Privacy Policy

Introduction

AI Data Stream ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (optional)
• Password (hashed and encrypted)
• Payment information (processed securely by Stripe)

Connected Platform Data

When you connect analytics platforms (Google Analytics, Search Console, etc.), we access your data in real-time only. We do not store copies of your analytics data on our servers. Each query retrieves fresh data directly from your connected platforms.

AI API Keys

We use a Bring Your Own Key (BYOK) model. Your AI provider API keys are encrypted at rest and never exposed to our staff. Keys are only used to make API calls on your behalf.

Your Content

Content you create (conversations, reports, annotations) is stored in your team's isolated database for your own use. We do not analyze or use this content for any purpose other than providing the service to you.

Security Logs

For security purposes, we log authentication events:

• Login and logout times
• Failed login attempts
• Password resets
• IP addresses (for fraud prevention)

Google User Data

When you connect a Google service via OAuth, AI Data Stream accesses the following Google user data, in read-only form except where noted:

• Google Analytics (GA4) - reporting data (sessions, traffic sources, conversions, page performance) to display dashboards and reports and answer your questions in chat. With your permission we also create annotations on your GA4 properties; this is the only data we write.
• Google Search Console - search performance data (queries, pages, clicks, impressions, CTR).
• Google Ads - campaign reporting data (campaigns, ad groups, keywords, search terms, conversions). We never create or modify campaigns, ads, or budgets.
• Google Tag Manager - container configuration (tags, triggers, variables) to audit and monitor your tracking setup. We never modify or publish containers.

How it is used: exclusively to provide the user-facing features described above to you and the team members you share access with.

How it is stored: Google data is retrieved in real time when you view a dashboard, run a report, or ask a question, and is not copied into a permanent database of ours. Content you explicitly generate from it (reports, chat conversations, annotations) is stored in your team's isolated database. OAuth tokens are encrypted at rest and deleted when you disconnect the service or delete your account.

How it is shared: we do not sell Google user data or share it with third parties. When you ask a question in chat, the specific data needed to answer is sent to the AI provider you have configured with your own API key, subject to that provider's privacy policy. Google user data is never used for advertising, and humans do not read it except with your permission for support, for security purposes, or to comply with law.

AI Data Stream's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How We Use Your Information

We use collected information to:

• Provide and maintain our service
• Process your transactions
• Send service-related communications
• Respond to your requests and support inquiries
• Improve our service based on usage patterns
• Detect and prevent fraud or abuse

Data Storage and Security

Team Isolation

Each team's data (conversations, annotations, reports) is stored in an isolated database. Your data is never mixed with other teams' data.

Encryption

• All data transmitted between you and our servers uses TLS encryption
• Sensitive data (API keys, OAuth tokens) is encrypted at rest
• Passwords are hashed using industry-standard algorithms

Third-Party Services

We use trusted third-party services:

• Stripe - Payment processing (PCI-DSS compliant)
• Google OAuth - Secure authentication for connected platforms
• AI Providers - OpenAI, Anthropic, Google, DeepSeek (your keys, their privacy policies apply)

Data Sharing

We do not sell or share your personal information. The only exceptions:

• With your explicit consent
• To comply with legal obligations (e.g., court orders)
• To protect our rights and prevent abuse

Your analytics data stays between you, your connected platforms, and your chosen AI provider. We have no third-party service providers with access to your data.

Your Rights

You have the right to:

• Access - Request a copy of your personal data
• Correction - Request correction of inaccurate data
• Deletion - Request deletion of your account and data
• Export - Team owners can download a full backup of their team data at any time
• Revoke Access - Disconnect platforms and revoke OAuth permissions anytime

Data Retention

• Active accounts - Data retained while account is active
• Cancelled subscriptions - Data retained for 30 days, then deleted
• Account deletion - Account and team records are deleted immediately upon request. Associated data files are purged within 7 days.
• Legal requirements - Basic account records may be retained if required by law

Cookies

We use essential cookies for:

• Session management and authentication
• Remembering your preferences (language, currency)
• Security (CSRF protection)

We do not use third-party advertising cookies.

Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children under 16.

International Data Transfers

Our servers are located in the European Union. If you access our service from outside the EU, your data may be transferred to and processed in the EU.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the service.

Contact Us

For privacy-related questions or to exercise your rights, contact us at:

Email: [email protected]