Privacy policy

1. Our commitment

At InouMetrix, we take great care to protect the personal information and business data entrusted to us.

This Privacy Policy explains what information we collect, how we use it, with whom it may be shared, how long it is kept and the rights you have.

By using inoumetrix.com or any of our services, you accept the practices described in this policy.

2. What InouMetrix does

InouMetrix is a dashboard tool for businesses. With your permission, it connects to the platforms you already use — advertising, analytics, online presence — to bring your performance indicators together in one place.

InouMetrix sells nothing, shows no advertising and is not aimed at consumers. The data we read is YOUR business’s, on YOUR accounts, and only the data you allow us to read.

3. The information we collect

Information you provide when you create your account:

• First and last name
• Email address
• Name of your organization
• Time zone and currency
• Billing information, handled by our payment provider

We do not keep any credit card number. Payments are processed by Stripe, which keeps this information under its own practices.

4. Data from the third-party platforms you connect

This section describes the heart of the service, and it deserves the most attention.

When you connect a source — Google Ads, Google Analytics, Meta or another — you grant us, through that platform’s authorization mechanism, READ access to certain data of your account.

What we then keep:

• An authorization token, ENCRYPTED (AES-256-GCM) before it reaches our database. It is never sent to your browser, never displayed, and never appears in any report or log.
• The list of advertising accounts or properties the token gives access to, so that you can choose which ones to sync.
• Aggregated indicators: spend, impressions, clicks, sessions, conversions and other performance measures, by day and by dimension (campaign, device, source).

What we do NOT collect: the content of your emails, your customer lists, your custom audiences, the personal information of your own customers, or any data that could identify an individual who saw or clicked an ad.

InouMetrix’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained from Meta platforms is handled in accordance with the Meta Platform Terms.

This data is used exclusively to display your own dashboards. It is never sold, never used for ad targeting, never shared with another customer, and never used to train an artificial intelligence model.

5. Information collected automatically

When you use InouMetrix, some technical information is collected:

• IP address
• device type, browser and operating system
• pages viewed and length of visits
• error and performance logs

This information lets us keep the platform secure, diagnose outages and improve the service.

6. Why we use your information

We use your information to:

• create and manage your account and your organization
• display your dashboards and calculate your indicators
• answer the questions you ask InouMetrix AI and prepare the drafts you ask it for
• sync the sources you have connected
• send you the emails the service needs (confirmation, password reset, invitations)
• bill your plan
• operate, secure and improve the platform
• meet our legal obligations

7. Cookies

We use cookies that are strictly necessary for the service to work:

• keeping your session signed in
• remembering some display preferences, such as the light or dark theme, and the language you chose on the site
• protecting forms against forged requests

On the public site only, and only if you accept: the Google Analytics cookies (see the « Google Analytics » section below).

InouMetrix uses no advertising cookie and does not track its visitors on any other site.

8. Measuring visits to the public site

To know which pages of inoumetrix.com are useful, we count visits ourselves, without a third-party tool and without any cookie. This measurement applies to every visitor; Google Analytics, described in the next section, only to those who accept it.

For each page viewed, we record only:

• the page and its language
• the kind of screen (phone, tablet or computer)
• the name of the site you came from, when your browser tells it (never the full address of the page you came from)
• the buttons you click and how much of the page you read
• how fast the page displayed

We record neither your IP address, nor an identifier, nor anything that could link two visits to the same person. This data is not personal information.

If your browser asks not to be tracked (Global Privacy Control or « Do Not Track »), nothing is recorded. People signed in to InouMetrix are not counted.

These counts are kept for 13 months, then deleted automatically.

When you create an account from a link on the site, the page your visit began on and the name of the site you came from travel with that link, without a cookie, and stay attached to your account. They tell us which pages bring customers; the Console shows only totals by page. None of this happens if your browser asks not to be tracked.

9. Google Analytics (only with your consent)

On inoumetrix.com, we ask whether you accept that Google Analytics measures your visit. Until you accept, nothing is loaded or sent to Google, and no Google cookie is set. If your browser asks not to be tracked (Global Privacy Control or « Do Not Track »), you are not asked and nothing is sent.

If you accept, Google Analytics sets cookies (« _ga ») that recognise your browser from one visit to the next, and receives the pages viewed, the buttons used, the site you came from, your device type and your approximate region. Advertising signals are turned off: this data is not used to show you ads. The cookies expire after 13 months.

Google Analytics is provided by Google LLC; the data may be processed outside Québec, notably in the United States, under Google’s terms.

You can withdraw your consent at any time with the « Cookies (Google Analytics) » link at the bottom of every page of the site: Google’s cookies are then removed from your browser. Google Analytics is never used in the application, behind the sign-in.

10. With whom we share your information

We do not sell your personal information and do not share it with any other customer.

We use providers who process data on our behalf:

• Supabase — database and authentication
• Vercel — hosting of the application
• Stripe — payment processing
• Resend — sending of transactional emails
• Anthropic — the artificial intelligence models of InouMetrix AI, called directly or through Vercel AI Gateway. They receive only what the current request requires (your numbers, the names of your accounts and campaigns, your question), never an authorization token, and this data is not used to train their models
• The platforms you connect yourself (Google, Meta and others), to which we send your read requests

We may also disclose information to the authorities when the law requires it.

All these providers must protect the information entrusted to them in accordance with the applicable laws.

11. Retention of information

We keep information only for as long as reasonably necessary to:

• provide our services
• meet our legal and tax obligations
• resolve disputes and enforce our agreements

When you disconnect a source, the corresponding authorization token is destroyed immediately.

When you delete your organization, the associated dashboards, connections and indicators are deleted. Some security logs and accounting records are kept longer when the law requires it.

12. Protection of information

We apply reasonable measures to protect information:

• encryption of authorization tokens at rest (AES-256-GCM)
• encryption of communications in transit (HTTPS)
• separation of data between organizations, enforced by the database itself and not only by the interface
• staff access limited, read-only, and recorded in an audit log

Despite these measures, no computer system can guarantee absolute security.

13. Your rights

Under the applicable laws, notably in Québec, you may:

• access the information we hold about you
• ask for it to be corrected
• withdraw your consent and disconnect a source at any time
• ask for your account and the associated data to be deleted
• ask for your information in a structured, portable format
• file a complaint with the authority responsible for the protection of personal information

Some requests may be refused when the law requires us to keep certain information.

14. Transfers of information

Our hosting providers process and store data outside Canada, notably in the United States. Our database is hosted in the us-east-2 region (Ohio, United States).

When that is the case, we take reasonable measures so that this information benefits from a level of protection that complies with the applicable laws.

15. Customer accounts and responsibilities

Businesses that use InouMetrix remain responsible for the accounts they connect and for the people they invite into their organization.

InouMetrix acts as the platform provider for this processing. Each customer remains responsible for meeting its own legal obligations towards its customers and employees.

16. Links to other sites

Our platform may contain links to sites operated by third parties. We are not responsible for their privacy practices, and we invite you to read their own policies.

17. Changes to this policy

We may change this Privacy Policy to reflect changes in our services or our legal obligations. The date of the last update appears at the top of the document.

When required, we will inform you of significant changes.

18. Contact us

For any question about this Privacy Policy, to exercise your rights or to ask for your data to be deleted, you can contact the person responsible for the protection of personal information:

Person responsible for the protection of personal information — InouMetrix

Email: privacy@inoumetrix.com

We will handle your request as soon as possible, in accordance with the applicable laws.

The detailed steps to delete your data are on the page inoumetrix.com/en/data-deletion.

19. Governing law

This Privacy Policy is governed by the laws applicable in Canada and by the laws of the province of Québec where they apply.