Privacy Policy

1. What We Are

analayer.com is a Google Analytics visualization tool. We connect to your Google Analytics account to display your data in a more readable format. We don't collect analytics data ourselves. We only access what's already in your Google Analytics, and we can create a new Google Analytics property for your website when you ask us to.

2. Google User Data

analayer accesses your Google account through Google OAuth. This section describes exactly what we access, why, and what happens to it.

What we access, and why:

• Basic profile (openid, email, profile): your name, email address and profile picture, to create your analayer account and sign you in
• Google Analytics, read (analytics.readonly): your Google Analytics accounts, properties, data streams and reports, to display your dashboards, real-time view, projections and tracking code
• Google Analytics, edit (analytics.edit): only requested when you click "New property", and only used to create a Google Analytics property and its web data stream when you submit that form. We never modify or delete existing properties, settings or user permissions

How we use it: only to provide the features you use in analayer. We do not use Google user data for advertising, we do not sell it, and we do not use it to build profiles or for any purpose unrelated to the service.

How we share it: we do not share Google user data with anyone, except:

• Railway, our hosting provider, which stores our database and cache
• OpenAI, only on the Enterprise plan and only when you use the AI chat, see section 5. Data sent through the OpenAI API is not used to train OpenAI's models
• When required by law

How we store and protect it: OAuth tokens and account information are stored in our database, accessible only to the application over authenticated connections. Google Analytics reports are only cached for up to 5 minutes to speed up dashboards, and are never stored long-term.

Retention and deletion: we keep your account information and OAuth tokens until you delete your account. You can revoke analayer's access at any time from your Google Account permissions, and ask us to delete all your data at [email protected]. We delete it within 30 days.

AI and machine learning: we do not use Google user data to develop, improve or train generalized AI or machine learning models.

Limited Use: analayer's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. Information We Store

In our database (MongoDB), we store:

• Your Google account information: Email, name, and profile picture (provided by Google OAuth)
• Google OAuth tokens: Access and refresh tokens to access your Google Analytics data (we request "offline access" so you don't have to reconnect every time)
• Session data: Your login sessions, including optionally your IP address and browser information for security
• Subscription information: If you're on a paid plan, we store your Stripe customer ID and subscription details
• Your settings: Share links you create, custom dimension groups, and other preferences

Temporary cache for performance (5 minutes max, never accessed by us):

• Google Analytics API responses are temporarily cached to make your dashboard load faster
• Automatically deleted after 5 minutes maximum
• We never manually access or read this cached data
• If the cache is unavailable, everything still works (just loads a bit slower)

We do NOT store:

• Passwords (we only use Google OAuth)
• Credit card information (handled entirely by Stripe)
• Long-term copies of your analytics data

4. Third-Party Services

We use these services to operate analayer.com:

• Google OAuth & Analytics API: To authenticate you, read your Google Analytics data and, when you ask for it, create new properties (see section 2)
• Google Analytics: To understand how visitors use our website and improve our service
• Stripe: For payment processing on paid plans
• Railway: Hosting provider for our database, cache, and application

Railway hosts our infrastructure, which means they have technical access to all data stored in our database and cache.

5. AI Analysis (Enterprise Plan Only)

On the Enterprise plan, we offer an AI-powered chat feature to help you analyze your Google Analytics data.

How it works:

• We use OpenAI to provide intelligent analysis and insights
• When you use the AI chat, your messages and relevant Google Analytics data are sent to OpenAI
• The AI can access your GA data (metrics, dimensions, property metadata) to answer your questions
• OpenAI processes this data according to their API data usage policies and does not use it to train its models

What data is sent to OpenAI:

• Your chat messages and questions
• Google Analytics data relevant to your query (traffic stats, dimensions, metrics, etc.)
• Property metadata (property name, ID, timezone)

This feature is only available to Enterprise plan subscribers and requires explicit user action (you must start a conversation).

6. What We Do With Your Data

We use your information only to:

• Authenticate you and maintain your session
• Fetch and display your Google Analytics data
• Process payments if you're on a paid plan
• Send you important account updates

We do not:

• Sell your data to anyone
• Use your analytics data for our own purposes
• Share your data with advertisers

We use Google Analytics on analayer.com to understand how visitors use our website. This helps us improve the service. You can opt out of Google Analytics by using browser extensions like Google Analytics Opt-out.

7. Data Security

Your data is stored in a MongoDB database with authentication. OAuth tokens are stored as needed to access your Google Analytics data. While we implement security measures, please note that Google OAuth tokens are stored in our database and are necessary for the service to function.

8. How Long We Keep Your Data

• Account data: Until you delete your account
• Analytics cache: Maximum 5 minutes in Redis
• Sessions: Until they expire or you log out

9. Your Rights

You can:

• Revoke access: Disconnect analayer from your Google account at any time through your Google account settings
• Delete your account: Contact us at [email protected] and we'll delete all your data
• Cancel subscription: Manage your billing through the dashboard

10. Cookies

We use cookies only for authentication (to keep you logged in). No tracking cookies, no advertising cookies.

11. Share Links

When you create a share link, we track how many times it's been accessed and when it was last used. Share links can be deleted or set to expire.

12. Children's Privacy

Our service is not intended for children under 13. We don't knowingly collect information from children.

13. Changes to This Policy

If we make significant changes to this policy, we'll notify you by email.