Privacy Policy

1. Scope & Definitions

This Policy applies to the information we collect when you visit themetriqs.com, create or manage an account, connect an integration, upload files manually, communicate with our team, or otherwise interact with the Services. "Customer Data" means business information, files, and records you connect or upload. "Personal Data" means information that identifies or relates to an identifiable individual.

2. Information We Collect

• Account and contact details such as name, email address, role, company name, and billing details when you sign up or update your profile.
• Notification contact information such as phone numbers you provide for optional SMS or other business notification channels. We use these numbers only to send requested business notifications related to your workspace, account, alerts, reports, or operational events.
• Android notifications and installation information. Google Firebase Cloud Messaging automatically processes app installation identifiers, notification tokens, and technical device and app information when the Android app starts, even if notifications are turned off. This supports notification delivery and maintenance of Firebase services. If you enable push notifications, Expo also processes your notification token, and MetrIQs stores that token, your device name, platform, and app version to deliver requested business alerts. Notification permission controls whether notifications can be shown; Firebase's automatic installation registration still occurs.
• Credentials for integrations supplied through secure OAuth flows or API keys; we store tokens securely and never store your plaintext passwords.
• Customer Data including financial, POS, payroll, marketing, and operational information ingested from integrations or manual uploads that you authorize.
• Your business's website and public information about it. When you give your website during setup (or, if you sign up with a business email address, the website at that address's domain), we read it to suggest your organization's name and logo. After setup we read its main pages and public web search results about your business to build a business profile: what it does and sells, how customers buy, price range, opening hours, locations, the people the site names as running it, brand colors, and an estimate of its size. The profile is used only to give Luca, the AI in MetrIQs, context and to classify your data; it is not shown as a page, and you can correct it by telling Luca, which proposes each change for an owner or admin to approve.
• Manual uploads you import (CSV, Excel, or other accepted formats). You retain all rights in these files; we process them to operate, secure, analyze, and improve the Services as described in this Policy.
• Usage and diagnostics data such as device type, browser, operating system, IP address, timestamps, feature interactions, page views, referring URLs, and error logs.
• Support communications including emails, chat messages, call notes, and related metadata when you contact us for help.

3. How We Use Information

• Provide, operate, maintain, and improve the Services, including cleaning, normalizing, and visualizing Customer Data.
• Deliver AI-generated analyses, alerts, and recommendations tailored to your connected data and configurations.
• Process manual uploads and integrations you request, including creating normalized datasets for KPI tracking.
• Send transactional notices, security alerts, billing-related messages, and service updates.
• Send optional SMS notifications you enable for business purposes, such as workspace alerts, KPI triggers, AI operator notifications, job status updates, or other service-related operational messages.
• Provide customer support, troubleshoot issues, and respond to inquiries.
• If you have a service engagement with us, deliver it: MetrIQs staff working on your engagement sign in to your workspace, read your Customer Data, and prepare reports and recommendations. Staff join your workspace as named members, so they appear in your team list. You can remove them at any time, and we remove them when the engagement ends. When you book a call on our website, the booking is made through Cal.com, which shares the name, email and any answers you give with us so we can hold the call; Cal.com's own privacy policy applies to the booking.
• Monitor usage, conduct analytics, develop new features, and ensure platform security and integrity.
• Answer questions you ask in chat. Your question, the Customer Data retrieved to answer it, and any attachments are processed by our AI providers, OpenAI and Anthropic, through their APIs. OpenAI processing runs with provider-side storage disabled. Each provider may retain API data for a limited period (Anthropic up to 30 days) for abuse and safety monitoring, and neither uses it to train its models. We do not use Customer Data to train machine-learning models.
• Only if your workspace owner turns on Data sharing: add your workspace's monthly ratio metrics (for example labor cost as a percent of sales, average check and margins), with a coarse industry, region and location-count band, to an anonymized dataset, rounded, together with a coarse description of the kind of business (industry, region, employee and location-count ranges, price range, how customers buy, days and hours open, and years in business, each as a broad range or category), and, if the owner also chooses, whether work MetrIQs did for you helped and by roughly how much (a range, never an amount). Workspaces that share see how they compare with similar businesses, how that work turned out for them, and reminders judged against what is normal for businesses like theirs. The dataset holds no business name, dollar totals or names of people or vendors, and insights are only shown for groups large enough that no business can be singled out.
• Comply with legal and regulatory obligations and enforce our agreements.

4. Legal Bases for Processing (EEA/UK Users)

Where applicable data protection law requires a lawful basis, we process Personal Data under the following bases: contractual necessity (to provide requested Services), legitimate interests (to secure and improve the platform, prevent misuse, and communicate with you), consent (for optional marketing and for Data sharing), and compliance with legal obligations.

5. Sharing & Disclosure

We disclose information for the purposes described in this Policy and as needed to operate our business. We do not sell or share phone numbers for third-party marketing or promotional purposes. We may disclose information to:

• Trusted service providers for hosting, storage, communications, analytics, security, and customer support, each bound by confidentiality and data processing agreements.
• Integrations you authorize. When you connect accounting, commerce, workforce, or marketing systems, or upload files manually, we share Customer Data with those services solely as instructed by you. Disconnecting an integration or deleting an upload stops ongoing sharing.
• Professional advisors and auditors under confidentiality when reasonably necessary for compliance or corporate governance.
• Legal or regulatory bodies when required by law, court order, or to protect rights, safety, and security.
• Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to continued protection of your information.
• The MetrIQs network, only when your workspace owner turns on Data sharing: anonymized monthly ratio metrics and a coarse description of the kind of business they came from, never your business name, website, address, people or dollar totals, and only shown to other businesses as statistics over groups large enough that no single business can be identified.
• Our AI providers (OpenAI and Anthropic), which process chat questions and the data retrieved to answer them solely to generate responses for you, as described above.

If you enable SMS notifications, your phone number may be processed by our messaging service providers solely to deliver the business notifications you request on our behalf. Those providers are not permitted to use your number for their own marketing or unrelated purposes.

6. Cookies & Analytics

We use cookies and similar technologies to authenticate users, remember preferences, measure performance, and analyze traffic. You can control cookies through your browser settings. Disabling cookies may affect the availability of some features. We do not knowingly allow third parties to track you across non-MetrIQs services for advertising purposes.

7. Data Retention

We retain Personal Data and Customer Data for as long as needed to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and support business operations. You may request deletion of certain data; we will honor verified requests subject to legal or contractual requirements. Disconnecting an integration deletes the credentials stored for it and the data synced from it, including the item, employee, vendor and customer details it reported; deleting a manual upload or a chat conversation removes it from the Services. Deleting a workspace permanently deletes it and all of its Customer Data; deleting your account deletes your personal data, the items you created, and any workspace you were the last member of. Anonymized data added to the MetrIQs network while Data sharing was on is kept after you turn sharing off, disconnect an integration or delete your workspace, because it is no longer linked to you. Deleted data may persist in encrypted backups for a limited period before those backups expire.

8. Security

We employ administrative, technical, and organizational safeguards designed to protect the information we process, including encryption in transit and at rest, encrypted storage of integration credentials, access controls scoped to each workspace, monitoring, and regular reviews. No system can be guaranteed 100% secure; you are responsible for safeguarding account credentials and promptly notifying us of unauthorized use.

9. Your Rights & Choices

• Update account details within the platform.
• Export or delete Customer Data where available or by contacting us.
• Disconnect integrations or delete manual uploads to stop data sync.
• Delete chat conversations at any time from chat history.
• Review and remove what MetrIQs remembers about your business, and your scheduled reports, alerts and documents, in Settings.
• Turn Data sharing on or off at any time in Settings (workspace owners). Turning it off stops new additions and any insights from the network.
• Opt out of marketing emails by using unsubscribe links or contacting us.
• Remove or update phone numbers used for SMS notifications in your workspace settings to stop future business notification texts.
• Request access, correction, deletion, or restriction of Personal Data, subject to verification and legal limitations.

To exercise these rights, email info@themetriqs.com. We may request additional information to verify your identity.

10. International Data Transfers

MetrIQs is based in the United States. If you access the Services from another region, you understand that your information may be transferred to, stored in, and processed in the U.S. or other jurisdictions that may not provide the same level of data protection. We implement safeguards consistent with applicable law for cross-border transfers.

11. Children’s Privacy

The Services are not directed to children under 13 (or the age of digital consent in your jurisdiction), and we do not knowingly collect Personal Data from them. If you believe a child has provided us information, contact us and we will take appropriate action.

12. Changes to this Policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. If we make material updates, we will post the revised Policy with a new "Last updated" date and notify customers or account owners through the Services or email. Continued use of the Services after updates become effective constitutes acceptance.

13. Contact

For questions or requests regarding this Policy, contact us at info@themetriqs.com or by mail at MetrIQs, Attn: Privacy, 8540 Roseland Court, Oak Park, MI 48237.