This Privacy Policy explains how Pivotal Metrics (“we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit pivotalmetrics.com, use our B2B analytics platform, connect third-party data sources, or otherwise interact with our services (collectively, the “Services”).
This Privacy Policy is incorporated into our Terms of Service. By using the Services, you agree to the practices described here. If you do not agree, please do not use the Services.
1. Information We Collect
We collect information that alone or in combination could identify you or your organization (“Personal Information”), as well as business and technical data needed to operate the platform.
Information you provide
- Account information: name, email address, organization name, role, and authentication credentials (including passkeys or magic links processed through Authio or similar identity providers).
- Workspace and team data: membership invitations, permissions, settings, and support communications.
- Connected source data: when you authorize integrations (such as Shopify, QuickBooks, Stripe, Meta Ads, Google Ads, or Klaviyo), we receive data made available through those APIs, which may include orders, customers, revenue, advertising performance, accounting records, and related business metrics.
- Uploaded content: files, documents, or other materials you submit for analysis or report generation.
- Payment information: billing contact details and subscription status. Payment card data is typically processed by our payment processor (such as Stripe) and not stored by us in full.
Information collected automatically
- Log and device data: IP address, browser type, operating system, pages viewed, referring URLs, timestamps, and diagnostic events.
- Cookies and similar technologies: we use cookies and local storage for authentication, session management, theme preferences, and security. See Section 8 for more detail.
- Usage data: feature usage, report runs, connection status, and performance metrics to operate and improve the Services.
2. How We Use Information
We use Personal Information and connected data to:
- provide, operate, and maintain the Services;
- authenticate users and manage organizations, teams, and access controls;
- ingest, normalize, analyze, and visualize data from connected sources;
- generate metrics, causal analyses, alerts, and AI-assisted reports at your direction;
- process subscriptions, invoices, and account administration;
- respond to inquiries, provide support, and send service-related notices;
- monitor security, detect fraud, and enforce our Terms of Service;
- develop new features and improve model quality using aggregated or de-identified data where permitted;
- comply with legal obligations and protect our rights.
3. Roles: Controller and Processor
For account, billing, and website data relating to your organization's users, Pivotal Metrics acts as a data controller. For business data you connect from third-party systems and process through the platform on behalf of your organization, we generally act as a data processor and process such data according to your instructions and applicable agreements.
4. How We Share Information
We may share information in the following circumstances:
- Service providers: with vendors who assist in hosting, infrastructure, authentication (including Authio), analytics, email delivery, customer support, and payment processing, subject to contractual confidentiality and security obligations.
- Connected platforms: as necessary to maintain integrations you authorize (for example, refreshing OAuth tokens or syncing data from QuickBooks or Stripe).
- AI and compute providers: where needed to generate reports or analyses, we may transmit relevant portions of Customer Data to subprocessors that provide model inference or document processing, under data protection terms.
- Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets.
- Legal and safety: when required by law, regulation, legal process, or to protect rights, safety, and security.
- With your consent: when you direct us to share information or enable a specific integration or export.
We do not sell Personal Information.
5. Data Retention
We retain information for as long as needed to provide the Services, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Connected source data may be retained according to your workspace settings and sync configuration. When you delete your account or disconnect a source, we will delete or de-identify data within a reasonable period, subject to backup retention and legal requirements.
To request deletion of Personal Information, contact privacy@pivotalmetrics.com.
6. Data Security
We implement administrative, technical, and organizational measures designed to protect information, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
7. International Transfers
We may process and store information in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.
8. Cookies and Tracking
We use essential cookies for authentication, security, and session management. We may use analytics cookies to understand how the Services are used. You can control cookies through your browser settings; disabling certain cookies may limit functionality. Our Site does not currently respond to “Do Not Track” signals in a uniform way.
9. Your Rights and Choices
Depending on your location, you may have rights to access, correct, delete, or export Personal Information, object to or restrict certain processing, and withdraw consent where processing is consent-based.
California residents
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know what categories of Personal Information we collect, the right to request deletion (subject to exceptions), and the right to opt out of the sale or sharing of Personal Information. We do not sell Personal Information. To exercise your rights, email privacy@pivotalmetrics.com. We will not discriminate against you for exercising privacy rights.
EEA, UK, and Switzerland
Where GDPR or similar laws apply, you may lodge a complaint with your local supervisory authority. Our legal bases for processing include contract performance, legitimate interests (such as security and product improvement), consent where required, and legal obligation.
10. Children
The Services are intended for business users and are not directed to children under 16. We do not knowingly collect Personal Information from children.
11. Third-Party Links and Services
The Services may link to or integrate with third-party websites and platforms. Their privacy practices are governed by their own policies. We encourage you to review the privacy terms of any service you connect.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Services or by other reasonable means. The “Last updated” date at the top indicates when this policy was most recently revised.
13. Contact Us
For privacy questions or requests, contact us at privacy@pivotalmetrics.com or support@pivotalmetrics.com.