Privacy policy

What we collect

Two kinds of data, kept separately:

• Account data: your name, email address, and, if you sign in with Google, the profile picture Google provides. Passwords are stored only as a salted hash.
• Platform data from Meta: campaign, ad set and ad performance, Page and Instagram insights, posts and their metrics, ad account balances, and the access token Meta issues so we can sync. Facebook Login only gives us what you choose to share.
• Platform data from Google: Analytics sessions, channels, landing pages and key events for the GA4 properties you pick, and Search Console clicks, impressions, position and queries for the sites you pick. Read-only scopes, granted by you.
• Platform data from Shopify: orders, products, discounts, refunds and customer counts, aggregated into daily totals. We store the client ID and secret of the app you create, encrypted; the access tokens themselves last 24 hours and are never written down.

Why we collect it

We process platform data only on behalf of, and at the direction of, the business that connected the account. Specifically to:

• Show that business its dashboard, breakdowns, comparisons and social metrics.
• Generate the reports and alerts that business (or its agency) asks for.
• Make the same data available to that business through the API and MCP server, using keys the business creates and can revoke.

What we never do

• Sell, license or rent platform data.
• Combine data from one business with another, or build profiles of individuals.
• Use platform data for advertising, training models, or any purpose other than serving the business that connected it.
• Write to any platform: MetricsGo never creates, edits, pauses, publishes or fulfils anything on your accounts.
• Use Google user data for advertising or share it onward: our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Where it lives and who can see it

Data is stored in a database on servers we control. It is visible only to members of the organisation that connected it, according to the roles that organisation sets (admins, members, client viewers). Client viewers see only the clients shared with them.

Service providers that touch data on our behalf: our hosting provider (Hostinger, virtual private server), our transactional email provider (Resend, for sign-up and reset emails only), and Google (sign-in, and the Analytics and Search Console APIs you connect). None of them receives platform data for their own use.

How long we keep it

Platform data is kept while the connection exists so that history and comparisons work. When you disconnect an account or Page, its synced data is removed; when you delete a client, everything synced for that client is removed. When you delete your account, your account data is removed. Backups age out within 30 days.

The platforms limit how far back their own data goes — Search Console keeps 16 months, Meta restricts some insights, and a Shopify app without read_all_orders sees only 60 days. We hold at most 13 months of daily history per connection.

Your choices

• Disconnect any ad account, Page, Instagram account, GA4 property, Search Console site or Shopify store from Settings → Clients at any time.
• Remove MetricsGo from your Facebook settings (Settings → Business integrations) or your Google account (Security → Third-party access); syncing stops immediately.
• Delete the app you created in your Shopify Dev Dashboard; the credentials we hold stop working the moment you do.
• Ask us to delete anything, or ask what we hold, by emailing support@digygo.com. See the Data deletion page for the step-by-step.

Cookies

We use one session cookie to keep you signed in and a local preference for light or dark theme. No advertising or third-party analytics cookies.

Changes and contact

We will note material changes here with a new date. Questions go to support@digygo.com.