Security and data
How Metrica handles your data
Postgres on Render, separated per workspace; keys and tokens encrypted with AES-256-GCM.
What Metrica holds
- Daily metric totals from Stripe, Google Analytics 4, Search Console and Google Sheets
- Uploaded CSV rows
- Encrypted Stripe restricted keys and Google OAuth tokens
- Briefings, their edits and reviews
- Team members' email addresses
How long it’s kept, and how to export or delete it
Metric history, read records and briefings are kept 1, 2 or 5 years (the workspace's choice); removing a source deletes its data; a CSV uploaded on /try without an account is never stored.
The full detail is in Metrica’s data export and deletion policy.
Who processes it
Service providers (subprocessors), each on our instructions and only for the purpose shown:
- Render: hosting, databases and backups, in the United States.
- Resend: sending email.
- Anthropic: writing briefing wording from figures Metrica computed; metric, segment and business names are sent, never raw rows, keys or customer records.
- Stripe: subscription and license payments (card details go to Stripe, never to us).
Questions and security reports
Metrica is run by New Odyssey. To ask what we hold about you, to have it exported or deleted, or to report a security problem, email clio@new-odyssey.com. The privacy policy covers the rest.