This Privacy Policy explains how useAnalytica (operated by Pro Stack Labs) collects, uses, stores, and shares information when you use our AI-powered performance marketing platform. It also describes your rights regarding your personal data.

It applies to information collected through our web application, APIs, and connected advertising integrations, including Google OAuth.

Account information: name, email address, company name, and billing information when you register.

Brand onboarding data: information you provide about your brand, target audience, messaging, products, and marketing goals during the onboarding conversation with our AI.

Connected account data (via OAuth): when you connect advertising accounts, we receive performance data, campaign configurations, and audience data as authorized by your OAuth consent. See Section 4 for Google-specific data handling.

Usage data: pages visited, features used, reports generated, and interactions with AI recommendations within the platform.

Technical data: IP address, browser type, device information, and session data for security and performance purposes.

We use your data exclusively to:

Deliver the core service - generating reports, recommendations, and automations.

Build brand context to personalize AI-generated insights for your account.

Send transactional communications such as reports, performance alerts, and billing receipts.

Improve platform features based on aggregate, anonymized usage patterns.

Detect fraud, abuse, and security threats.

Comply with applicable legal obligations.

We do not sell your personal data, use it for third-party advertising, or share it for purposes unrelated to delivering the service.

Required disclosure: useAnalytica's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The table below lists each Google OAuth scope we request and the specific reason we need it.

We share data with the following categories of third parties, strictly as needed to operate the service:

Composio — connected-account authorization, credential custody for Composio-managed connections, and API requests to connected services.

Amazon Web Services (AWS) — storage of uploaded files, generated media, and workspace artifacts; Vercel — application hosting and AI Gateway; Supabase — hosted PostgreSQL application data.

Clerk — account authentication and workspace membership; Daytona — isolated execution environments; Upstash — workflow delivery and temporary runtime state.

AI providers, including OpenAI, Anthropic, and Google, process prompts and relevant workspace content for the features you use. Prompts may contain personal or connected-account data you provide; we do not claim that all prompts are anonymized.

Resend — transactional email; PostHog — product analytics and error monitoring.

Payment processors - billing data only, subject to PCI-DSS compliance

Legal or regulatory authorities - when required by applicable law or a valid legal process

We do not sell, rent, or trade your personal data to any third party.

We retain account information and connected-account data while your account is active and the data is needed to provide the service. Campaign snapshots and saved reports support historical reporting and are not automatically purged after 30 days. These records can include personal data; they are not necessarily anonymized or aggregated.

To delete your account or specific data, send a request using our data deletion instructions. Our team verifies your identity and authority over the requested data, confirms its scope, and deletes the agreed personal information, cached campaign data, and associated files within 30 days of verification, except for records we must retain by law. We confirm completion by email.

When Drive version history is enabled, overwritten or deleted files are retained for recovery for seven days. Storage lifecycle expiration is asynchronous, so physical removal can take longer. History does not count toward your current-file storage allowance.

Disconnecting an account removes that connection from Analytica; it does not delete previously imported data. You can also revoke access in the original service’s account settings. Provider-side revocation is separate from removing a saved connection, and we do not guarantee immediate provider-side revocation for every integration.

Anonymized, aggregated platform analytics data may be retained indefinitely.

Requests are handled manually by nidhi@prostacklabs.com. Opening the instructions page does not submit a request or start deletion.

We use TLS encryption in transit and restrict access to customer data and credentials. Composio manages credentials for connections made through Composio. Other integration paths, including Canva and manually supplied credentials, use application-side storage; not all provider credentials are held by Composio.

If we become aware of a data breach affecting your personal data, we will notify you within 72 hours as required by applicable law.

You have the right to:

Access a copy of the personal data we hold about you.

Correct inaccurate or incomplete data.

Request deletion of your data.

Restrict or object to certain processing activities.

Receive your data in a portable, machine-readable format.

Revoke Google OAuth access at any time via myaccount.google.com/permissions.

To exercise any of these rights, email nidhi@prostacklabs.com. We will respond within 30 days.

We use cookies and browser storage for authentication, session management, product analytics, and error monitoring, including through Clerk and PostHog. You can manage cookies and site storage in your browser settings; blocking them may affect sign-in and other features. To request restrictions on processing, contact nidhi@prostacklabs.com.

We do not use third-party advertising pixels or cross-site tracking technologies.

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 (DPDPA). Any disputes shall be subject to the exclusive jurisdiction of the courts of Bengaluru, Karnataka.

We will notify you of material changes to this Privacy Policy via email and in-app notice at least 14 days before they take effect. The effective date at the top of this page reflects the most recent revision.

Privacy & data requests: nidhi@prostacklabs.com

Data controller: Pro Stack Labs - useAnalytica

Address: useAnalytica, Bengaluru, Karnataka, India