Holy Bucket ("we", "us") makes an app that reads your Google Analytics and Search Console data and shows it to you in plain English. This explains what we collect, how we use it, and the choices you have. We keep it short and honest.
What we collect
- Your account details. When you sign in with Google, we receive your name and email to create and secure your account.
- The analytics data you connect. With your permission, we read your Google Analytics 4 and Google Search Console data. Read only. We never create, edit, or delete anything in your Google account.
- Product usage. Basic, privacy-respecting analytics about how the app itself is used, so we can improve it.
- Anything you send us. Emails, support messages, and waitlist signups.
How we use your Google data
When you connect Google Analytics or Search Console, you grant read-only access through Google’s official OAuth consent screen. We use that access for one thing: to fetch your metrics and show you your dashboards inside Holy Bucket.
Holy Bucket’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use your Google data for advertising. We do not sell it. We do not transfer it to others except as needed to run the service (see below). And we do not allow humans to read it, except for security purposes, to comply with the law, or with your explicit permission.
How we use everything else
To provide and improve the service, secure your account, respond to you, and send essential service messages. We do not sell your personal data. Ever.
Where your data lives and who can see it
- We run on Cloudflare. Your data is processed and cached on Cloudflare’s infrastructure.
- Access tokens to your Google account are encrypted at rest.
- Subprocessors: Cloudflare (hosting and storage) and Google (the data source). That’s the list.
How long we keep it
We keep your account data and connected-source tokens while your account is active. You can disconnect a Google account at any time, which deletes its tokens. If you delete your account, we delete your personal data and tokens. Cached analytics figures expire on a short cycle.
Your choices
- Disconnect any Google account from inside the app at any time.
- Delete your account and data by emailing hello@holybucket.app.
- Revoke Holy Bucket’s access directly from your Google Account security settings at any time.
Cookies
We use the minimum needed to keep you signed in, plus privacy-respecting product analytics. No advertising trackers.
Children
Holy Bucket is built for businesses and is not directed at children under 13.
Changes
If we change this policy we’ll update the date above, and for material changes we’ll tell you.
Contact
Questions about your privacy: hello@holybucket.app.