Privacy Policy

1. Information we collect

• Account information: name, email, organization, role, and similar account details when you create an account, request a demo, or contact us.
• Customer data: CRM information you or your organization enter into the Service, such as accounts, contacts, activities, notes, documents, and related workflow data.
• Integration data: authorization tokens and integration metadata needed to provide optional connected features that you choose to enable.
• Usage and device data: pages viewed, feature usage, IP address, browser type, device information, and similar technical data used to operate and improve the Service.
• Branding assets: logos or similar assets uploaded for display in the Service. Branding assets may be publicly accessible where used for customer-facing or shared branding.
• Support communications: messages, attachments, and related context when you contact us.

2. How we use information

• Provide, maintain, secure, and improve the Service.
• Authenticate users and enforce role, permission, and tenant access controls.
• Process customer workflows, imports, exports, notifications, integrations, and support requests.
• Monitor reliability, diagnose issues, prevent abuse, and protect accounts and systems.
• Communicate about the Service, security notices, product updates, billing, and support.
• Provide optional AI assistant features when enabled or configured.

3. Cookies and similar technologies

We use browser storage and similar technologies, such as localStorage, sessionStorage, and in some cases IndexedDB, to operate the Service.

• Strictly necessary: authentication/session state, security features, and keeping the app working reliably.
• Preferences: UI settings like theme, navigation state, and other convenience features.
• Monitoring and abuse prevention: diagnostic, performance, and verification signals used to improve reliability and reduce abuse where enabled.

We do not use third-party advertising cookies on our public landing pages.

Your choices: You can control or clear site data through your browser settings. Blocking or deleting storage may affect sign-in and core app functionality.

4. How we share information

We may share information with service providers who help us operate, secure, monitor, support, and improve the Service. These providers are permitted to process information only for the purpose of providing services to us.

Depending on configuration and enabled features, providers may include Google, Microsoft, Cloudflare, Sentry, OpenAI, and similar service providers. For an enterprise-friendly list, see Subprocessors.

We may also share information when required to comply with law, respond to lawful requests, protect the rights and safety of users or third parties, enforce our agreements, or prevent fraud and abuse.

We do not sell personal information.

5. Optional integrations

If you choose to connect a third-party integration, the Service may access, store, and use authorization tokens and integration metadata needed to provide the connected feature. For example, a calendar integration may use selected CRM activity details to create or update calendar events.

You can disconnect supported integrations in the Service. You may also revoke access through the third-party provider's account or security settings.

Metric Flow IQ's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. AI assistant features

If AI assistant features are enabled, prompts and related CRM context submitted to the assistant may be processed by AI service providers to generate responses. Users should avoid submitting information that is not needed for the assistant task.

AI output may be incomplete or inaccurate and should be reviewed before relying on it for business, financial, legal, compliance, or customer decisions.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information. However, no method of transmission or storage is 100% secure. For more detail, see our Security page.

8. Data retention

• Account information is generally retained while the account is active or as needed to provide support.
• CRM customer data is generally retained while the workspace, subscription, or customer relationship is active.
• Logs, diagnostics, security events, and abuse-prevention records may be retained for reliability, security, and audit purposes.
• Demo requests, support messages, and billing-related records may be retained as needed for business, legal, tax, and dispute-resolution purposes.
• Deletion requests are handled subject to legal, contractual, security, backup, and operational requirements.

9. Your choices and rights

• You can update certain account information within the Service.
• You can request access, correction, or deletion of personal information, subject to applicable law.
• You can opt out of non-essential communications where offered.
• You can disconnect supported integrations in the app or revoke access through the third-party provider.

Contact

If you have questions about this Privacy Policy or privacy requests, email Privacy@metricflowiq.com.

You may also review our Terms of Service.