Numbrief ("we", "us") is operated by YOUR LEGAL NAME OR COMPANY NAME, YOUR FULL POSTAL ADDRESS, India. This policy explains what information we collect when you use https://numbrief.com/, how we use it, and the choices you have. If you have a question, write to support@numbrief.com.

1. Information we collect

Account information. Your name, email address, optional company name and, if you sign up with a password, a one-way hash of that password. We never store the password itself.

Google account information. If you sign in or connect with Google, we receive your Google email address, name and basic profile, and OAuth access and refresh tokens for the permissions you grant.

Google Search Console and Google Analytics 4 data. With your permission we request these read-only scopes:

  • https://www.googleapis.com/auth/webmasters.readonly: to list your verified Search Console properties and read search performance data (queries, pages, clicks, impressions, CTR and position).
  • https://www.googleapis.com/auth/analytics.readonly: to list your GA4 properties and read report data (sessions, users, engagement, channels, sources, landing pages, device and location breakdowns).

We cannot edit, submit or delete anything in your Google account.

Billing information. When you buy a plan we record the plan, the property it applies to, the amount, and the order and payment references returned by Razorpay. Card and bank details are entered on Razorpay's checkout and never reach our servers.

Messages you send us. The contact form stores your name, email, website, message and IP address so that we can reply.

Technical information. IP address and time of sign-in attempts (to block brute-force attacks), and standard server logs.

2. How we use Google user data

  • To show you the list of properties you can report on, and to remember which one you selected. We store the property identifier and display name for this.
  • To build the report you ask for, at the moment you run it, and display it to you in the console, including the PDF and Excel downloads you create.
  • To tie a subscription or free trial to the property and Google account it was bought for.

We do not use Google user data for advertising, we do not sell it, and we do not use it to develop, improve or train generalised artificial intelligence or machine learning models. No person at Numbrief reads your report data unless you ask us to for support, it is necessary for security purposes, or the law requires it.

3. Limited Use disclosure

Numbrief's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Storage and retention

  • Report data. Search Console and GA4 figures are not written to our database. To avoid repeating identical requests to Google, the result of a report may be held in a temporary server-side cache for up to 24 hours, visible only to your account, after which it is deleted. "Refresh" in the console bypasses this copy.
  • OAuth tokens. Kept until you disconnect Google or delete your account. On disconnect we revoke the token with Google and delete it from our systems.
  • Account, property list and subscription records. Kept while your account is open. Payment records may be kept longer where tax or accounting law requires.
  • Sign-in attempt logs and password reset tokens. Deleted or expired on a short rolling basis.
  • Contact messages. Kept for as long as needed to handle your request.

5. Who we share information with

We share information only with the service providers needed to run Numbrief:

  • Google: to authenticate you and retrieve your data through its APIs. Our pages also load fonts from Google Fonts, which receives your IP address.
  • Razorpay: to process payments.
  • Our hosting and email provider: to store the application database and send transactional email such as password resets.

We do not transfer Google user data to any other third party, except where required by law or as part of a merger or acquisition, in which case we will ask for your consent first.

6. Cookies and browser storage

We use one essential session cookie to keep you signed in and to protect forms against forgery. Your report filters are saved in your browser's local storage and stay on your device. We do not use advertising cookies.

7. Security

All traffic is encrypted with HTTPS. Passwords are hashed, database queries are parameterised, and access to the server is restricted. No system is perfectly secure; if we learn of a breach affecting your information we will notify you as the law requires.

8. Your choices

  • Disconnect Google at any time from the console. You can also remove access at myaccount.google.com/permissions.
  • Access, correct or delete your information, or delete your account entirely, by emailing support@numbrief.com from your registered address. We act on requests within 30 days.
  • Withdraw consent or raise a grievance using the same address.

9. Children

Numbrief is a business tool and is not directed at anyone under 18. We do not knowingly collect information from children.

10. Where information is processed

Our servers and providers may be located outside your country. By using Numbrief you agree to your information being processed there, under the protections described in this policy.

11. Changes to this policy

If we change this policy we will update the date above. If a change affects how we use Google user data, we will tell you and ask for your consent before it applies.

12. Contact

YOUR LEGAL NAME OR COMPANY NAME
YOUR FULL POSTAL ADDRESS, India
support@numbrief.com