Privacy Policy

Kong Metrics ("we," "us," or "our") operates the website kongmetrics.com (the "Marketing Site") and the application at app.kongmetrics.com (the "Service"). This Privacy Policy describes how we collect, use, and share information when you use our Marketing Site and Service.

By using our Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, and authentication credentials via Google OAuth. We do not store your Google password. We only request the minimum OAuth scopes required to access your Google Search Console data.

1.2 Google Search Console Data

When you connect a Google Search Console property, we access and store search analytics data including queries, pages, clicks, impressions, click-through rates, and average positions. This data is used solely to provide you with analytics, insights, and recommendations within the Service.

1.3 Google Analytics 4 Data

If you connect a Google Analytics 4 property, we access and store analytics data including traffic metrics, user behavior data, and conversion data. This data is used solely to provide you with unified analytics within the Service.

1.4 Payment Information

Payment processing is handled by Paddle, our Merchant of Record. We do not store your credit card number or payment details directly. Paddle processes your payment and provides us with transaction identifiers, subscription status, and billing history. Please review Paddle's Privacy Policy for details on their data handling practices.

1.5 Usage Data

We may collect information about how you interact with the Service, including pages visited, features used, and actions taken. This helps us improve the product and user experience.

1.6 Marketing Site

The Marketing Site (kongmetrics.com) uses analytics and marketing tools that are loaded only after you provide consent through our cookie consent banner. Before you grant consent, no tracking scripts are loaded and no analytics data is collected. See Section 7 for details on the specific tools used and how to manage your preferences.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Generate analytics dashboards, insights, and recommendations
• Process payments and manage your subscription
• Send transactional emails (account confirmations, billing receipts, security alerts)
• Respond to support requests
• Detect, prevent, and address technical issues or abuse

We do not sell your personal data. We do not use your Google Search Console or Analytics data for advertising purposes.

3. Data Sharing and Third Parties

We share your information only in the following circumstances:

• Paddle: Payment processing, invoicing, and tax compliance
• Infrastructure providers: Cloud hosting and data storage (EU-based)
• Legal requirements: When required by law, regulation, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice

We do not share your search analytics data with any third party for their own purposes.

4. Data Retention

We retain your search analytics data according to your plan's data retention limit (16 months to 5 years). Account information is retained for as long as your account is active.

If you downgrade your plan, data beyond the new plan's retention limit is preserved for 30 days before archival. If you delete your account, we will delete your personal data and analytics data within 30 days, except where retention is required by law.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit using TLS 1.3
• Encryption at rest for stored data
• OAuth tokens with minimal required scopes (no password storage)
• Regular security audits and vulnerability assessments
• Role-based access controls for internal systems

While we strive to protect your data, no method of transmission or storage is 100% secure. If you discover a security vulnerability, please contact us immediately at security@kongmetrics.com.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

6.1 GDPR (European Economic Area)

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Request your data in a structured, machine-readable format
• Restriction: Request restriction of processing
• Objection: Object to processing based on legitimate interests

6.2 KVKK (Turkey)

If you are a resident of Turkey, you have rights under the Personal Data Protection Law (KVKK, Law No. 6698), including the right to learn whether your data is processed, request information about processing, learn the purpose of processing, know third parties to whom your data is transferred, request correction of incomplete or inaccurate data, request deletion or destruction, and object to automated processing outcomes.

6.3 CCPA (California)

If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at privacy@kongmetrics.com. We will respond within 30 days.

7. Cookies and Tracking

7.1 Marketing Site (kongmetrics.com)

The Marketing Site uses a cookie consent banner that allows you to control which tracking technologies are active. No analytics or marketing scripts are loaded until you provide consent. You can manage your preferences at any time by clicking "Cookie Preferences" in the site footer.

We use the following categories of cookies and tracking technologies:

• Essential: Required for basic site functionality. These cannot be disabled.
• Analytics (PostHog): Helps us understand how visitors interact with our pages. PostHog collects anonymized usage data including pages visited, referral sources, browser type, and general geographic region. PostHog data is processed in the European Union (eu.i.posthog.com). PostHog may set cookies for session identification.
• Marketing (Google Tag Manager and Google Analytics 4): Used to measure marketing performance and advertising effectiveness. When this category is enabled, Google Tag Manager loads Google Analytics 4 with Google Signals active. This enables cross-device tracking, demographics and interest reporting, and the creation of remarketing audiences for Google Ads. Data is transmitted to Google domains including googletagmanager.com, google-analytics.com, and stats.g.doubleclick.net. You can disable this at any time by declining the Marketing category in the cookie banner.

If you enable the Marketing category, Google may set advertising-related cookies to support remarketing. We do not sell your data, and we do not share analytics data with parties outside of Google's own measurement and advertising products. Your consent preferences are stored locally in your browser and can be changed at any time.

7.2 Service Application (app.kongmetrics.com)

The Service application uses essential session cookies required for authentication and functionality. We do not use advertising or third-party tracking cookies in the application.

8. Children's Privacy

Our Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete it.

9. International Data Transfers

Your data is hosted on secure infrastructure in the European Union. If data is transferred outside the EU, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

• Email: privacy@kongmetrics.com
• Website: kongmetrics.com