Privacy Policy

1. Introduction

Chat with GA4 ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our conversational analytics platform for Google Analytics 4 data.

By using our service, you agree to the collection and use of information in accordance with this Privacy Policy and Google's API Terms of Service.

2. Information We Collect

2.1 Google Analytics Data

When you connect your Google Analytics 4 account, we access and process your analytics data to provide our conversational analytics service. This includes:

• Website traffic metrics (page views, sessions, users)
• User behavior data (bounce rate, session duration, conversion events)
• Audience demographics and interests (when available)
• Acquisition data (traffic sources, campaigns, referrals)
• Technology data (device types, browsers, operating systems)
• Geographic data (country, region, city)
• Custom dimensions and metrics you have configured

2.2 Authentication Information

We collect basic profile information from your Google account through OAuth 2.0 authentication:

• Name and email address
• Profile picture (if available)
• Google account identifier

2.3 Usage Information

We collect information about how you use our service:

• Questions you ask and conversations you have
• Analytics queries generated and executed
• Date ranges and filters you apply
• Feature usage and preferences

2.4 Report Data

When you create and save reports using our service, we collect:

• Report titles, descriptions, and metadata
• Saved charts, tables, and visualizations (generated from your data)
• Report sharing settings and permissions
• Comments and annotations you add to reports
• Report access logs and sharing activity

2.5 Slack Integration Data

When you use our Slack bot integration, we collect and process:

• Slack Workspace Information: Workspace ID, team name, and basic workspace metadata
• User Information: Slack user ID, username, display name, and email address (when available)
• Channel Information: Channel IDs and names where the bot is used (for context and permissions)
• Message Data: Questions and commands sent to the bot via slash commands or @mentions
• Bot Responses: Analytics reports and insights generated in response to your queries
• Interaction Logs: Timestamps, user IDs, and channel IDs for bot interactions (for security and troubleshooting)
• Property Settings: GA4 property configurations and preferences set through Slack commands
• Authentication Tokens: Slack OAuth tokens and bot tokens (encrypted and securely stored)

Important: We only access messages and channels where our bot is explicitly mentioned or where slash commands are used. We do not monitor or access other Slack conversations.

3. How We Use Your Information

We use your Google Analytics data exclusively to provide and improve our conversational analytics service:

• Service Provision: To generate analytics reports, charts, and insights based on your questions
• Query Processing: To translate your natural language questions into appropriate GA4 API queries
• Visualization: To create charts, graphs, and data tables from your analytics data
• Contextual Analysis: To provide relevant insights and recommendations based on your data patterns
• Report Generation: To create, store, and manage shareable reports containing your analytics insights
• Collaboration: To enable sharing of reports with authorized users and team members
• Service Improvement: To improve our AI models and query generation capabilities (using aggregated, anonymized data only)
• Slack Integration: To provide analytics insights directly within your Slack workspace through bot interactions
• Team Collaboration: To enable sharing of analytics insights with team members through Slack channels
• Command Processing: To interpret and respond to slash commands and @mentions in Slack
• Workspace Management: To manage GA4 property settings and user preferences within your Slack workspace

4. Data Storage and Retention

4.1 Google Analytics Data

We do not store your Google Analytics data on our servers. Your GA4 data is:

• Accessed in real-time through Google's APIs
• Processed temporarily in memory to generate responses
• Not cached or stored in any persistent storage system
• Immediately discarded after processing each query

4.2 Conversation History

Your conversation history is stored locally in your browser's local storage and is not transmitted to or stored on our servers. This includes:

• Questions you've asked
• Generated reports and insights
• Saved conversation threads

4.3 Report Data Storage

When you create and save reports, we store the following data on our secure servers:

• Report Content: Charts, tables, insights, and visualizations (but not raw GA4 data)
• Report Metadata: Titles, descriptions, creation dates, and sharing settings
• Access Control: Information about who has permission to view or edit reports
• Sharing Links: Secure, unique URLs for shared reports

Important: Reports contain processed insights and visualizations derived from your GA4 data, but do not contain your raw Google Analytics data.

4.4 Authentication Data

We store minimal authentication information necessary to maintain your session:

• OAuth tokens (encrypted and securely stored)
• Basic profile information (name, email)
• Session identifiers and preferences

4.5 Slack Integration Data Storage

For our Slack bot integration, we store the following data on our secure servers:

• Bot Installation Data: Workspace IDs, bot tokens, and installation metadata
• User-Bot Associations: Mapping between Slack users and their connected GA4 properties
• Interaction History: Recent bot interactions for context and troubleshooting (retained for 30 days)
• Property Settings: GA4 property preferences set through Slack commands
• Error Logs: Bot error logs and debugging information (retained for 90 days)

Data Retention: Slack interaction data is automatically deleted after 30 days, except for error logs which are retained for 90 days for troubleshooting purposes.

5. Data Sharing and Third Parties

We do not sell, trade, or transfer your Google Analytics data to third parties. Your data may only be shared in the following limited circumstances:

• Report Sharing: When you explicitly choose to share reports with specific individuals or make them publicly accessible
• Service Providers: With trusted service providers who assist in operating our platform (e.g., hosting, analytics) under strict confidentiality agreements
• Legal Requirements: When required by law, court order, or legal process
• Security: To investigate potential security breaches or abuse
• Business Transfer: In connection with a merger, acquisition, or asset sale (with prior user consent)

5.1 Report Sharing

When you share reports through our platform:

• Controlled Access: You control who can access your shared reports
• Sharing Permissions: You can set view-only or edit permissions for shared reports
• Revocable Access: You can revoke sharing access at any time
• Audit Trail: We maintain logs of report access for security purposes

5.2 Slack Data Sharing

When using our Slack integration:

• Channel Visibility: Bot responses are visible to all members of the Slack channel where the command was used
• Workspace Isolation: Your analytics data and insights are only shared within your own Slack workspace
• No Cross-Workspace Sharing: We do not share data between different Slack workspaces
• User Control: You control which GA4 properties are connected and can disconnect at any time
• Channel Permissions: Bot access respects your Slack workspace's channel permissions and user roles

6. Slack Platform Policy Compliance

Our Slack integration complies with Slack's Platform Policy and API Terms of Service. We commit to:

• Authorized Access: Only accessing Slack data and functionality with proper user and workspace authorization
• Data Security: Implementing appropriate security measures for Slack tokens and user data
• Respectful Usage: Using Slack APIs responsibly and within rate limits
• User Privacy: Respecting user privacy and not accessing private messages or channels without explicit permission
• Transparency: Being clear about what data we access and how we use it
• Compliance: Adhering to all applicable Slack policies and terms

7. Google API Services User Data Policy Compliance

Our use of Google APIs and your Google Analytics data is subject to Google's API Services User Data Policy, including the Limited Use requirements. We commit to:

• Limited Use: Using your data only to provide and improve user-facing features visible in our application
• No Human Access: Not allowing humans to read your data except for security purposes, legal compliance, or with your explicit consent
• No Unauthorized Transfer: Not transferring your data to third parties except as explicitly permitted
• No Use for Advertising: Not using your data for advertising, retargeting, or personalized ads
• Minimum Scope: Requesting only the minimum permissions necessary to provide our service

8. Security Measures

We implement appropriate security measures to protect your information:

• Encryption: All data transmissions are encrypted using TLS/SSL
• OAuth 2.0: Industry-standard authentication protocols
• Access Controls: Strict access controls and authentication for our systems
• Regular Audits: Regular security audits and vulnerability assessments
• Data Minimization: We process only the minimum data necessary for our service
• Slack Security: Secure storage of Slack OAuth tokens and workspace credentials
• Bot Permissions: Minimal bot permissions and scopes required for functionality

9. Your Rights and Choices

You have the following rights regarding your data:

• Revoke Access: You can revoke our access to your Google Analytics data at any time through your Google Account settings
• Delete Conversations: You can delete your conversation history stored in your browser's local storage
• Manage Reports: You can delete, modify, or change sharing settings for your saved reports
• Report Access Control: You can grant or revoke access to shared reports at any time
• Data Portability: You can export your conversation history from your browser and request export of your report data
• Account Deletion: You can request deletion of your account and associated data (including all reports)
• Data Access: You can request information about what data we have collected about you
• Slack Bot Removal: You can remove our bot from your Slack workspace at any time through Slack's app management
• Disconnect Slack: You can disconnect the Slack integration while keeping your web app access
• Bot Data Deletion: You can request deletion of all Slack-related data and interaction history

10. Cookies and Tracking

We use minimal cookies and tracking technologies:

• Essential Cookies: Required for authentication and core functionality
• Preference Cookies: To remember your settings and preferences
• No Analytics Cookies: We do not use third-party analytics or advertising cookies

11. International Data Transfers

Our service operates primarily in the United States. By using our service, you consent to the transfer of your information to the United States, where data protection laws may differ from your jurisdiction. We ensure appropriate safeguards are in place for international transfers.

12. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to have it removed.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Providing notice through our service or via email for significant changes

Your continued use of our service after any changes indicates your acceptance of the updated Privacy Policy.

14. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

15. Additional Resources

For more information about data protection and your rights:

• Google Privacy Policy
• Google API Terms of Service
• Google API Services User Data Policy
• Slack Privacy Policy
• Slack Terms of Service
• Our Terms of Service