Privacy Policy

1. Information we collect

From Customers (account holders):

• Account details: name, email address, password (hashed), company name and profile.
• Google Calendar data, via read-only OAuth scopes: calendar list, calendar metadata, and event details (titles, times, attendee email addresses) — used solely to detect meetings and identify who to survey. Meetric never requests write access and never edits your calendar.
• Usage data: log-in activity, feature usage, and support requests.

From survey respondents (a Customer's meeting attendees):

• Name and email address, sourced from the Customer's calendar event.
• The NPS score, optional reason codes, and optional free-text feedback they submit.

2. How we use information

• To identify eligible meetings and send NPS survey emails on the Customer's behalf;
• To generate dashboards, trends, and reports for the Customer;
• To operate, secure, and improve the Service, including fraud and abuse prevention;
• To communicate with Customers about their account, billing, and support;
• To comply with legal obligations.

We do not sell personal information, and we do not use Google user data to serve advertising, in accordance with Google API Services User Data Policy, including its Limited Use requirements.

3. Google user data specifically

Meetric's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data is used only to detect meetings and trigger surveys, is not used for advertising, and is not shared with third parties except the infrastructure providers listed in Section 5 who process it strictly on our behalf.

4. Legal basis and Customer responsibility

Where applicable privacy law (e.g., GDPR) requires a legal basis, we rely on the Customer's legitimate interest in measuring client satisfaction, and on the Customer's own responsibility to ensure it has a lawful basis to share a contact's name and email with Meetric for this purpose. Customers are the data controller for survey-respondent data; VIVISION acts as a data processor on the Customer's behalf.

5. Sub-processors and infrastructure

We use the following infrastructure providers to operate the Service:

• Supabase — database, authentication, and file storage (hosted in Canada, ca-central-1).
• Resend — transactional email delivery for NPS surveys and notifications.
• Google Calendar API — read-only calendar sync, per Customer authorization.
• Square — card payments and saved cards for subscriptions. Card numbers are entered directly into Square's secure form and never reach our servers.
• Our own website statistics — on the same public pages we record anonymous visit data (a random visitor ID stored in your browser, pages viewed, time on page, scroll depth, which sign-up buttons were clicked, and the website or campaign that referred you). No names, emails or IP addresses are stored. If you sign up, the referring source is saved with your account so we know which channels bring customers.
• Google Analytics — anonymous visit statistics on our public website pages only (home, sign-up, sign-in, terms, privacy). It uses cookies, is never loaded inside the app or on survey links, and receives no survey responses, customer data, or ad-personalization signals. You can block it with any browser privacy setting or Google's opt-out add-on.
• Optionally, Anthropic or OpenAI — used only at a Customer's explicit request to suggest feedback reason-code categories during setup, never on live survey traffic.

6. Data retention

We retain account and survey data for as long as the Customer's account is active, and for a reasonable period after termination to allow account recovery and meet legal obligations, after which it is deleted or anonymized. Customers may request earlier deletion by contacting us.

7. Your rights

Depending on your location, you may have rights to access, correct, or delete your personal information, or to object to its processing. Survey respondents who want their response data removed, or Customers who want their account data exported or deleted, can email vivisionconsulting@gmail.com.

8. Security

We use industry-standard measures to protect data, including encryption in transit, row-level tenant isolation in our database, and encrypted storage of OAuth tokens. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children's privacy

The Service is intended for business use by adults and is not directed to children under 16. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or an in-app notice before taking effect.

11. Contact

Questions about this Privacy Policy or your data can be sent to vivisionconsulting@gmail.com.