1. Scope
This Policy explains how MetricPilot collects, uses, stores, and shares information when you visit our website, create an account, connect a Google Business Profile, or receive reports.
2. Information we collect
- Account information: business or account name, email address, authentication details, account settings, and signup time.
- Google account and Business Profile data: identifiers for the Google account and business locations you authorize; profile names; reviews, ratings, reviewer display names, review dates, and owner replies; OAuth access and refresh tokens; and connection status.
- Report data: review-derived themes, summaries, recommendations, reply drafts, report dates, and delivery status.
- Product analytics: Google Analytics processes limited cookieless page measurements when analytics storage is denied. If you allow analytics, it may also use analytics cookies and process controlled interactions such as viewing a sample report or beginning signup. Separately, MetricPilot records account lifecycle milestones such as connection, synchronization, report generation, and delivery using internal account or business identifiers.
- Technical information: IP address, browser or device information, request records, errors, and security logs.
3. How we use information
We use information to authenticate you; connect and synchronize the business you select; generate and email reports; show report schedules and connection status; secure, troubleshoot, and improve MetricPilot; communicate service notices; enforce our Terms; and comply with law. We do not sell personal information or use Google user data for advertising.
4. Automated processing
To provide reports and drafting features, we may send the minimum review information needed for that purpose to an AI processing service provider acting on our behalf. Automated outputs may be incomplete or inaccurate and should be reviewed by the business owner. This Policy describes the data involved and its permitted uses; it does not disclose MetricPilot’s proprietary prompts, configurations, selection criteria, or other internal methods.
5. When we share information
We share information with service providers that help operate MetricPilot, including Google for authorization, Business Profile access, and consent-aware website measurement, plus providers supporting AI processing, infrastructure, databases, security, and email delivery. When analytics storage is denied, Google measurement is configured without analytics cookies; when it is granted, normal Google Analytics measurement is enabled. Website analytics are configured not to receive Google review content, reviewer names, email addresses, business names, OAuth credentials, account identifiers, or report content; Google Signals and ad-personalization signals are disabled. Providers process information on our behalf under their applicable terms. We may also disclose information when required by law, to protect rights and security, or as part of a business transaction with appropriate safeguards.
6. Google API data
MetricPilot’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. We request access only to operate the connected Google Business Profile review-reporting features described here.
7. Retention and deletion
We retain account, connection, operational, review, and report information only for as long as needed to provide the requested service, meet security and legal obligations, and comply with Google’s applicable requirements. You may disconnect Google at any time. To request deletion of your MetricPilot information, email legal@metricpilotapp.com. We may retain limited records when legally required or necessary to document the request.
8. Security
We use reasonable administrative and technical safeguards, including restricted access and protection of stored authorization tokens. No internet service can guarantee absolute security.
9. Your choices and rights
You can update account settings, disconnect Google in MetricPilot, or revoke MetricPilot through your Google account. Depending on your location, you may have rights to access, correct, delete, or obtain a copy of personal information and to appeal or complain to a regulator. Contact us to exercise a request; we may need to verify your identity.
10. Adults only, changes, and contact
MetricPilot is a business service intended only for adults who are at least 18 years old. It is not directed to children or teenagers, and anyone under 18 may not create an account or use the service. We do not knowingly collect personal information directly from anyone under 18. If we learn that we have collected such information, we will take reasonable steps to delete it. We may update this Policy and will post the new effective date and provide additional notice for material changes. Questions, privacy requests, or concerns about information involving someone under 18 may be sent to legal@metricpilotapp.com.