Privacy Policy

Last updated: June 2026

Data Handling

Polixai stores only the minimum metadata necessary to operate your workspace. Your connected data (GA4, Excel, CSV) is accessed only when generating analyses you request.

Encryption

All data is encrypted in transit and at rest using industry-standard protocols.

Access Controls

Only authorized systems can access your workspace. Polixai does not use your data for model training.

Data Residency

Data is primarily stored in EU-based infrastructure. Some processing may occur outside the EEA depending on the services used (e.g., AI models, integrated APIs).

Subprocessors

We use a limited number of trusted subprocessors to deliver our services, including infrastructure, AI processing, analytics, and payments. These include OVHcloud, OpenAI, Vercel, Google, Snowflake, and Stripe. A current list is available upon request.

Local Deployments

Desktop/local versions store analyses directly on your device.

Google User Data

Data Accessed

When a user connects a Google Analytics 4 property through Google OAuth, Polixai may access:

  • Basic Google account information such as email address and account identifier
  • Google Analytics account and property metadata
  • Google Analytics 4 reporting data that the user explicitly authorizes Polixai to access through Google's Analytics APIs

Polixai requests read-only access only and cannot modify, create, or delete any Google Analytics data.

How We Use Google User Data

Google Analytics data is used exclusively to:

  • Retrieve analytics reports requested by the user
  • Generate AI-powered analyses and insights
  • Answer questions submitted through the Polixai platform
  • Provide structured reporting and performance recommendations

Google user data is never used for advertising purposes.

Google user data is never sold to third parties.

Google user data is never used to train public, shared, or third-party AI models.

Data Sharing

Polixai does not sell or share Google user data with third parties.

Data may be processed by trusted subprocessors strictly for the purpose of delivering the requested service, including:

  • OpenAI (AI-powered analysis)
  • Infrastructure and hosting providers
  • Authentication providers

These providers process data only as necessary to provide functionality requested by the user.

Data Retention & Deletion

Google Analytics data is retained only for as long as necessary to provide the Polixai service.

Users may disconnect their Google Analytics account at any time.

Users may request deletion of their workspace and associated data by contacting: privacy@polixai.io

Upon receiving a deletion request, Polixai will permanently delete applicable user data within a reasonable period unless retention is required by law.

Google API Services Compliance

Polixai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is used only to provide or improve user-facing functionality requested by the user.

Polixai does not use Google user data for advertising, profiling, or resale purposes.

Contact Information

For privacy-related questions, data requests, or deletion requests, please contact: privacy@polixai.io