MetricaTeam Privacy Policy
Effective date: November 8, 2026
This policy explains what personal data we collect through metricateam.com and the MetricaTeam service (the "Service"), why we use it, who receives it, and what rights you have.
1. Who is responsible
The controller of your personal data is Maksim Kazankin, an individual resident in Vietnam, address: 6 Bãi Dương, Bắc Nha Trang, Khánh Hòa 650000, Vietnam ("we", "us"). Contact: support@metricateam.com.
Our representative in the EU and UK under Article 27 of the GDPR: not yet appointed. We will appoint one before the Service opens for sign-up and name it here.
When a company uses the Service. A company's administrator adds team members and their data. For the data in a company's workspace, the company is the controller, and we process that data for it as a processor, under section 9 of our Terms of Service. If you are a team member, please contact your company first with questions about that data. Your company decides who inside it can see your numbers and comments.
2. What data we collect
Account data. Your name, work email address, password (stored only as a hash, so we cannot read it), company name, job title, and time zone.
Workspace data. Metrics, plans, actuals, and comments that you and your team enter. For team members: name, email address, job title, and who reports to whom.
Records of acceptance and activity. When you accepted our documents and which version, and a log of actions in the Service: the type of action, its date and time, and your user ID.
Support messages. What you write to us and the address for our reply.
Payment data. Paddle.com collects your payment details as our Merchant of Record. We do not receive your full card number. We receive your name, email address, country, what you bought, and the amount and date of payment.
Technical data. When you visit the site or use the Service, our server records your IP address, browser details, the page requested, and the time.
We do not ask for special categories of personal data, such as health data. Please do not enter them in the Service.
3. Why we use your data and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating your account and providing the Service | Performance of a contract, Art. 6(1)(b) |
| Sending service messages: login codes, reminders to enter actuals, weekly results, billing notices | Performance of a contract, Art. 6(1)(b) |
| Creating AI summaries on the Pro plan | Performance of a contract, Art. 6(1)(b) |
| Answering support requests | Performance of a contract, or our legitimate interest in helping people who contact us, Art. 6(1)(f) |
| Keeping the Service secure, preventing abuse, fixing errors | Our legitimate interest in a safe, working service, Art. 6(1)(f) |
| Keeping billing and tax records | Legal obligation, Art. 6(1)(c) |
| Website analytics, if we add it | Your consent, Art. 6(1)(a) |
Name and work email are required to create an account; without them we cannot provide the Service. Everything else is up to you.
We do not sell your personal data, and we do not use it for advertising.
AI summaries are generated automatically, but they do not make decisions about you. A person reads them and decides what to do.
4. Where your data is stored
The Service, its database, and its backups run on servers in Germany.
5. Who receives your data
We use the following providers. They process data only as needed for the purpose shown, under contract with us.
| Provider | What it does | Data | Location |
|---|---|---|---|
| netcup GmbH | Hosting of the site, Service, and database | All data in the Service | Germany |
| Hetzner Online GmbH | Storage of encrypted backups | All data in the Service, encrypted | Germany |
| Brevo SAS, Paris | Sending Service email | Name, email address, message content | France |
| Spaceship, Inc. | Our business mailbox, as our processor | Your emails to us and our replies | United States |
| Anthropic, PBC | AI summaries on the Pro plan | See below | United States |
| Cloudflare, Inc. | DNS for our domain | Technical data of DNS requests | United States and other countries |
| Telegram | Notifications, only if you connect Telegram yourself | Your Telegram chat ID and the notification text | See Telegram's privacy policy |
| Google LLC | Website analytics, only with your consent and only once we add it | See section 6 | United States |
Spaceship. Data in our mailbox is transferred to the United States under Standard Contractual Clauses. You can reach Spaceship's data protection officer at dpo@spaceship.com.
AI summaries. For Pro companies, we send Anthropic only what a summary needs: names of metrics and departments, units, plan and actual values, variances, past values, forecasts, and goals. We do not send names or email addresses of people, company names, comment text, or login details.
Paddle.com. Paddle.com acts as Merchant of Record. The Paddle.com company that sells to you is Paddle.com Market Limited (England and Wales), or Paddle.com Inc. for buyers in the United States, or Paddle.com (Canada) Ltd for buyers in Canada. Paddle.com is an independent controller of the data it collects for payments, tax, and fraud prevention. See Paddle.com privacy notice.
Legal requests. We may disclose data when the law requires it, or to protect our rights or the safety of others.
Sale of the business. If the Service is transferred to a new owner, your data may move with it. We will tell you before that happens.
6. Cookies
The public site sets no cookies and loads nothing from other companies. The Service uses only the cookies needed to keep you logged in and to keep it secure. You can block cookies in your browser, but you will not be able to log in.
We do not use analytics today. If we add Google Analytics, we will ask for your consent first, publish a Cookie Policy, and update this policy.
7. International transfers
We run the Service from Vietnam, so we may access data stored in Germany from there, for example to give support or fix a problem. We limit this access to what is needed and protect it with encrypted connections. The GDPR applies to this processing.
Some providers in section 5 are outside the EEA and UK. Where the destination has no adequacy decision, we rely on a safeguard allowed by law. Anthropic, Cloudflare, and Spaceship are bound by the European Commission's Standard Contractual Clauses; for data from the UK, Anthropic and Cloudflare also use the UK Addendum to those clauses. Cloudflare, and Google if we add analytics, are also certified under the EU-U.S. Data Privacy Framework and its UK Extension. You can ask us for a copy at support@metricateam.com.
8. How long we keep data
| Data | How long |
|---|---|
| Account and workspace data | While the subscription is active. 12 months after it ends, we delete the company's data. For a company on the free plan, we delete the data after 12 months without logins. In both cases, we email the administrator 30 days before that. An administrator can ask us to delete it sooner |
| Support messages | 3 years after the last message |
| Billing records | 5 years after the contract ends, or longer if tax law requires it |
| Web server logs | 14 days |
| Backups | Up to 30 days, then deleted automatically |
When we delete data, it disappears from the live database first and from backups when they expire.
9. How we protect data
We use encrypted connections, store passwords only as hashes, encrypt backups, limit access to those who need it, and keep the server's firewall closed except for what the Service needs.
10. Your rights
If the GDPR or UK GDPR applies to you, you have the right to:
- access your personal data and get a copy;
- correct inaccurate data;
- have your data deleted;
- restrict or object to processing, including processing based on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, without affecting earlier processing.
To use these rights, write to support@metricateam.com from your account email. We answer within one month. If your request is about data in a company's workspace, we may pass it to that company.
You also have the right to complain to a data protection authority, in particular in the country where you live or work.
11. Children
The Service is for business use and is not meant for anyone under 18.
12. Changes to this policy
We will publish any new version here with its effective date. If a change is material, we will tell you by email or in the Service before it takes effect.
13. Contact
Maksim Kazankin, 6 Bãi Dương, Bắc Nha Trang, Khánh Hòa 650000, Vietnam, support@metricateam.com