Privacy Policy

1. Information we collect

• Account information: your name, email address, organization and the settings you choose. If you sign in with Google, we receive your name, email address and profile picture from Google.
• Connected-account data: when you connect a business platform, we receive authorization credentials for that account and read the data needed for the reports you set up, such as sales, orders, payments, invoices, catalog items, contacts, and staff or location details. This can include personal information about your customers and team.
• Report content: the descriptions and instructions you write, schedules, recipients, and the reports we produce and deliver.
• Billing information: if you buy a paid plan, our payment processor collects your payment details. We receive limited information such as the card type, last four digits, billing address and payment status, not your full card number.
• Communications: messages you send us, including support requests and replies to our emails.
• Usage and device information: pages viewed, actions taken, dates and times, IP address, browser and device type, and similar log data.

2. How we use information

We use personal information to:

• provide and operate the Services, including producing and delivering reports;
• authenticate you and keep accounts secure;
• process payments;
• respond to requests and provide support;
• send service messages, and product updates you can opt out of;
• monitor, troubleshoot, measure and improve the Services;
• detect and prevent fraud, abuse and security incidents;
• comply with the law and enforce our terms.

We do not sell personal information, and we do not use connected-account data for advertising.

3. Automated processing and AI

We use an AI model provider to turn the instructions you write into a report definition, and to write analysis where you ask for it. To do that, we send the provider your instructions and may send limited samples of the relevant connected-account data. The provider processes this data under commercial terms that do not permit using it to train its models.

4. Information from Google

ReportCaptain’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. How we share information

• Service providers that process information for us. Our providers include Vercel, Google Cloud and Neon (hosting and infrastructure), Mailgun (email delivery), Stripe (payments), Anthropic (AI processing), and Vercel and Google (analytics and advertising measurement).
• Recipients you choose: reports are delivered to the people and destinations you specify.
• The platforms you connect: we exchange information with them as needed to read your data.
• Legal and safety: to comply with the law, legal process or lawful requests, and to protect the rights, property and safety of ReportCaptain, our users and others.
• Business transfers: in connection with a merger, acquisition, financing or sale of assets.
• With your consent or at your direction.

6. Cookies and advertising measurement

We use cookies and similar technologies that are necessary to sign you in and keep the Services secure. We also use analytics to understand how the Services are used.

On some of our sites we use Google Tag Manager and Google Ads to measure whether our advertising leads to sign-ups. This can involve sending Google limited information, such as a hashed email address. Where the law requires consent, we ask for it first, and you can decline. Some laws treat this kind of measurement as “sharing” personal information for advertising. To opt out, decline in the consent window or email privacy@reportcaptain.com.

7. Retention

We keep personal information for as long as needed for the purposes in this policy, and longer where the law requires it or where we need it to resolve disputes and enforce our agreements.

When you disconnect an account, we delete the data we read from it within 30 days. Reports already produced are kept for up to 90 days after disconnection and then deleted. Backups and security logs may persist for a limited period afterwards.

8. Security

We use technical and organizational measures designed to protect personal information, including encryption in transit and at rest and restricted access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International transfers

We are based in the United States and process information there and in other countries where our providers operate. Where required, we rely on lawful transfer mechanisms such as standard contractual clauses.

10. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, to withdraw consent, and to opt out of the sale or sharing of personal information. We will not discriminate against you for using these rights. To make a request, email privacy@reportcaptain.com. We may need to verify your identity, and we respond within the time the law requires. You may also complain to your local data protection authority.

If you are in the European Economic Area, the United Kingdom or Switzerland, we process personal information on these legal bases: performing our contract with you, our legitimate interests in running and securing the Services, your consent, and compliance with legal obligations.

You can unsubscribe from non-essential emails using the link in them.

11. Children

The Services are not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy. We will post the new version here and change the date above. If a change is material, we will give additional notice where the law requires it.

13. Contact

Questions about this document: privacy@reportcaptain.com.