How Metricfied handles your data

This policy describes how Metricfied ("Metricfied", "we", "us"), a Google Sheets add-on built by an independent developer at GetoLabs, handles information when you install and use it. It applies to the add-on itself - not to Google Sheets or any of the data sources you connect (Google Analytics, Google Ads, Meta Ads, Shopify, Snapchat Ads, TikTok Ads, YouTube, or Google Search Console), whose own privacy policies govern those platforms themselves.

Metricfied only requests access when you connect a data source, and only to the scope needed to build the reports you ask for.

Metricfied never asks for your passwords. Access is granted through each data source's own sign-in screen, which you can revoke at any time (see Section 7).

A note on Shopify specifically: some of Shopify's reporting APIs are gated behind a broader "protected customer data" permission at the platform level, regardless of which fields an app actually requests. Metricfied may be granted that broader permission as a technical prerequisite, but its Shopify analytics functionality only ever queries aggregate, store-level metrics (sessions, sales, orders, conversion rates, and similar) - it does not query, display, process, or store individual customer names, email addresses, phone numbers, or postal addresses.

• Report and schedule definitions (which dimensions, metrics, filters, and timing you chose) are stored as developer metadata attached to your own Google Sheet - inside Google's infrastructure, tied to that specific file, not copied to a database we operate.
• Your login token for each data source, once you connect it, is stored using Google Apps Script's built-in per-user storage, scoped to you and this add-on. It is never written into a spreadsheet cell or visible to other people you share the sheet with.
• Report output (the actual numbers from whichever data sources you've connected) is written directly into the sheet tab you name. From that point on, it's just spreadsheet data, subject to whatever sharing settings you've set on that file.
• Your account and usage data - your email, plan, and the add-on usage information described in Section 2 (which spreadsheets you've opened the add-on in, and how often) - is stored in a database Metricfied operates at app.metricfied.com, separate from Google's infrastructure. This never includes spreadsheet contents, only the metadata described above.

Metricfied does not log your report data (the actual numbers from any connected data source, or any spreadsheet cell contents) to any database or third-party analytics/logging service. We use Google Analytics on our marketing site and sign-up flow to measure traffic and conversions - this never includes your name, email, or any report data, only anonymous visit and conversion counts, and only runs if you accept cookies when asked.

Sensitive data accessed through Metricfied - report data from any data source you connect - is protected as follows:

• Encryption in transit. Every request to a connected data source's API runs over HTTPS/TLS. Metricfied never transmits your data over an unencrypted connection.
• No copy of your report data. As described in Section 3, report output goes straight into your own spreadsheet, and configuration is stored as metadata on that same file, both secured by Google's own infrastructure and your Google account's access controls - Metricfied's own database never holds a copy of your report numbers or spreadsheet contents, only account and usage metadata.
• Per-user token isolation. Each data source you connect runs its own standalone authorization flow, scoped only to that source, so connecting one never grants access to another - and each login token is stored via Apps Script's user-scoped property storage, isolated to you. Metricfied's developer cannot read it, and it is never shared across users or written anywhere visible to others.
• No credential storage. Metricfied never sees or stores your password for Google, Meta, Shopify, Snapchat, TikTok, or any other connected service. Access is granted, and can be revoked, entirely through that service's own account settings (Section 7).
• Minimal footprint by design. Metricfied requests read-only access to each data source, one at a time as you connect it, and write access limited to the spreadsheet you're actively using - never broader access than the report you're configuring requires.

• We don't sell or rent your data to anyone, under any circumstances.
• We don't use your data to serve you ads, inside or outside the add-on.
• We don't share your data with third parties, other than the API of whichever data source (Google, Meta, Shopify, Snapchat, or TikTok) is strictly required to fetch the report you asked for.
• We don't retain a copy of your report data outside your own spreadsheet.

Report and schedule definitions live for as long as your spreadsheet does, or until you delete them yourself from the Reports or Schedule tab. Deleting a report removes its definition immediately. Deleting or losing access to the spreadsheet removes everything stored on it.

Disconnecting any data source (Profiles tab -> Log out) deletes its stored token right away.

Account and add-on usage data (Section 2/3) is kept for as long as your account exists, so we can show you accurate usage history and provide support.

To request deletion of your account and usage data, email [email protected] from the address on your Metricfied account, with "Delete my data" in the subject line. We'll confirm by reply and delete your account record and usage history (Section 2/3) within 30 days. This doesn't touch your Google Sheets, their contents, or any connected data source's own data - those are deleted or revoked separately (Section 7), since Metricfied never holds a copy of them to begin with.

• Delete a report or schedule - Reports or Schedule tab, any time.
• Disconnect any data source (GA4, Google Ads, Meta Ads, Shopify, Snapchat Ads, TikTok Ads, YouTube, or Google Search Console) - Profiles tab -> Log out, next to that source.
• Revoke Google access entirely - Google Account -> Security -> Third-party access. GA4, Google Ads, YouTube, and Google Search Console each run their own separate authorization, so each may show as its own entry there.
• Revoke Meta access entirely - Facebook -> Settings -> Business Integrations, or Meta Business Suite's connected apps.
• Revoke Shopify, Snapchat, or TikTok access entirely - that platform's own connected-apps or authorized-apps settings.
• Uninstall - remove the add-on from Extensions -> Add-ons in any sheet it's installed in.

Metricfied is a business/marketing tool and isn't directed at, or knowingly used by, children under 13.

If this policy changes in a way that affects what we access or how we use it, we'll update the effective date above and, where required, notify you before the change takes effect.

Questions about this policy or your data: [email protected].