Privacy Policy

Company: Datasetmatch LLC

Mailing address: 3564 Avalon Park E Blvd Ste 1-A736, Orlando, FL 32828

Email: hello@betteranalyst.com

"Personal Information" means information that identifies, relates to, describes, or could reasonably be linked with an identifiable individual. It does not include de-identified or aggregated information.

Better Analyst may be made available through a customer's website or application as an embedded, white-labeled, or otherwise branded experience (the "Embedded Services").

If you use Better Analyst through an Embedded Service:

• The business customer that provides access to you (the "Customer") may control the configuration of the Embedded Services, including branding, user access, connected data sources, and what data is made available for analysis.
• In many cases, the Customer is the controller (or "business" under certain privacy laws) of End User information, and Better Analyst acts as a service provider / processor processing information on the Customer's behalf to provide the Services.
• The Customer may provide you with their own privacy policy governing how they use information outside of Better Analyst. This Privacy Policy explains how Better Analyst processes information in providing the Services.
• Customer data vs. your data: You may upload your own content, and you may also be granted access to analyze data provided by the Customer (e.g., company datasets or connected systems). The Customer is responsible for ensuring it has appropriate rights and permissions to make that data available.

A) Information you provide to us

We collect information you provide directly, including:

• Account Information: name, email address, and authentication details when you create an account via email or Google login.
• User Content: messages and prompts you submit in chats; files you upload (e.g., spreadsheets, documents, datasets); and outputs you generate through the Services.
• Voice Dictation: if you choose to dictate a chat message, the microphone recording is sent to OpenAI to produce a text transcript. Better Analyst does not save the audio recording; the returned text is handled as User Content if you send it.
• Customer-Provided Data: if you are using Embedded Services, the Customer may make company datasets or connected systems available for you to analyze. We process such data to provide the Services.
• Connection Credentials & Integration Data: credentials and tokens you provide (or that the Customer provides or configures) to connect to third-party services or data sources (e.g., MySQL, BigQuery, Snowflake, Supabase, MSSQL, Postgres, Google Analytics, Google Search Console, Google Ads, Meta Ads, Airtable, Power BI, Excel, Google Sheets). Connection credentials are encrypted at rest.
• Payment Information (limited): when you subscribe or pay, payments are processed by Stripe. We do not store full payment card numbers. We may receive billing-related metadata (e.g., customer ID, subscription status, partial card details like last four digits, and invoice information) from Stripe.
• Communications: information you provide when you contact us (e.g., support requests).
• Correlation Game contest entries: verified email address, an optional unverified display name or public social-profile handle and link, country/province, legal attestations, game answers, server timing, scores, and integrity-review signals. Entrants may instead use a generated public Player alias, which may be replaced once with a chosen name or profile. Public names and profile ownership are not verified, a chosen public presentation cannot be changed, and duplicates are permitted. This information is public metadata only; the verified email address determines entry ownership, attempt limits, private history, and winner contact, and remains private. Your email is not added to a marketing list merely because you enter. If you affirmatively select the separate optional marketing checkbox, we retain a pseudonymous consent audit record and ask our email provider to record that positive choice.

Sensitive information: Please do not upload sensitive personal information (e.g., Social Security numbers, health data, biometrics, or information about children) unless you have a lawful basis and truly need to.

B) Information we collect automatically

When you use the Services, we may automatically collect:

• Device and usage data: IP address, browser type, device identifiers, operating system, pages viewed, referring URLs, and interaction data.
• Cookies and similar technologies: used to operate the site and measure performance (see Section 9).

When you connect a Google service, Better Analyst accesses Google user data only after you grant permission and only to provide the connector features you request. This may include your connected Google email address, account and property identifiers, website analytics and search performance, selected files and spreadsheets, warehouse data, and report results from your connected services. For Google Ads, this may also include accessible customer and manager account identifiers, names, hierarchy, status, currency, timezone, and test-account status; and advertising report data such as campaign, ad group, ad, keyword, search-term, cost, and conversion metrics.

How we use this data:

• Authenticate the connection and show you the Google accounts, properties, files, and Google Ads customers you can access.
• Run the read-only reports you request, refresh saved dashboard queries, and deliver Data Flows you schedule to destinations you choose.
• Generate analyses, charts, CSV files, and other outputs you request.
• Maintain security, query audit records, reliability, and troubleshooting information.

What we store: We store encrypted OAuth access and refresh tokens, selected-account metadata, saved queries and query logs, and generated report artifacts and outputs. Google Ads OAuth provides a single Ads API permission rather than a narrower reporting-only permission; Better Analyst restricts this connector to account discovery and the read-only Google Ads Search endpoint.

How we share this data: We do not sell Google user data or use it for advertising. We share it only with service providers that process it as needed to operate the Services—including hosting, encrypted storage, code sandbox, and AI processing providers—or when required for legal and safety reasons described in this Policy.

Retention and deletion: Disconnecting a Google account removes the stored OAuth connection and stops new access through that connection. Existing chats, query logs, report files, and outputs remain subject to the retention rules in Section 10. You can delete chats and files through the Services, delete your Better Analyst account, contact us to request deletion, or independently revoke Better Analyst through your Google Account connections.

Better Analyst's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

When you connect Airtable, Better Analyst uses OAuth with read-only schema and record scopes. We store encrypted access and refresh tokens, the selected base and table schema, and generated dataset artifacts needed to provide chat and dashboard features. We do not request personal access tokens, modify Airtable records, download attachment files, or retain Airtable's temporary attachment URLs.

Deleting the last Better Analyst connector that uses an Airtable authorization removes the stored OAuth tokens. Generated outputs follow Better Analyst's normal retention settings. You can separately revoke Better Analyst from Airtable's connected-app settings. Airtable API calls count toward the connected workspace's quota and rate limits.

When you connect Power BI, Better Analyst uses Microsoft Entra OAuth. We store encrypted access and refresh tokens and basic identity claims (account ID, tenant ID, name, and email) needed to provide connector features. We use these tokens solely to execute user-initiated queries and syncs.

Disconnecting the Power BI connection deletes the stored OAuth tokens and identity claims. Generated outputs follow Better Analyst's normal retention settings.

We contact business professionals who may find the Services useful. To do this, we collect some information from sources other than you:

• Business contact information: name, job title, employer, work email address, professional profile URL (such as LinkedIn), and general business location. We obtain it from commercial business-contact data providers and from publicly available sources such as company websites and professional profiles, and we use email verification services to check that an address can receive mail.
• Company and website information: publicly available or estimated information about a company's website, such as Google search rankings and estimated search traffic, keywords, competitors, page speed, and technical site health. We obtain it from third-party search data providers and from our own analysis of public web pages, and we use it to build a "Website Snapshot" dashboard for that company. This is information about businesses and their websites rather than about individuals.
• How you engage with our outreach: whether a message was delivered or bounced, whether you replied, and whether you unsubscribed. Links in our outreach emails carry an identifier for that email, so if you open the Website Snapshot or personalized dashboard page we sent, claim it, or create an account, we record that it came from that email.
• A personal email address, used only for advertising matching: so that we can show our own ads to people we have contacted, we may use a contact-data provider to look up a personal email address linked to your professional profile. We convert it into a one-way hash (SHA-256) as soon as we receive it, do not keep it in readable form, and never send email to it. See Section 7D.

Outreach is directed only at people in their professional capacity, at work email addresses. If you would rather not hear from us, see Section 11.

When you connect Meta Ads, you sign in with Facebook Login for Business and grant Better Analyst read-only permissions (ads_read and business_management). Better Analyst uses them to list the business portfolios and ad accounts you can access, so you can choose which ad accounts to connect, and to read ad performance reports (such as spend, impressions, clicks, and conversions) for those accounts when you ask a question or build a report.

What we store: an encrypted Meta access token (valid for about 60 days), your Meta user ID, name, and email address, the IDs and names of the ad accounts and business portfolios you select with each ad account's currency and time zone, query logs, and the report artifacts and outputs you generate.

What we do not do: Better Analyst never creates, edits, pauses, or deletes ads, campaigns, budgets, or audiences, and never changes business assets or permissions. We do not sell Meta data, use it for advertising, or share it with third parties except service providers that process it as needed to operate the Services (as described in Section 7) or when required for legal and safety reasons described in this Policy.

Retention and deletion: Disconnecting Meta Ads deletes the stored access token and connection details and stops further access. Existing chats, report files, and outputs remain subject to the retention rules in Section 10. You can also remove Better Analyst Connectors in your Facebook Business Integrations settings, delete your Better Analyst account, or ask us to delete your data. Step-by-step instructions are on our Data Deletion Instructions page.

Better Analyst processes data received from Meta in accordance with the Meta Platform Terms.

When you install the Better Analyst app on a Shopify store, the store approves read-only access to its orders, products, customers, inventory, and reports. Better Analyst never changes your store.

How we use it: We read this data only when you ask a question, refresh a dashboard, or run a Data Flow you set up, and only to give you those results. It can include order details, amounts spent, and customer records. We do not request customer names, email addresses, phone numbers, or addresses. The data is processed by our subprocessors, including AI model providers and isolated code sandboxes. We do not sell it or use it to train our own models, and we do not contact your customers.

What we store: encrypted access and refresh tokens, your store's myshopify.com address, the access you granted, and the results saved in your chats, files, and dashboards.

Retention and deletion: Disconnecting Shopify deletes the stored connection and tokens. When Shopify tells us your store has been removed, about 48 hours after you uninstall the app, we permanently delete the connection, its tokens, and the chats that used it, along with their files, dashboards, and Data Flows, unless you have connected the store again. This normally happens within a few days and always within 30 days. Save anything you want to keep before uninstalling. To request deletion sooner, email hello@betteranalyst.com.

We use information to:

• Provide, operate, maintain, and improve the Services (including Embedded Services).
• Authenticate users and secure accounts.
• Process payments, manage subscriptions, and prevent fraud.
• Enable connectors and integrations you request or your Customer configures.
• Provide customer support and respond to requests.
• Monitor usage, troubleshoot issues, and protect against abuse or security incidents.
• Comply with legal obligations and enforce our terms.
• Contact business professionals about the Services, including sending a Website Snapshot of their company's public website data (see Section 4D).
• Measure and improve our outreach, such as which messages lead to replies, dashboard views, or sign-ups.

Where the law requires a legal basis for processing, we rely on our legitimate interest in telling businesses about relevant products for business outreach, on performing our contract with you for providing the Services, and on your consent where we ask for it.

Better Analyst uses third-party AI providers to deliver AI features (the "AI Functions"). When you use AI Functions, your prompts, messages, uploaded files, and relevant context (including Customer-provided data you are authorized to access) may be processed by our AI providers to generate responses and outputs.

AI providers we use include: OpenAI, Google, and Anthropic.

• No training on your content (by us): We do not use your content (messages, files, Customer data, outputs) to train our own models.
• We request no-training where available: We do not opt in to training by AI providers where an opt-out / no-training setting is available and applicable to our account configuration.

Provider-side processing and retention, including for voice dictation audio sent to OpenAI, is governed by the applicable provider terms and API data controls.

Note: AI outputs can be inaccurate. You are responsible for reviewing outputs before relying on them.

We do not sell your Personal Information for money. We share limited information with advertising platforms so we can show and measure our own ads, as described in D) below. You can opt out of that sharing at any time (see Section 11).

We may share information as follows:

A) With the Customer (Embedded/White-Label Context)

If you use Embedded Services, the Customer may be able to access information associated with your use of the Embedded Services, depending on the Customer's configuration and policies, such as:

• account identifiers (e.g., email),
• usage/activity logs,
• chat history and outputs,
• files you upload (if enabled by the Customer),
• access logs and audit trails.

B) With service providers and subprocessors

We use vendors to help run the Services. These subprocessors handle customer data on our behalf; the current list is also on our subprocessors page:

• Supabase: Application database and sign-in (AWS us-east-2 (Ohio, United States))
• Amazon Web Services: File storage and the encryption service for saved connection credentials (us-east-2 (Ohio, United States))
• Render: Application hosting
• E2B: Isolated sandboxes that run analysis code
• OpenAI: AI model processing, voice transcription, and knowledge-base search (United States)
• Anthropic: AI model processing (United States)
• Exa: Web search and page fetching in chats, deep research, and custom API setup
• CloudConvert: File format conversion you request
• Extend: Data extraction from PDFs you upload
• DataForSEO: Website and search data requested in Explore data
• Stripe: Payments (card numbers never reach our servers)
• Brevo: Product and account email

We also use these providers for sign-in options and for our own website, advertising, and outreach:

• Google: Google sign-in, and the Google data connections you choose to authorize
• Google Analytics: Website and product analytics
• Microsoft Clarity: Session analytics on our public website only, never inside the app
• Meta: Ad conversion measurement (hashed email, IP address, browser details)
• TikTok: Ad conversion measurement (hashed email, IP address, browser details)
• Instantly: Outreach email delivery
• treg: Business contact data and email verification, with the providers it uses (such as Apollo, People Data Labs, and Hunter)
• Google PageSpeed Insights: Website performance data

They may process information only as needed to provide services to us and consistent with this Privacy Policy.

C) For legal and safety reasons

We may disclose information if we believe it's necessary to comply with law, protect safety, or prevent fraud/abuse.

D) With advertising platforms

We share limited information with advertising platforms, such as Meta (Facebook and Instagram), to show our ads to people who may be interested, to measure how our ads perform, and to avoid showing ads to existing customers:

• Hashed email addresses: one-way hashes (SHA-256) of the work email addresses of customers and of business professionals we have contacted, and of a personal email address linked to the professional profile of people we have contacted (Section 4D). The platform uses the hashes to find matching accounts and does not receive the email addresses in readable form.
• Website activity: our advertising pixels record pages visited on our website, such as the personalized dashboard pages linked from our outreach emails, and sign-ups or purchases.

Under some state privacy laws, including California's, this may be considered "sharing" for cross-context behavioral advertising. We never include people who have opted out, and for California residents we ask Meta to limit its use of this data (Limited Data Use). To opt out, see Section 11.

D) Business transfers

If we're involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

We use reasonable administrative, technical, and organizational measures to protect information.

• Passwords are protected using secure hashing methods.
• Connection credentials are encrypted at rest.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We use cookies and similar technologies to:

• keep the site functioning,
• remember preferences,
• understand traffic and usage.

We use Google Analytics to help analyze how visitors use our website. Google Analytics may collect information such as IP address, device identifiers, and pages visited. You can control cookies through your browser settings and, where available, Google's opt-out mechanisms.

Embedded deployments may also use cookies necessary for authentication, session management, and security.

Links to Website Snapshot dashboards and personalized dashboard pages in our outreach emails include an identifier for that email. When the page loads in your browser, we record a view against that identifier, and we keep it with any later claim or sign-up to measure our outreach. We do not track email opens.

We retain information as follows:

• Free plan: Chats, messages, and uploaded files that have been inactive for more than 60 days are automatically and permanently deleted, including associated files stored on our servers. This deletion is irreversible.
• Paid plans (Pro, Team, Enterprise, and grandfathered Starter, Max and Business plans): Chats, messages, and uploaded files are retained indefinitely for the duration of your active subscription.
• Account data: retained until you delete your account.
• Connection credentials / connected accounts: not deleted by us automatically; they remain until the user deletes them (or the Customer removes them, if the Customer has admin controls enabled).
• Correlation Game contest data: non-winner verified email information and any chosen public display-name or social-profile metadata are scheduled for redaction 90 days after the contest is resolved, subject to longer retention needed for fraud prevention, disputes, tax records, or other legal obligations. An anonymized player label and server-screened score record may remain as a contest result. A winner’s chosen public presentation and result may remain public and be retained as part of the contest record. A pseudonymous record of an affirmative optional marketing consent may be retained separately for as long as needed to demonstrate permission and meet email-compliance obligations; our email provider remains responsible for unsubscribe suppression.

Business outreach records (Section 4D) are kept only as long as needed for our outreach, and you can ask us to delete them at any time. If you opt out or ask us to delete your information, we keep a minimal record (your email address or company domain and the date) so that we do not contact you again.

We may retain some information longer if required to comply with legal obligations, resolve disputes, or enforce agreements.

Depending on where you live, you may have rights to access, correct, or delete your Personal Information.

To make a request, email us at hello@betteranalyst.com. We may need to verify your identity before fulfilling certain requests. For step-by-step ways to delete your account or connected-account data, see our Data Deletion Instructions.

If we contacted you about the Services: you can stop further messages at any time by replying "no" or "unsubscribe" to any of our emails, or by emailing hello@betteranalyst.com. You can also ask us what information we hold about you, which category of source it came from, or to delete it. We do not sell personal information. California residents: the categories of sources are described in Section 4D, and you may exercise the rights described in this Section without being treated differently.

Opting out of sharing for advertising: email hello@betteranalyst.com with "Do not share", or reply "no" to any of our outreach emails, and we will remove you from the advertising audiences described in Section 7D and stop adding you to them. If your browser sends a Global Privacy Control signal, our website does not load its advertising pixels.

Embedded Services note: If you use Better Analyst through a Customer, some requests may need to be handled through the Customer (who controls the account and data configuration). We may route your request to the Customer or assist them in fulfilling it.

The Services are not directed to children under 13, and we do not knowingly collect Personal Information from children under 13.

We are based in the United States, and information may be processed and stored in the U.S. and other locations where our service providers operate. By using the Services, you understand your information may be transferred to these jurisdictions.

The Services may connect to third-party services (e.g., Google, databases). Your use of those third parties is governed by their own terms and privacy policies. We are not responsible for third-party practices.

We may update this Privacy Policy from time to time. We will update the "Effective Date" above when we do. Continued use of the Services after changes become effective means you accept the updated policy.

Datasetmatch LLC

3564 Avalon Park E Blvd Ste 1-A736, Orlando, FL 32828

Email: hello@betteranalyst.com