Privacy Policy

Our Commitment

DataSag is built with privacy at its core. We practice what we preach - our analytics platform is designed to respect user privacy while providing valuable insights.

Information We Collect

Account Information

When you create a DataSag account, we collect:

• Email address (for authentication and communication)
• Password (hashed by our authentication provider, never stored in plain text)

Analytics Data

For websites using DataSag tracking, we collect:

• Page URLs visited
• Referrer information (where visitors came from)
• Browser and device type (user agent)
• Screen resolution
• Approximate location (country-level only, via IP address)
• Interaction data (clicks, scroll depth, time on page)

The current tracker uses anonymous session estimates by default. Sites can opt into a random, persistent visitor ID stored in local storage to connect visits to merchant-reported payments. The tracker honors Global Privacy Control and Do Not Track for persistent identity. Older events may contain legacy fingerprints. IP addresses are used for country-level geolocation and are not stored in analytics events.

Optional Growth Integrations

Google Search Console

Connecting Google is optional. With your permission, DataSag uses read-only Search Console access to list properties available to your Google account and retrieve search queries, pages, clicks, impressions, click-through rates, and average positions for the property you select. We use this data to display your search performance and compare reporting periods. This connection cannot change your site or Search Console settings.

We store an encrypted Google refresh token so you can request another report without signing into Google each time. We also store your selected property and saved report results and timestamps. Access is restricted to the project owner. Google Search Console data is not sent to OpenAI or other AI providers, used to train AI models, or shared with backlink providers.

Backlinks, website audits, and AI observations

Website audits request public pages from the website you specify and save technical checks and issues. If you connect DataForSEO, a requested backlink report sends your target domain to DataForSEO using your API credentials. If you connect OpenAI, a requested AI observation sends your saved prompt to OpenAI with web search enabled. Avoid putting personal or confidential information in prompts. These optional providers process requests under their own terms and privacy policies.

Provider credentials are encrypted before storage and are used on the server. We save backlink results and AI answers, citations, model identifiers, usage metadata, and timestamps to display report history. Provider requests run when you request them; connecting an account alone does not start paid reports.

Disconnecting and deleting reports

Disconnect provider in a report's Connection settings deletes the saved connection credentials from DataSag and prevents further requests through that connection. You can also revoke DataSag's access in your Google account permissions. Disconnecting does not delete previously saved reports. Use Delete report history at the bottom of each growth report to permanently remove that report type's stored history for the project. Saved AI prompts can be removed separately. Contact mktgkevin@gmail.com for help with data access or deletion requests.

How We Use Your Information

• Account Management: To provide access to your dashboard and analytics
• Analytics Service: To display meaningful insights about website traffic
• Product Improvements: To enhance our platform and fix issues
• Communication: To send important updates about your account (we don't spam)

Data Retention

Analytics Data: Analytics records remain stored until removed. Removing a project from your dashboard may not immediately erase its stored records. Contact us to request deletion of retained project data. Growth report history has separate deletion controls described above.

Account Data: We retain account information while your account is active. In the iOS app, open All tools → Account to request permanent deletion. Confirm your password and any required MFA, then type DELETE. Deletion removes the account, owned projects, analytics and saved integration credentials, and cancels active DataSag billing without an automatic refund. Connected merchants’ own customer subscriptions are not cancelled. Financial records required by law may remain with our payment processor.

The iOS app

The app sends your email and authentication details to Supabase to sign in and uses your account identifier to retrieve your projects and analytics. Authentication tokens are stored in the device’s protected Keychain. Optional offline snapshots, saved filters, goals and release markers are stored on your device. Signing out clears offline snapshots; accepted account deletion also clears the account’s saved local settings.

PNG and PDF exports are generated on your device and are shared only through the destination you choose in the system share sheet. Temporary export files are removed after sharing. The app does not include advertising or an advertising identifier. Expo provides compatible app updates and receives the network and app-version information needed to deliver them.

Deletion uses a resumable processing queue. Keep the receipt in the app to check completion after signing out. Completed receipts retain only a request identifier, hashed verification token, status and timestamps for up to 30 days. Personal processing identifiers are removed after verified completion. Request status checks use a short-lived hashed network identifier for abuse protection; raw IP addresses are not stored in that counter. Contact mktgkevin@gmail.com if you need help with deletion or data access.

Data Sharing

We do not sell your data. Period.

We only share data in these limited circumstances:

• Service Providers: Supabase hosts our database and authentication; Vercel hosts our application. Optional Google, DataForSEO, and OpenAI integrations receive only the requests described above when you use those features.
• Legal Requirements: If required by law or to protect rights and safety

Your Rights

You have the right to:

• Access: View all data we have about you
• Delete: Delete growth report history in the app, or contact us to request account and associated data deletion
• Export: Download your analytics data (feature in development)
• Object: Opt out of certain data processing

Privacy Controls

Website owners must configure tracking and consent for their use case. Available controls include:

• No analytics cookies; persistent visitor IDs require explicit tracker configuration
• Visitor IDs can be cleared through the tracker; self-exclusion is available
• IP addresses not stored
• Project deletion controls
• Transparent data practices

Security

We take security seriously:

• All data encrypted in transit (HTTPS)
• Passwords hashed with industry-standard algorithms
• Database access restricted with row-level security
• Encrypted storage for optional integration credentials

Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes via email or dashboard notification.

Contact Us

Questions about privacy? We're here to help.

Email: mktgkevin@gmail.com