Privacy policy

What we access

When you sign in with Google, you grant Nuragrid for Google Analytics read-only access to Google Analytics through the analytics.readonly scope, along with your basic profile (name, email address and profile image URL). In deployments configured to allow writing, we also ask for the analytics.edit scope, which is used only to create annotations on your properties when a client you allowed to write asks for one.

We use that access only to carry out the tool calls that an AI client you have authorized sends on your behalf. Each call fetches, on demand, the Google Analytics data it needs: your account and property metadata (such as account and property names and IDs, property settings, Google Ads links, custom dimensions and metrics, and annotations) or the results of a report. We do not read your Google Analytics data for any other purpose.

What we store

• Your Google account email address, name and profile image URL, as provided by Google.
• Your Google OAuth tokens and the list of scopes you granted, encrypted at rest. They are kept so your authorized clients can keep working, and are used only to call Google Analytics for you.
• Sign-in session records for the web dashboard, including the IP address and browser user agent of the session, and short-lived sign-in state while you sign in with Google.
• Records of the AI clients you have authorized (MCP grants): the details each client registered (its name, website and redirect addresses), the access you granted (read, or read and write), when you granted it, and the tokens issued to it, which we store only as hashes.
• Metadata-only audit records: when you authorize or revoke a client, disconnect Google Analytics or delete your account, and each call of a tool that changes data (the tool name, the property ID, a timestamp and a success or failure status).
• Security counters used for rate limiting, such as the number of client registrations from one IP address.
• Operational logs of requests: user and client IDs, the tool name, status and timing. They never contain IP addresses, tokens, tool arguments or results.

What we do not store

We never store report data, dimension values or annotation text. No report rows, metric values, account or property names, or annotation titles and descriptions are kept. Google Analytics data is passed through to the AI client you authorized for the duration of a request and is not kept by Nuragrid for Google Analytics. Once that data reaches your AI client, it is handled under that client provider's own privacy policy and terms, not this one.

Retention

• Audit records are deleted after 90 days.
• Security counters are deleted after 2 hours.
• A client's grant expires after 30 days without use and is then deleted, unless you revoke it sooner.
• Google tokens are kept until you disconnect Google Analytics or delete your account, and grant records until you revoke the client, it expires, or you disconnect.
• Your account details are kept until you delete your account.

Deleting your data

From the dashboard you can revoke any individual AI client, disconnect Google Analytics (which revokes our access at Google and invalidates every client), or delete your account, which also deletes your account details, sessions, tokens, grants and audit history. We then keep a single record that the account was deleted, without your email address, for 90 days. You can also remove our access at any time from your Google Account permissions page.

Google API Services User Data Policy

Nuragrid for Google Analytics's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

In practice: we use Google Analytics data only to provide the features you request through your AI client, we do not transfer it to others except as needed to provide those features or to comply with law, we do not use it for advertising, and no human reads it unless you ask us to for support or it is required for security or legal reasons.

No sale of data, no ads

We do not sell your data, share it for advertising, or use it to train machine learning models.

A caution about AI assistants

AI assistants can be manipulated by the content they read, and Google Analytics data can contain text that your site's visitors control, such as page titles, search terms or event parameters. To limit the damage a manipulated assistant could do, grant read-only access to clients that only need to read reports, and prefer read-only grants for automation. You can revoke any client from the dashboard.

Infrastructure

Nuragrid for Google Analytics runs on Cloudflare, our subprocessor. Your account records, encrypted tokens, grant records and logs are stored there.

Changes

If we change this policy, we will update the date above. Material changes will be announced on this site.

Contact

Questions about this policy: use our contact form.