Last updated: October 22, 2026
This policy explains how Suyog Adhikari ("Metriclune", "we", "us") handles information when you visit our website or use the Metriclune reporting service (the "Service"). If you have questions, email support@metriclune.com.
1. Information we collect
Account information
When you sign up or accept an invitation we collect your name, email address and password (stored only as a secure hash), and the date you accepted our terms. If you turn on two-step sign-in, we store the secret your authenticator app uses (encrypted) and your recovery codes (as one-way hashes).
Workspace content
Workspace names, settings, report branding and logos you upload, commentary you write, the email addresses you add as report recipients or invite to a workspace, and saved reports.
Shared report links
If you create a share link for a saved report, anyone with that link can view the report and download its PDF without signing in. We count how many times a shared report is opened and note when it was last opened, so you can see whether your client has looked at it. We don't record who opened it, and views by members of your own workspace aren't counted. You can turn a link off at any time.
Live dashboard links
If you create a live dashboard link for a workspace, anyone with that link can view that workspace's current reporting numbers for a choice of recent periods, and download them, without signing in. Sample data is never included. We count opens the same way as for shared reports, and the link works until you replace it or turn it off.
Data from platforms you connect
When you connect a platform, you authorize Metriclune to read reporting data on your behalf:
- Google Analytics 4: property names, timezone and currency; daily sessions, engaged sessions, engagement time, page views, traffic sources, page paths and titles, and sign-up event counts.
- Google Ads: advertiser account names, IDs, timezone and currency; campaign names and types, and daily spend, impressions, clicks and reported conversions.
- Google Search Console: the URLs of properties you can access and your permission level; daily search clicks, impressions and average position, the search queries people used and the page URLs shown in results.
- YouTube: channel name and ID; daily channel and video views, watch time, video titles and subscriber counts.
- Facebook and Instagram: Page and professional account names and IDs; daily Page and account views, interactions and follower counts.
- TikTok: your account ID and display name, follower count, and public video titles and lifetime view, like, comment and share counts.
- Website outcomes: opaque event IDs, event types and timestamps you send. We ask you never to send names or email addresses.
We also store the access and refresh tokens the platforms issue, encrypted at rest. We never receive your platform passwords.
Billing information
Payments are processed by Stripe. We store your Stripe customer ID, plan, billing period and subscription status. Card numbers are entered on Stripe's pages and never reach our servers.
Technical information
Our servers record IP addresses, request times and error details for security and reliability. We use only essential cookies: a session cookie that keeps you signed in and a CSRF cookie that protects forms. If our website uses Plausible Analytics, it measures visits without cookies and without collecting personal data.
2. How we use information
- To provide the Service: sync your connected accounts, build dashboards and reports, and email reports you schedule.
- To run your account: sign-in, password resets, email confirmation, invitations, billing, trial reminders, and a single reminder to connect your first account if you haven't.
- To keep the Service secure: rate limiting, abuse prevention and investigating errors.
- To answer support requests and to tell you about important changes to the Service.
We do not sell personal information. We do not use your data or your connected-platform data for advertising, and we do not use it to train machine learning models.
3. Google API Services and YouTube
Metriclune's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We use Google user data only to provide and improve the reporting features you see in Metriclune.
- We do not transfer it to others except as needed to provide the Service, to comply with law, or as part of a merger or acquisition with notice to you.
- We show it to other people only when you direct us to: for example when you invite workspace members, email a report or create a share link.
- We do not use it for advertising, and we do not sell it.
- People at Metriclune do not read it unless you ask us to (for example in a support request), it is needed for security, or the law requires it.
Metriclune uses YouTube API Services. By connecting YouTube you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can revoke Metriclune's access at any time from your Google account permissions page. If YouTube access can't be revalidated for 30 days, we delete the YouTube data we stored.
4. Meta and TikTok
Data from Facebook and Instagram is accessed through Meta's official APIs and used only to show your Page and account analytics. Data from TikTok is accessed through TikTok's Display API and used only to show your account and video statistics. You can remove Metriclune from your Facebook or TikTok settings at any time. See Data deletion for step-by-step instructions.
5. Who we share information with
We share information only with service providers that help us run Metriclune, under contracts that require them to protect it:
| Provider type | Purpose |
|---|---|
| Cloud hosting and database (for example Vercel and Supabase) | Running the website, API and database |
| Stripe | Payments, invoices and tax calculation |
| Email delivery provider | Sending account emails, invitations and reports |
| Error monitoring (if enabled, for example Sentry) | Finding and fixing bugs, without personal data by default |
| Scheduled job runner (for example GitHub Actions) | Running the daily syncs |
Inside the Service, workspace members you invite can see that workspace's data according to their role, anyone you send a share link to can see that one saved report, and anyone you send a live dashboard link to can see that workspace's current reporting numbers. We may disclose information if the law requires it or to protect the rights and safety of our users.
6. How long we keep information
- Account and workspace data: while your account is active.
- Connected-platform data: until you delete the source, the workspace or your account, or the platform requires deletion.
- Sync attempt logs: 90 days.
- Share links: until you turn the link off or delete the report. Live dashboard links: until you turn them off or delete the workspace.
- Billing records: as long as tax and accounting law requires (Stripe keeps invoices).
- Backups: deleted data may remain in encrypted backups for up to 30 days before it is overwritten.
7. Your rights and choices
You can view and export your data at any time (CSV for sources, and PDF, CSV and JSON for reports), correct your name in Settings, and delete sources, workspaces or your whole account yourself. Depending on where you live (for example under the GDPR, UK GDPR, Canada's PIPEDA or California's CCPA), you may also have the right to request access, correction, deletion or portability, and to object to or restrict processing. Email support@metriclune.com and we will respond within 30 days. You may also complain to your local data protection authority.
8. Security
We use HTTPS everywhere, encrypt platform tokens at rest, isolate workspaces and rate limit sign-in. Read more on our Security page. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as the law requires.
9. International transfers
Our providers may process data in countries other than yours, including the United States and Canada. Where required, we rely on appropriate safeguards such as standard contractual clauses.
10. Children
Metriclune is a business tool and is not intended for anyone under 16. We do not knowingly collect information from children.
11. Changes
If we make material changes we will update the date above and, where appropriate, email account owners before the change takes effect.
12. Contact
Suyog Adhikari · support@metriclune.com