UserPath ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our analytics platform and services.
This policy applies to our website, dashboard, and analytics services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.
Account Information
When you create an account, we collect:
- Name and email address
- Avatar/profile picture
- Account preferences and settings
- Billing information (processed through third-party payment processors)
Analytics Data
When you use UserPath to track your websites or applications, we collect:
- Page Data: URLs, page titles, referrers
- User Interactions: Clicks, scrolls, form submissions
- Device Information: Browser type, device type, operating system, screen resolution
- Location Data: City, country, region, timezone (derived from IP address)
- Session Data: Session duration, page views, user journeys
- Custom Events: Events and properties you choose to track
- Error Information: JavaScript errors and debugging information
Technical Information
- IP addresses (anonymized for analytics)
- User agent strings
- Cookies and similar tracking technologies
- Log files and usage patterns
We use the information we collect to:
- Provide Our Service: Process analytics data, generate insights, and provide dashboard access
- AI Features: Power our AI-driven analytics insights and chat functionality
- Account Management: Create and manage your account, process billing, provide customer support
- Service Improvement: Analyze usage patterns to improve our platform and develop new features
- Communication: Send service-related notifications, updates, and support messages
- Legal Compliance: Comply with applicable laws and regulations
Data Processing Role: When you use UserPath to track your website visitors, you act as the data controller and we act as the data processor for that analytics data.
Storage: We store data using industry-standard security measures:
- Analytics events and metadata are stored in high performant databases
- All data is encrypted in transit and at rest
- Regular security audits and monitoring
Data Retention: Analytics data is retained as long as your account is active, except for some plans. Please check our pricing page for more details. Account data after account cancellation is retained until we determine it's no longer necessary for our business purposes.
We do not sell, trade, or rent your personal information. We may share data in the following circumstances:
- Service Providers: Third-party services that help us operate our platform (cloud hosting, payment processing)
- Legal Requirements: When required by law, court order, or to protect our rights
- Business Transfer: In connection with a merger, acquisition, or sale of assets
- Consent: With your explicit consent for other purposes
Third-Party Integrations
We integrate with third-party services that you choose to connect:
- Google Analytics: To import your existing analytics data
- Stripe: To analyze payment and revenue data
- AI Providers: To power our AI features (data is processed securely and not used for training)
We use cookies and similar technologies for:
- Essential Cookies: Required for the service to function (session management, authentication)
- Analytics Cookies: To understand how you use our platform
- Preference Cookies: To remember your settings and preferences
For websites using our analytics tracking, we place minimal cookies to:
- Maintain session continuity
- Store user preferences (where applicable)
- Enable accurate analytics tracking
Our AI features analyze your analytics data to provide insights and answer questions. This processing:
- Is performed to provide the service you requested
- Does not involve automated decision-making that significantly affects you
- Uses industry-standard AI providers with appropriate data protection measures
- Does not use your data to train AI models for other customers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including:
- Standard Contractual Clauses
- Adequacy decisions
- Other lawful transfer mechanisms
Depending on your location, you may have the following rights:
- Access: Request information about personal data we have about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data
- Portability: Request a copy of your data in a portable format
- Restriction: Request limitation of processing
- Objection: Object to certain types of processing
- Withdrawal: Withdraw consent where processing is based on consent
To exercise these rights, please contact us at [email protected]
We implement appropriate technical and organizational measures to protect your data:
- Encryption in transit and at rest
- Access controls and authentication
- Regular security assessments
- Incident response procedures
- Employee training on data protection
However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
Our service is intended for users who are 18 years of age or older. We do not knowingly collect personal information from children or people under 18. If you become aware that a child has provided us with personal information, please contact us immediately.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR). We process your data based on:
- Contract: To provide our services
- Legitimate Interest: To improve our services and communicate with you
- Consent: Where you have provided specific consent
- Legal Obligation: To comply with applicable laws
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date.
For material changes, we will provide additional notice (such as email notification) at least 30 days before the changes take effect.
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
For general support and questions about our service, please see our Terms of Service.