Privacy Policy

1. Overview

MetriGhost ("we," "us," or "our") operates the business management platform at metrighost.com. This Privacy Policy describes how we collect, use, and protect your information when you use our Service.

By using MetriGhost, you acknowledge that you have read and understood this policy. If you do not agree with our practices, please do not use our platform.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Credentials: Name, email address, and encrypted password
• Business Profile: Company name, address, and contact information
• Billing Data: Payment information processed securely through Stripe

2.2 Content You Create

We store the data you upload or generate on our platform:

• Documents, notes, and professional offers
• Financial records in Cashbook (Pro users)
• Team member information and permissions
• Company logos and branding assets

2.3 Automatic Data

We automatically collect certain information when you use our Service:

• Device information and browser type
• IP address and approximate location
• Usage patterns and feature interactions

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To provide, maintain, and improve MetriGhost features
• Communications: To send system alerts, security notices, and support responses
• Billing: To process payments and manage your subscription
• Security: To detect and prevent fraud or unauthorized access
• Analytics: To understand usage patterns and improve our platform

4. Data Sharing

We do not sell your personal information. We share data only with:

• Supabase: Database and authentication infrastructure
• Stripe: Secure payment processing
• Netlify: Platform hosting and content delivery

These providers are bound by strict data protection agreements and process data only as needed to provide their services.

5. Data Retention

We retain your information for as long as your account is active. Upon account deletion:

• Active data is removed within 30 days
• Encrypted backups are permanently deleted within 90 days
• Billing records may be retained as required by law

6. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Deletion: Request removal of your data
• Portability: Receive your data in a machine-readable format
• Object: Opt out of certain data processing activities

To exercise these rights, contact us at support@metrighost.com.

7. Security

We implement industry-standard security measures:

• AES-256 encryption for data at rest
• TLS encryption for data in transit
• Regular security audits and monitoring
• Secure authentication with session management

8. International Transfers

Your data may be processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required by GDPR.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our platform and updating the "Last updated" date.