auth/userinfo.email scopes, including your Google account email address and user ID, which we use to link your Google account to your Fluxion Analytics workspace.

We do not request or store your Google account password.

1.3 Automatically collected information

When you use the Service, we may collect technical information such as browser type, device and operating system, IP address and approximate location, and timestamps and pages or features accessed. This is used for security, diagnostics, and to improve the Service.

1.4 Analytics and user experience tools (Google Tag Manager, Contentsquare)

Fluxion Analytics uses third-party tools such as Google Tag Manager to manage tags on our site and Contentsquare (and, where enabled, similar experience analytics tools like Hotjar) to understand how visitors use the site. These tools may collect information about the pages you visit, how you interact with elements on the page (such as clicks, scrolls and navigation), your browser and device type, and general location based on your IP address. We use this information in aggregated form to improve the usability and performance of the Service and do not use it to identify you as an individual for advertising on other websites.

You can control the use of these tools through your browser settings and, where available, any cookie or tracking preferences we provide on the site. If you have questions about how these tools are used, you can contact us at [email protected].

2. How We Use Google User Data

We use Google user data only to provide and improve the Fluxion Analytics Service. Specifically, we use it to:

• Connect your GA4 properties to your Fluxion Analytics workspace.
• Query the GA4 APIs on your behalf using read-only scopes.
• Display dashboards, reports, and visualisations of your own analytics data.
• Remember your preferred GA4 property, date ranges, and dashboard settings.
• Provide support and troubleshooting related to your connected properties.

We do not use Google Analytics data for advertising outside of your own account, do not sell Google user data, and do not build advertising profiles from Google user data. Our use of Google user data complies with the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

3. How We Store and Protect Your Data

3.1 Storage

We store your account data, configuration (including GA property IDs), and any cached analytics results in databases managed by our infrastructure providers in secure cloud data centres.

Where required to access GA4 on your behalf, we store OAuth tokens (including refresh tokens) securely so that we can request new access tokens from Google without asking you to re-authorise every time. These tokens are stored in protected tables and are not visible to other customers.

3.2 Security measures

• Encryption in transit using HTTPS (TLS) between your browser and our servers.
• Access controls and authentication for internal tools and administrative access.
• Separation of production and development environments where appropriate.
• Monitoring and logging to detect abuse or unauthorised access.

No system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

3.3 Data hosting and service providers

We use third-party infrastructure providers to host and operate the Service, including:

• Supabase as our primary application database and authentication provider. Your account data, configuration, and cached analytics results are stored in Supabase-managed PostgreSQL databases in secure cloud data centres.
• Application hosting providers (such as Netlify) to host the Fluxion Analytics web application and API endpoints.
• Email providers (such as Mailgun and/or Google Workspace / Gmail) to deliver transactional emails including account confirmation, password reset, and security notifications.
• Analytics and logging providers to monitor performance, reliability, and security of the Service.

These providers act as data processors on our behalf and may only process your data in accordance with our instructions and this Privacy Policy. All browser traffic to the Service uses HTTPS (TLS).

4. How We Share Information

We do not sell your personal information or Google user data.

We may share limited data with:

• Service providers and processors that help us operate the Service (as described above), under contracts that require them to protect your data and use it only on our instructions.
• Legal authorities if required by law, court order, or to protect our rights, users, or the public.
• A successor entity in the event of a merger, acquisition, or sale of assets, in which case we will take steps to ensure the receiving party honours this Privacy Policy.

We do not share Google user data with third parties for advertising or marketing purposes.

5. Data Retention and Deletion

5.1 Retention

We retain your account data and Google user data for as long as your Fluxion Analytics account is active or as needed to provide the Service.

If you disconnect your Google account or remove a GA4 property from your workspace, we stop requesting new data for that property. We may retain historical aggregated analytics data for a period of time so your dashboards and reports continue to function, unless you request deletion.

5.2 Your rights and choices

• You can disconnect Google Analytics at any time from within the app (where supported) or by revoking access from your Google Account security settings.
• You can delete your Fluxion Analytics account from within the app (for example, from the Settings page), which will remove associated account data, GA4 property configuration, Google connection tokens, and cached analytics results from our primary application databases. We may continue to retain limited data in backups, logs, or billing records where required for security, legal, or accounting purposes.
• You can request deletion of stored data (including Google user data) by contacting us at the email address below. We will delete data unless we are required to retain it by law or for legitimate business purposes (such as security or accounting).

6. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us so we can delete it.

7. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes may be communicated through the Service or by email where appropriate.

8. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: [email protected]

Website: https://fluxionanalytics.com