Privacy Policy
Last updated: April 2026
What We Collect
When you use ClimbPast, we collect: your email address (for authentication), your Google Search Console and GA4 data (via OAuth with your explicit consent), and basic usage analytics (page views, feature usage). We do not collect passwords — authentication uses magic links.
How We Use Your Data
Your analytics data is used solely to power the ClimbPast product: generating insights, detecting anomalies, producing reports, and answering your questions. We do not sell your data, share it with third parties, or use it to train AI models.
Data Storage and Security
All data is stored in Neon PostgreSQL on SOC 2 Type II certified AWS infrastructure. Sensitive credentials (Google OAuth tokens, API keys) are encrypted at rest using AES-256-GCM. Data is encrypted in transit via TLS 1.2+. See our Security page for full details.
Third-Party Services
We use the following third-party services: Neon (database hosting), Resend (transactional email), Google APIs (Search Console, Analytics, Tag Manager — with your OAuth consent), and your configured AI provider (for generating insights). Each processes only the minimum data required.
Data Retention and Deletion
Your data is retained for as long as your account is active. You can delete your workspace at any time from Settings, which permanently removes all associated data including analytics history, credentials, and team memberships. You can also disconnect Google at any time to immediately delete all stored OAuth tokens.
Your Rights (GDPR)
You have the right to access, correct, or delete your personal data at any time. To exercise these rights, email privacy@climbpast.com or delete your workspace directly from the Settings page.
Cookies
ClimbPast uses a single session cookie for authentication (httpOnly, secure, sameSite). We do not use advertising cookies or cross-site tracking. Any analytics tracking (GA4, GTM) on the marketing site is configured by you for your own use.
Contact
Questions about your privacy? Email us at privacy@climbpast.com.