Privacy Policy

Powers4GA shows your Google Analytics data on a simple dashboard. We fetch that data from Google when you ask for it. We don't keep our own copy of your analytics, and we only store what the app needs to work.

Powers4GA is run by TODO(nadeem): legal entity name and registered address. In this policy, "we" means that entity.

Your Google Analytics data

Your analytics stay in your own Google Analytics property, in your Google account. When you open a dashboard, we request the report from Google's APIs and show you the result.

To keep dashboards fast and stay inside Google's limits, we hold report results in a temporary cache. Results expire automatically after 30 minutes or less. Live visitor counts expire after about a minute. We don't build a database of your analytics, and we don't use them for anything else.

What we store about your Google connection

When you connect Google, we store:

• your Google account ID and email address
• an encrypted refresh token, which lets us fetch reports for you
• the permissions you granted

For each website you add, we store:

• the Google Analytics property ID and name
• the Google Analytics account name
• its time zone and currency

How we use Google user data

We ask Google for these permissions:

• Your sign-in identity and email address, to identify the Google account you connected.
• Read access to Google Analytics, to list your properties and show your reports.
• Edit access to Google Analytics, to create a property and web stream when you ask us to during setup.

Powers4GA's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

That means we use this data only to provide and improve the features you see in Powers4GA. We don't sell it, use it for advertising, or use it to train general AI models. We don't share it except with the service providers listed below, or when the law requires it. People at Powers4GA don't read it unless you ask us to, for example to help with a support request, or unless it is needed for security or by law.

Your account

For an account we store your name, email address and a hashed password, and the workspace you belong to. Each sign-in session records the IP address and browser details it came from. We also keep a change log of edits to these records, so we can investigate problems and misuse.

Billing

Payments are handled by Dodo Payments, which is the merchant of record and sells Powers4GA to you. Dodo Payments collects your payment details, name and billing address, and handles tax and receipts. Its privacy policy covers that data.

We don't see or store your full card number. We keep only the minimum needed to give you access: your order or customer reference, what you bought, and its status and date.

The waitlist

When you join the waitlist, we store:

• your email address
• the page you joined from
• the referrer your browser sent, if any
• any UTM tags in the link you followed
• the date and time you joined

We use this to invite you and to tell you about Powers4GA.

Cookies and browser storage

Signing in sets a session cookie. It keeps you signed in and is not used for tracking. We don't use advertising cookies. Your browser also remembers your light or dark mode choice and your progress through website setup. Those stay on your device.

Why we can use your data

If laws such as the GDPR apply to you, we rely on:

• Contract, to provide the service you signed up for.
• Legitimate interests, to keep the service secure, fix errors and prevent abuse.
• Consent, for your Google connection and the waitlist. You can withdraw it at any time.
• Legal obligation, where the law requires us to keep records.

Who we share data with

We don't sell your personal data. We use these providers to run Powers4GA:

• Cloudflare for hosting, our database, the temporary report cache, bot checks on forms and account emails. It sees your IP address when you use the site.
• Google for the Analytics data you connect. Google's own privacy policy applies.
• Dodo Payments for payments, as described above.
• Sentry for error reports and session replays. Replays mask on-screen text and form inputs, and block images and media.

These providers may process data outside your country. We may also share data if the law requires it, or as part of a merger or sale of the business, in which case this policy continues to protect it.

How long we keep data

• Report cache: 30 minutes or less.
• Account, connection and website details: until you ask us to delete them.
• Waitlist entries: until you ask us to remove them.
• Billing records: as long as tax and accounting law requires.

How we protect it

Google refresh tokens are encrypted and never sent to your browser. Passwords are stored hashed. Data moves over HTTPS. See our security page for more.

Your choices and rights

You can remove Powers4GA's access to Google at any time in your Google account permissions. Your analytics stay in your Google account.

You can email support@powers4ga.com to see, correct, export or delete your personal data, or to object to how we use it. We'll reply within 30 days. When we delete your account, we also delete your Google connection, website details and related change log entries. We keep only what the law requires.

If you are unhappy with how we handled your data, you can also complain to your local data protection authority.

Children

Powers4GA is for businesses and adults. It isn't meant for anyone under 18.

Changes to this policy

If we change this policy, we'll update the date at the top of this page. If a change is significant, we'll also tell you by email or in the app.

Contact

Questions? Email support@powers4ga.com.