1. Who we are
Analyse8 is operated by Spresso Studio, a sole proprietorship based in Mumbai, India. For the purposes of data protection law, Spresso Studio is the data controller responsible for your personal data.
If you have any questions about this policy or how we handle your data, contact us at hello@analyse8.com.
2. Information we collect
Information you give us
- Account information, such as your email address and any name or details you provide when you sign up.
- Billing information. When you subscribe to a paid plan, payments are handled by Paddle, our payment processor and merchant of record. Paddle collects and stores your payment details. We receive only limited information such as your billing country, the plan you chose, and whether a payment succeeded. We do not store your card number.
- Messages you send us, for example through our contact form or by email, along with the contact details needed to reply.
Information we create or store as you use the Service
- Authorisation tokens for the Google and Meta accounts you connect, so we can access your data when you ask a question (see section 3).
- Reports and answers you generate, so you can return to them in your account.
- Usage data, such as IP address, browser and device information, and actions taken in the Service, collected through logs and cookies.
3. Connected account data
When you connect Google Analytics, Google Ads, or Google Search Console, you authorise us through Google's secure sign-in to access certain data from those accounts. We only access your data in order to read it. We never create, edit, or delete anything in your connected accounts. For Google Analytics and Google Search Console we request read-only scopes. Google Ads does not offer a read-only scope, so the connection uses Google's standard Ads scope, but our access remains strictly read-only in practice. We access this data through Google's APIs at the moment you ask a question or generate a report, in order to produce your answer or report.
To keep the connection working without asking you to sign in each time, we store the authorisation tokens Google provides until you disconnect the source or close your account. You can review or revoke our access at any time from your Google Account security settings, or by disconnecting the source inside Analyse8.
Google Limited Use. Analyse8's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We use Google user data only to provide the features you ask for, we do not sell it, we do not use it for advertising, and we do not use it to train generalised artificial intelligence or machine learning models.
Meta
When you connect Meta Ads, a Facebook Page, or an Instagram professional account, you authorise us through Meta's secure sign-in (Facebook Login) to access data from those accounts, such as ad performance, Page insights, and Instagram insights. As with Google, we only access this data in order to read it. We request only the permissions needed to read your ad, Page, and Instagram data, and we never post, publish, edit, or delete anything in your Meta accounts. We access this data through Meta's APIs at the moment you ask a question or generate a report.
We store the access tokens Meta provides until you disconnect the source or close your account. You can review or remove our access at any time from the Business Integrations settings in your Facebook account, or by disconnecting the source inside Analyse8. Our use of data received from Meta's APIs follows Meta's Platform Terms, and we do not sell it or use it for advertising.
4. Team members
Analyse8 lets an account owner invite teammates by email to collaborate on their projects. When you accept an invitation, you can access the connected data sources (such as Google Analytics, Google Ads, Google Search Console, Meta Ads, Facebook, and Instagram), the reports, and the chats for the projects the owner has shared with you, and any usage you generate draws on the owner's credits.
The account owner controls this access and can revoke it at any time. If you are an account owner, you are responsible for the teammates you invite and for making sure you have the right to share the connected data with them. We process an invited member's email address in order to send the invitation and manage their access.
5. How we use AI
To turn your questions into answers and reports, we send your question together with the relevant data retrieved from your connected accounts to our AI provider, OpenAI, which processes it and returns a result.
This happens only to generate the output you request. We do not allow your data to be used to train AI models. OpenAI may process this data on servers outside your country, as described in section 9.
6. Cookies and tracking
- Essential cookies that the Service needs to function, such as keeping you signed in.
- Analytics and marketing. On our website we use Google Analytics and the Meta Pixel to understand traffic and measure our advertising. These set cookies and share limited information with Google and Meta.
Where the law requires it, we ask for your consent before setting non-essential cookies, and you can manage your choices through our cookie controls or your browser settings. See our Cookie Policy (EU) for details.
7. How we use your data
We use your information to:
- Provide, operate, and maintain the Service, and generate the answers, reports, and exports you request.
- Process payments and manage your subscription, through Paddle.
- Send account and service emails such as verification, password resets, and important notices, through Resend.
- Send marketing emails about Analyse8 where you have agreed, through Brevo. You can opt out at any time.
- Provide support and respond to your messages.
- Understand usage so we can improve and develop the Service.
- Keep the Service secure, prevent abuse, and meet our legal obligations.
If you are in the EEA or UK, our legal bases for processing are: performing our contract with you, your consent (for example for marketing and non-essential cookies), our legitimate interests in running and improving the Service, and compliance with legal obligations.
8. Who we share data with
We do not sell your personal data. We share it only with providers who help us run Analyse8, each handling data for the purpose described:
| Provider | Purpose |
|---|---|
| OpenAI | Processing your questions and data to generate answers and reports |
| Google and Meta | The sources of your connected marketing data |
| Paddle | Payments and billing |
| Resend | Account and service emails |
| Brevo | Marketing emails |
| Google Analytics and Meta | Website analytics and advertising measurement |
| Hostinger | Hosting, on a virtual private server in Frankfurt, Germany |
We may also disclose information if required by law, to enforce our terms, or in connection with a business transfer such as a merger or sale.
9. International transfers
Our servers are located in Frankfurt, Germany. Some of the providers we use, such as OpenAI, may process data in other countries, including the United States. Where we transfer personal data internationally, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect it.
10. How long we keep data
- Account information for as long as your account is open.
- Reports and answers you generate until you delete them or close your account.
- Google and Meta authorisation tokens until you disconnect the source or close your account.
- Marketing data retrieved to answer a question is processed at the time of your request and not kept beyond what is needed to produce and store your result.
- Billing records for as long as required for legal and accounting purposes.
When you close your account, we delete or anonymise your personal data within a reasonable period, unless we are required to keep it for legal reasons.
11. Your rights
Depending on where you live, including under the EU and UK GDPR and India's Digital Personal Data Protection Act, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent you have given.
To exercise any of these rights, email us at hello@analyse8.com. You can also disconnect Google and Meta sources and unsubscribe from marketing emails at any time. If you are in the EEA or UK and have concerns we have not resolved, you may complain to your local data protection authority.
12. Data security
We use reasonable technical and organisational measures to protect your data, including encryption in transit and restricted access to the authorisation tokens that connect your accounts. No system can be completely secure, but we work to safeguard your information and to remove access promptly when you ask us to.
13. Children
Analyse8 is a business tool and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will remove it.
14. Changes to this policy
We may update this policy from time to time. We will update the "Last updated" date above and, for material changes, take reasonable steps to let you know, such as by email or a notice in the Service.
15. Contact
Spresso Studio, Mumbai, India. For any privacy questions or requests, email hello@analyse8.com.