SyncMetrics connects your marketing and analytics accounts — Meta Ads (Facebook & Instagram), Facebook Pages, TikTok Ads & organic, LinkedIn Ads, Google Ads, Google Analytics (GA4), Google Search Console (beta), Shopify, and Google Sheets — to the AI assistant you use (Claude or ChatGPT, via MCP), reporting tools (Data Studio), and Google Sheets (through our Sheets connector and the SyncMetrics Google Sheets add-on), so you can ask about your data in your own words. This policy explains exactly what data we access, how we use and protect it, and your rights.
When you create an account we collect your email address and a hashed password. We never store your password in plain text.
When you connect an ad account, we store the OAuth access token issued by that platform. If you choose to paste a Meta Business system-user token on your dashboard, we store that too. All tokens are encrypted at rest using Fernet authenticated encryption (AES-128-CBC with HMAC-SHA256), are never shown again after you save them, and are never included in any answer we return. We never store your platform password. For Meta, we also keep your app-scoped Meta user ID so that a deletion request sent by Meta can be matched to your account.
We fetch campaign performance and settings data (spend, impressions, clicks, CTR, CPC, CPM, ROAS, budgets, schedules, delivery status, etc.) on your behalf when you request it. We do not keep this data in our database. It is fetched live from the platform API and returned directly to you or your connected tool (Claude, ChatGPT, Data Studio, Google Sheets). A few short-lived copies exist only to make the service work:
Standard server access logs (IP address, endpoint called, HTTP status, timestamp) are retained for up to 30 days for security and debugging. These are not shared with third parties.
If you use the chat bubble on our website, we store your messages, our replies, the page you were on when you wrote, and — only if you choose to give them — your email address and name, so we can answer you and follow up. The chat runs on SyncChat, our own messaging product, on the same Supabase and Oracle Cloud infrastructure listed in Section 4. When our AI assistant answers, your message and the recent conversation are sent to the AI model provider that generates the reply. Nothing is stored in your browser until you send a message or leave your email; after that, a small key (syncchat:…) in your browser's local storage keeps the conversation available when you come back. Chat conversations are kept until you ask us to delete them at support@syncmetrics.io.
Every change is preview-first: SyncMetrics shows exactly what will change and acts only after you confirm. Everything it creates starts paused, and only you turn it on. It only ever acts on ad accounts you have connected and selected. SyncMetrics never creates, edits or deletes posts on your Page, never posts publicly, and never sends messages on your behalf. When Meta refuses a button on an existing post, SyncMetrics may create one paused test ad in a Traffic campaign that you already own and name; it never creates that campaign.
Changes are preview-first and confirmed by you. We do not post videos or content on your behalf.
We request read-only reporting scopes only. We do not create, edit, or delete ads or post on your behalf.
Reporting is the default. Any change to your account is opt-in and preview-first: SyncMetrics shows you the exact change and asks for your confirmation before it runs, and newly created campaigns are always created paused for your review. We never post publicly or act without your explicit request.
Read-only. We do not change your Analytics configuration. We access only the aggregated report metrics and dimensions returned by Google's Analytics Data API — not individual visitor identities.
Read-only. We do not add or remove sites, submit sitemaps, request indexing, or change any Search Console setting. Search Console reports aggregated search data — not the identities of the people who searched.
We access only the spreadsheets you explicitly connect to SyncMetrics. Writes are opt-in and happen only when you ask SyncMetrics to export or update a sheet. We do not browse or access other files in your Google Drive.
The SyncMetrics Google Sheets add-on is an installed Google Workspace add-on that runs inside your own Google account. When you install it and click "Connect SyncMetrics," it requests the following Google permissions and uses each one only for the feature described:
.../auth/spreadsheets) — used solely to read the spreadsheet you run a report in and to write the marketing report you request into it, format the output range, and refresh that report on the schedule you set. For scheduled refreshes it re-opens only the spreadsheet the report was created in. The add-on never reads or changes any other spreadsheet and has no access to any other file in your Google Drive..../auth/userinfo.email) — used to show your email in the add-on sidebar and to match your Google identity to your SyncMetrics subscription so your plan limits and trial status apply correctly..../auth/script.external_request) — used to call the SyncMetrics API (api.syncmetrics.io) to fetch the connected marketing data you request..../auth/script.scriptapp) — used only to create the hourly time-based trigger that runs the automatic report refreshes you schedule..../auth/script.container.ui) — used to show the SyncMetrics sidebar in Google Sheets.Your report definitions and refresh schedules are stored in the add-on's private storage inside your own Google account (Apps Script Properties) — not on SyncMetrics servers. Marketing data fetched for a report is written into your spreadsheet and is not retained by SyncMetrics after it is delivered. The add-on requires a SyncMetrics account; the OAuth token that authorises it to call the SyncMetrics API is stored, encrypted, only within your own Google account's add-on storage.
Google API Services disclosure (Limited Use): SyncMetrics's use and transfer of information received from Google APIs — including Google Ads, Google Analytics, Google Search Console, Google Sheets, your Google Account email address, and data accessed by the SyncMetrics Google Sheets add-on — to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data — whether raw or in any aggregated or anonymized form — solely to provide and improve the user-facing SyncMetrics features you request. We do not sell it; we do not transfer it to data brokers, advertisers, or other third parties except the sub-processors listed in Section 4 that are strictly necessary to deliver the service; and we do not use it for advertising, credit, or any secondary purpose. We do not use Google user data to develop, improve, or train generalized AI/ML models. SyncMetrics does not send Google user data to any AI provider itself. When you ask your own AI assistant (Claude or ChatGPT) a question, it requests only the data needed for that request from SyncMetrics over MCP, under your own account with that provider; that provider's terms and privacy policy govern what it does with the answer.
We do not: sell your data, use your ad data for advertising or profiling, share it with other users, or use it to train AI models.
We share data only with the following sub-processors, solely to deliver the service:
Your AI assistant (Claude or ChatGPT). SyncMetrics does not send your ad or analytics data to Anthropic or OpenAI. When you connect SyncMetrics to your own AI assistant — Claude by Anthropic or ChatGPT by OpenAI — that assistant requests data from SyncMetrics over the Model Context Protocol (MCP), under your own account with that provider and only when you ask it something. SyncMetrics returns only the data needed to answer that request. What the provider does with the answers is governed by your agreement with that provider and its privacy policy (Anthropic, OpenAI). You can disconnect SyncMetrics from your assistant, or on your dashboard, at any time.
We do not share your data with any other third parties. We do not sell data. We do not disclose data unless required by law.
You can delete your data at any time:
POST /deauthorize), which deletes your Meta access tokens (including any system-user token you saved) from our systems as soon as Meta sends it.POST /data-deletion), which deletes your Meta access tokens, the Meta ad accounts and Pages you selected, and your Meta settings. Meta gives you a confirmation link to api.syncmetrics.io/data-deletion that shows what was deleted. Data from other platforms is not affected; to delete everything, delete your account (above).We use essential cookies to keep you signed in. We also use Google Analytics, loaded through Google Tag Manager, to understand how people find and use our website and dashboard — for example which pages are visited and whether someone signs up, connects an account or subscribes. Google Analytics sets first-party cookies (_ga, _ga_*, up to 2 years) and sends this usage data, with your IP address and browser details, to Google.
sm_consent cookie and in your browser's storage for up to 6 months.sm_signup_tracked, sm_connect_tracked_*, sm_checkout) so a sign-up, connection or purchase is counted only once. They contain no personal data, and declining removes them.Change your cookie choice — also available as "Cookie settings" in the dashboard.
SyncMetrics is not directed at children under 16. We do not knowingly collect personal data from children.
You have the right to:
To exercise these rights, email support@syncmetrics.io.
We may update this policy. We will notify you by updating the "Effective date" above and, for material changes, by email. Continued use of the service after changes constitutes acceptance.
Questions or concerns about this policy:
📧 support@syncmetrics.io
🌐 syncmetrics.io