This Privacy Policy explains how Metricora Social ("Metricora," "we," "us," or "our") collects, uses, and protects information when you use the Metricora Social mobile application and related services (collectively, the "Service").
By using the Service, you agree to the collection and use of information as described here. If you don't agree, please don't use the Service.
Account information. When you create a Metricora Social account, we collect your email address and password (stored securely via Firebase Authentication — we never see or store your plaintext password), and any display name you provide. If you sign in with Google, Apple, or Facebook instead, we receive the basic profile information those providers share with us to create your account.
Onboarding profile. During setup we ask which social platforms you use, your role (e.g. creator, agency, brand marketer), and your goals. This is self-reported and used only to tailor your experience.
Website contact form. If you write to us through the form on metricora.social/support, we collect the email address and message you enter, store them, and forward the message to our support inbox so we can reply. We use this only to respond to you.
Connected platform accounts. When you connect a social media account (currently Instagram, TikTok, YouTube, Threads, LinkedIn, and Twitch, with more platforms planned) via that platform's official login, we store:
Access tokens are stored only on our secure backend infrastructure and are never transmitted to or readable by the Metricora Social app itself. You can disconnect a platform at any time, which immediately and permanently deletes its stored token.
Analytics data. For each connected account, we fetch and store data such as post reach and impressions, likes, comments, shares, saves, video view counts, follower counts over time, and — where the platform provides it — audience demographic breakdowns (e.g. gender or country). This data is fetched directly from the platform's official API and is limited to the account you connected.
Content you schedule. If you use the post-scheduling feature, we store the caption, hashtags, location, tagged accounts, scheduled time and target platforms you enter, plus any photos or videos you attach. Attached media is uploaded to our cloud storage so it can be published at the scheduled time, and is removed after publishing or when you delete the scheduled post or your account.
Notifications. If you allow notifications, we store your device's push notification token (issued by Apple and Firebase Cloud Messaging), your notification preferences and time zone, and an in-app inbox of the notifications we sent you, such as post-published alerts and performance summaries. You can turn notifications off at any time in iOS Settings or in the app.
Security information. If you turn on two-step verification, we send one-time codes to your email address and keep short-lived, hashed records of them to verify you. Face ID / Touch ID app lock, if enabled, is handled entirely on your device by Apple; we never receive or store biometric data.
Usage and diagnostics. We use Firebase Analytics to understand how the app is used (for example which screens and features are opened, onboarding progress, and paywall interactions). Events are associated with your account's random Firebase user ID, plus coarse device and app details such as app version, device model, operating system, language and approximate region. They do not include your email, name, social handles, captions or post content. Firebase Crashlytics collects crash reports and Firebase Performance Monitoring collects app performance timings, to help us find and fix bugs. You can turn off usage analytics at any time in Settings › Security & Privacy.
Tracking permission. On iOS we may ask for permission to track you across other companies' apps and websites. This is used only to measure which of our own marketing campaigns led to an install or subscription. If you decline, nothing changes in how the app works.
Subscription and purchase information. If you purchase a paid subscription, we receive transaction information from Apple's App Store — including which plan you purchased, the purchase and expiration dates, and whether the subscription is active, renewing, or canceled. We use this only to determine your plan's features and connected-account limit. We never see or store your payment card number or other billing details — those are handled entirely by Apple.
Feedback and technical details. When you send feedback, we also receive technical details such as your app version, device model, operating system, language, region, time zone and subscription plan, which we use only to understand and fix the issue you reported.
We do not use your data to serve ads, and we do not sell or "share" personal information as those terms are defined by applicable privacy laws.
Legal bases (EEA, UK and Switzerland). Where those laws apply, we process your data to perform our contract with you (providing the Service), based on your consent (connecting platform accounts, notifications, tracking permission, optional usage analytics), for our legitimate interests (security, abuse prevention, fixing and improving the Service), and to meet legal obligations. Where we rely on consent, you can withdraw it at any time.
We rely on the following services to operate Metricora Social. Each processes a limited slice of your data strictly to perform its function for us:
These providers have their own privacy policies governing how they handle data on their platforms. Connecting a social account is also subject to that platform's own terms and privacy policy. Use of YouTube API Services is additionally subject to the YouTube Terms of Service, and Google's own handling of your data is governed by the Google Privacy Policy. You can review or revoke Metricora Social's access to your Google Account at any time at myaccount.google.com/permissions. Metricora Social's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
This website keeps a few essentials in your browser's storage, such as your light or dark theme and your cookie choice. If you choose "Accept all" in the cookie banner, we also use an analytics service (Google Analytics 4, listed above) that sets cookies and collects page views, approximate location, device and browser information, and the referring page, so we can understand how the site is used and improve it. IP anonymization is enabled. If you choose "Essential only", or make no choice, the analytics service is not loaded and sets no cookies. Your choice is stored in your browser, and you can change it at any time with the "Cookie settings" link in the page footer; if you withdraw consent, we stop measuring and remove the analytics cookies. We do not use website cookies to serve ads. This section covers the website only; analytics inside the mobile app are described in Section 1.
If you connect a YouTube channel, Metricora Social requests access to your Google Account through Google's OAuth consent screen. This section describes exactly what we do with that data.
What we access. Your channel's public metadata (channel name, handle, profile picture, subscriber count), your videos and their statistics (views, likes, comments, watch time), and channel analytics from the YouTube Analytics API, including audience demographic breakdowns where YouTube provides them. If you use the optional scheduling feature, we also request permission to upload videos to your channel, and we only ever upload content you created and scheduled yourself in the app.
How we use it. Solely to provide the user-facing features you see in Metricora Social: showing your channel's analytics, engagement and growth forecasts, and publishing videos you scheduled. YouTube analytics are fetched from YouTube when you use the app and are not copied into a separate long-term analytics store. What we keep is your channel's connection record (channel identifier, name, profile picture, subscriber count) and the access and refresh tokens needed to talk to YouTube on your behalf.
Limited Use. Metricora Social's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we:
Revoking access and deletion. You can disconnect your YouTube channel at any time in the app; this immediately and permanently deletes its stored connection record and tokens from our systems. You can also revoke Metricora Social's access directly from your Google Account at myaccount.google.com/permissions. Once access is revoked, we can no longer retrieve data from YouTube for that channel. Deleting your Metricora Social account permanently deletes all remaining data associated with it, as described in Section 6. You can also email support@metricora.social to request deletion of your data.
Your data is stored on Google Cloud infrastructure via Firebase, primarily in the United States. Access tokens and other sensitive records are restricted to our backend and are never exposed to any client, including the Metricora Social app itself. All connections to our services use HTTPS/TLS encryption, data is encrypted at rest by our cloud provider, and access to production data is limited to the people who need it to operate the Service.
If you use the Service from outside the United States, your information is transferred to and processed in the United States and other countries where our providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses. No system is perfectly secure; if a breach affects your information we will notify you and regulators as required by law.
We retain your account and analytics data for as long as your account is active. Disconnecting a platform deletes that platform's stored token and connection record immediately. Firebase Analytics event data is kept for up to 14 months, and one-time security codes expire within minutes. Records we must keep for legal, tax or fraud-prevention reasons (such as subscription transaction history) are retained only for as long as the law requires. You can request account deletion directly in the app, under Settings. Deletion starts a 30-day grace period, during which you can sign back in to cancel it; once the grace period ends, your account and all associated data are permanently deleted. You can also email us at support@metricora.social to request deletion.
You can disconnect any connected platform account, turn off usage analytics, turn off notifications and delete your account at any time from within the app.
Depending on where you live (including the EEA, UK, Switzerland, California and other U.S. states), you may have the right to access the personal data we hold about you, correct it, delete it, export it in a portable format, restrict or object to certain processing, withdraw consent, and not be discriminated against for exercising these rights. You may also lodge a complaint with your local data protection authority. To exercise any of these rights, email support@metricora.social from the address on your account; we will respond within the time required by law (generally 30 days). We do not sell or share personal information for cross-context behavioral advertising.
The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above (and, for material changes, notifying you in the app or by email), and continued use of the Service after changes take effect constitutes acceptance of the revised policy.
Questions about this Privacy Policy? Email us at support@metricora.social.
Metricora Social