AttributionHub Privacy Policy
At AttributionHub, your privacy is important to us. This Privacy Policy outlines what data we collect, how we use it, and your rights related to your data.
1. Information We Collect
We collect data related to:
- Website sessions (IP address, device/browser info, pageviews, timestamps, and exit pages)
- Attribution metadata (source, medium, campaign, landing page, etc.)
- Conversion events (form submissions, transactions, timestamps, revenue info)
- User identifiers (email address if passed during a conversion event)
Some of this data is anonymized by default. When combined with identifiers such as email addresses, it may be used to create user-level attribution records, depending on customer configuration.
2. How We Use Your Information
The data we collect is used to:
- Generate attribution insights and reports
- Enable API access to structured attribution data
- Deliver scheduled data exports
- Support customer support and product improvement
We do not sell or share personal data with third parties for marketing purposes. Some data may be shared with infrastructure and analytics partners solely to operate and improve our service.
3. Subprocessors
We use the following subprocessors to provide our service:
- Google Cloud Platform – data hosting, storage, and processing (Cloud Run, BigQuery)
- Cloudflare – network and security infrastructure
All subprocessors are required to comply with industry-standard data protection practices.
4. Data Retention
We retain data as long as necessary to provide services or comply with legal obligations. Attribution data is retained for as long as the customer maintains an active subscription. After a subscription ends, we retain the data for an additional 3 months to allow for account recovery. After this grace period, all customer data will be permanently deleted unless otherwise agreed upon in writing. Customers may request data deletion at any time.
5. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Request a copy of your data (data portability)
- Opt out of tracking or data collection (where applicable)
Contact us at [email protected] to make any data-related requests.
6. Cookies and Tracking
AttributionHub uses cookies and local storage to assign and track session and user identifiers. These identifiers allow us to accurately associate pageviews, source data, and conversions within and across sessions. Cookies do not store personally identifiable information unless explicitly passed during a conversion event.
You can manage cookie preferences through your browser settings. Blocking cookies may limit the effectiveness of attribution tracking. Some core session-based functionality may degrade or fail to operate without cookies enabled.
7. Children’s Privacy
AttributionHub does not knowingly collect or solicit personal data from individuals under the age of 13. Websites that use our tracking services are responsible for ensuring compliance with age-related data collection laws such as COPPA. If you believe a child has provided us data inappropriately, please contact us immediately.
Use of our services by minors is at their own risk, and AttributionHub disclaims liability for unauthorized or non-compliant data collection involving minors.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date and notify users of material changes through the AttributionHub website or by email. We will provide at least 7 days' advance notice for significant changes. Continued use of the service after changes constitutes your acceptance of the updated policy.
9. Data Protection & Security
We use industry-standard best practices for data encryption, access control, and system monitoring. Access to personal data is restricted to authorized personnel only. We maintain internal policies for security incident response and will notify affected customers in the event of a data breach.
10. DPA Availability
If your organization requires a Data Processing Addendum (DPA) to meet GDPR, CCPA, or similar requirements, we are happy to provide one upon request. The DPA outlines our obligations as a data processor, including subprocessors used, data handling practices, and security measures. To request a DPA, please contact us at [email protected].