Privacy Policy

1. Information We Collect

We collect data to create and manage your Fluxion Analytics account and to display GA4 reports on your behalf.

1.1 Account information

When you sign up, we collect your email address, name or display name, company name, and authentication data (such as a password managed by our authentication provider). This is used to create and manage your account and to communicate with you about the Service.

1.2 Google user data (via Google APIs)

If you choose to connect your Google account, we access certain Google user data via Google OAuth and the Google Analytics APIs, with your explicit consent on the Google consent screen. Depending on the scopes you approve, we may access:

• Google Analytics 4 data via the https://www.googleapis.com/auth/analytics.readonly scope, including property identifiers (for example, properties/{id}) and aggregated metrics and dimensions such as users, sessions, page views, events, conversions, traffic sources, devices, and similar analytics data.
• Basic profile and email information via the openid and https://www.googleapis.com/auth/userinfo.email scopes, including your Google account email address and user ID, which we use to link your Google account to your Fluxion Analytics workspace.

We do not request or store your Google account password.

1.3 Automatically collected information

When you use the Service, we may collect technical information such as browser type, device and operating system, IP address and approximate location, and timestamps and pages or features accessed. This is used for security, diagnostics, and to improve the Service.

1.4 AI feature data (AI Insights and AI Support)

If you use AI features (such as AI Insights explanations or the in-app chat support), we process the inputs you provide (for example, your question or message) and may use limited dashboard context (such as a property identifier and an aggregated metrics summary) to generate a response. We may store:

• The prompt/message you submit and the response returned.
• Metadata such as timestamps, your account ID, and the GA4 property being referenced.
• Operational data for security (for example, rate limiting signals).

Please do not include sensitive personal information in AI prompts or chat messages.

1.5 Billing and subscription information

If you purchase a subscription or add-ons, payments are processed by our billing provider. We receive billing-related information such as subscription status, plan, renewal dates, seat counts, and transaction identifiers so we can provide access to the Service and manage your subscription.

1.6 Support requests and feature submissions

If you contact support, submit a support form, or submit a feature idea, we collect the information you provide (such as name, email, message, the reason for your request, and optional context like GA4 property). We use this to respond and to improve the Service.

1.7 Analytics and user experience tools (Google Tag Manager, Contentsquare)

Fluxion Analytics uses third-party tools such as Google Tag Manager to manage tags on our site and Contentsquare (and, where enabled, similar experience analytics tools like Hotjar) to understand how visitors use the site. These tools may collect information about the pages you visit, how you interact with elements on the page (such as clicks, scrolls and navigation), your browser and device type, and general location based on your IP address. We use this information in aggregated form to improve the usability and performance of the Service and do not use it to identify you as an individual for advertising on other websites.

You can control the use of these tools through your browser settings and, where available, any cookie or tracking preferences we provide on the site. If you have questions about how these tools are used, you can contact us at support@fluxionanalytics.com.

2. How We Use Your Information

We use personal information and Google user data only to provide and improve the Fluxion Analytics Service. Specifically, we use it to:

• Connect your GA4 properties to your Fluxion Analytics workspace.
• Query the GA4 APIs on your behalf using read-only scopes.
• Display dashboards, reports, and visualisations of your own analytics data.
• Generate AI explanations and AI-assisted support responses when you request them.
• Remember your preferred GA4 property, date ranges, and dashboard settings.
• Provide support and troubleshooting related to your connected properties.
• Process billing events, manage subscriptions, seats, and add-ons.
• Protect the Service from abuse (for example, rate limiting and fraud prevention).

We do not use Google Analytics data for advertising outside of your own account, do not sell Google user data, and do not build advertising profiles from Google user data. Our use of Google user data complies with the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

3. How We Store and Protect Your Data

3.1 Storage

We store your account data, configuration (including GA property IDs), and any cached analytics results in databases managed by our infrastructure providers in secure cloud data centres.

Where required to access GA4 on your behalf, we store OAuth tokens (including refresh tokens) securely so that we can request new access tokens from Google without asking you to re-authorise every time. These tokens are stored in protected tables and are not visible to other customers.

3.2 Security measures

• Encryption in transit using HTTPS (TLS) between your browser and our servers.
• Access controls and authentication for internal tools and administrative access.
• Separation of production and development environments where appropriate.
• Monitoring and logging to detect abuse or unauthorised access.

No system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

3.3 Data hosting and service providers

We use third-party infrastructure providers to host and operate the Service, including:

• Supabase as our primary application database and authentication provider. Your account data, configuration, and cached analytics results are stored in Supabase-managed PostgreSQL databases in secure cloud data centres.
• Application hosting providers (such as Render) to host the Fluxion Analytics web application and API endpoints.
• Email delivery providers (such as Mailgun) to send transactional email.
• Cloudflare Turnstile to help protect forms from spam and abuse.
• OpenAI (or other AI model providers we may use) to generate AI Insights explanations and chat responses when you request AI features.
• Email providers (such as Mailgun and/or Google Workspace / Gmail) to deliver transactional emails including account confirmation, password reset, and security notifications.
• Freshdesk (or a similar ticketing platform) to receive and manage support requests submitted through our support forms.
• Lemon Squeezy as our billing and payment processor.
• Analytics and logging providers to monitor performance, reliability, and security of the Service.

These providers act as data processors on our behalf and may only process your data in accordance with our instructions and this Privacy Policy. All browser traffic to the Service uses HTTPS (TLS).

4. How We Share Information

We do not sell your personal information or Google user data.

We may share limited data with:

• Service providers and processors that help us operate the Service (as described above), under contracts that require them to protect your data and use it only on our instructions.
• Team members you invite to your account (where applicable). If you add team members, you control which properties they can access in the app.
• Legal authorities if required by law, court order, or to protect our rights, users, or the public.
• A successor entity in the event of a merger, acquisition, or sale of assets, in which case we will take steps to ensure the receiving party honours this Privacy Policy.

We do not share Google user data with third parties for advertising or marketing purposes.

5. Data Retention and Deletion

5.1 Retention

We retain your account data and Google user data for as long as your Fluxion Analytics account is active or as needed to provide the Service.

If you disconnect your Google account or remove a GA4 property from your workspace, we stop requesting new data for that property. We may retain historical aggregated analytics data for a period of time so your dashboards and reports continue to function, unless you request deletion.

If you use AI features, we may retain AI conversation records and generated explanations to provide history, auditing, and support. If you submit support requests or feature ideas, those submissions may be stored in our databases and in third-party ticketing or email systems.

5.2 Your rights and choices

• You can disconnect Google Analytics at any time from within the app (where supported) or by revoking access from your Google Account security settings.
• You can delete your Fluxion Analytics account from within the app (for example, from the Settings page), which will remove associated account data, GA4 property configuration, Google connection tokens, and cached analytics results from our primary application databases. We may continue to retain limited data in backups, logs, or billing records where required for security, legal, or accounting purposes.
• You can request deletion of stored data (including Google user data) by contacting us at the email address below. We will delete data unless we are required to retain it by law or for legitimate business purposes (such as security or accounting).

6. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us so we can delete it.

7. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes may be communicated through the Service or by email where appropriate.

8. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: support@fluxionanalytics.com

Website: https://fluxionanalytics.com