Privacy Policy

1. Who we are

Perch Analytics ("we", "us", "our") is the developer and operator of Perch Analytics, available at perchanalytics.com. Perch Analytics is a dashboard that lets you view your Google Analytics 4 and Google Search Console data in one place. Contact us at hello@perchanalytics.com.

2. What Google user data we collect

When you sign in with Google, Perch Analytics receives and stores the following data from your Google account:

• Your name and email address (from your Google profile)
• Your Google profile picture URL
• An OAuth access token and refresh token scoped to analytics.readonly — used to read your Google Analytics 4 property data on your behalf
• An OAuth access token scoped to webmasters.readonly — used to read your Google Search Console impressions, clicks, CTR, and top search queries on your behalf

Your Google Analytics and Search Console data (sessions, pageviews, users, search queries, etc.) is fetched live from Google's APIs each time you use the dashboard and is never persisted to our database.

If you subscribe to a paid plan, Stripe collects your payment details directly. We store only your Stripe customer ID — never your card number or billing details.

3. How we use Google user data

We use the data described above solely to provide and improve Perch Analytics. Specifically:

• To authenticate you and maintain your session securely
• To call the Google Analytics Data API and Admin API on your behalf and display your GA4 property data in the dashboard
• To call the Google Search Console API on your behalf and display your search performance data (impressions, clicks, CTR, top queries) in the dashboard
• To manage your subscription status and billing via Stripe
• To send transactional emails such as billing receipts — we never send marketing emails without your explicit consent

Our use of data received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

4. What we do NOT do with your data

We strictly limit our use of Google user data to operating and improving Perch Analytics. We do not:

• Sell your Google user data to any third party
• Share your Google user data with third parties except as required to provide the service (see Section 5)
• Use your data for targeted advertising, interest-based advertising, or retargeted advertising
• Use your data to train machine learning or AI models
• Transfer your data to data brokers or information resellers
• Use your data to determine credit-worthiness or for lending purposes
• Track your behaviour across other websites or apps
• Use your data for any purpose other than providing or improving Perch Analytics

5. How we share your data

We do not sell or rent your personal data. We share your data only with trusted third-party service providers where necessary to operate the service, including:

• Google — OAuth authentication, Google Analytics API access, and Google Search Console API access
• Stripe — payment processing and subscription management
• Cloud hosting and database providers — secure storage of your account data (name, email, subscription status, and encrypted OAuth tokens)

All third-party providers are contractually obligated to use your data only to provide services to us and are prohibited from using it for any other purpose.

We may also disclose your data if required by law, legal process, or to protect the rights and safety of Perch Analytics, its users, or the public. We will notify you of such disclosures where legally permitted to do so.

6. Data security

We implement industry-standard security measures to protect your data:

• Encryption in transit — all communication between your browser and our servers is encrypted using TLS (HTTPS)
• Encryption at rest — your OAuth tokens and account data stored in MongoDB Atlas are encrypted at rest
• HTTP-only cookies — session tokens are stored in encrypted, HTTP-only cookies to prevent client-side script access
• Minimal data storage — your Google Analytics and Search Console data is never written to our database; it is fetched live and displayed only to you
• Access controls — access to production systems and user data is restricted to authorised personnel only
• Token scoping — we request only read-only OAuth scopes, ensuring Perch Analytics can never modify your Google data

While we take reasonable precautions, no system is completely secure. If you become aware of any security vulnerability, please contact us at hello@perchanalytics.com.

7. Cookies and session storage

We use a single encrypted HTTP-only cookie to maintain your login session.

We also use Google Analytics on our website to understand how visitors use our site (e.g. pages visited, session duration). Google Analytics may set cookies and collect anonymised usage data. You can opt out of Google Analytics tracking using the Google Analytics opt-out browser add-on.

We do not use advertising pixels or any other third-party tracking scripts beyond those described above.

8. Data retention and deletion

We retain your personal data only for as long as necessary to provide the service:

• Account data (name, email, subscription status, OAuth tokens) is retained while your account is active
• Google Analytics and Search Console data is never stored — it is fetched live on each request
• Stripe billing records are retained as required by applicable financial regulations

You can request deletion of your account and all associated data at any time by emailing hello@perchanalytics.com. We will delete your data within 30 days of receiving your request. You can also revoke Perch Analytics's access to your Google account at any time via Google Account Permissions.

9. Your rights

You have the right to access, correct, export, or delete your personal data at any time. To exercise these rights, email us at hello@perchanalytics.com. You may also revoke Perch Analytics's access to your Google account at any time via Google Account Permissions — revoking access will prevent the dashboard from loading data but will not automatically delete your account.

10. Children

Perch Analytics is not directed at children under 13. We do not knowingly collect personal data from children under 13.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or by a prominent notice on the site. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of Perch Analytics after changes are posted constitutes your acceptance of the updated policy.