Privacy policy
- Metrcs shows marketing numbers from your ad, analytics and email accounts on one page. We only ever read those accounts. We never change them.
- We hold the minimum we need: your login, and the reporting numbers for your business.
- We don't sell data, we don't run ads on Metrcs, and we don't use tracking cookies.
- Each client login only sees its own business. Questions or requests go to hello@flowdgtl.com.
1. Who we are
Metrcs is a client reporting dashboard built and run by PT Flow Digital Asia ("Flow Digital", "we", "us"), a digital marketing agency based in Bali, Indonesia. This policy covers metrcs.co, app.metrcs.co and the Metrcs dashboards we share with our clients.
For the reporting data in Metrcs, we act on behalf of our clients under our agreement with them. Your business decides what we report on; we process it to provide the service.
2. What we collect
| What | Examples | Why |
|---|---|---|
| Login details | Username and a scrambled (hashed) version of your password. We never store passwords in readable form. | To let you sign in and keep each business's dashboard private. |
| Session data | A session cookie while you're signed in, and basic server logs (IP address, browser, time of request). | To keep you signed in, keep the service secure and fix problems. |
| Reporting data | Totals and trends such as ad spend, impressions, clicks, website sessions, search rankings, email performance and social posts. | To show your marketing performance, which is the whole point of Metrcs. |
| Display preferences | Your light, dark or night theme choice, saved in your own browser. | So the dashboard looks how you left it. |
| Waitlist sign-ups | Name, company (optional), email, phone number and the role you chose when you registered interest on metrcs.co. | To tell you when Metrcs launches and, because you ticked the box, to send launch news and offers by email. |
| Messages you send us | Emails or WhatsApp messages about your dashboard. | To answer you. |
Reporting data is mostly aggregated numbers. It can occasionally include things like a post caption, a campaign name or a search term. Metrcs is not designed to hold your customers' personal details, and we don't import customer lists, contact records or payment data.
3. Where the numbers come from
With your permission, we read reporting data from the platforms your business uses, which can include Google Ads, Google Analytics, Google Search Console, Meta (Facebook and Instagram) and Klaviyo. Access is read-only: we don't change campaigns, budgets, posts or settings through Metrcs. You can remove our access in each platform's settings at any time. If you do, the matching section of your dashboard will stop updating.
Each platform also has its own privacy policy, which applies to the data it holds.
4. How we use it
If you register interest on metrcs.co, we use your details only to contact you about Metrcs. Every marketing email has an unsubscribe link, and you can ask us to delete your sign-up at any time by emailing hello@flowdgtl.com. Sign-ups are kept until Metrcs launches and for as long as you stay subscribed afterwards.
- To build and refresh your dashboard (usually once each morning) and weekly snapshots.
- To manage your marketing and report to you as part of our agreement.
- To keep Metrcs secure, working and improving.
We don't sell or rent data, use it for advertising, or share one client's numbers with another client.
5. Who helps us run it
We use a small number of trusted providers to run Metrcs. They process data only to provide their service to us:
| Provider | What they do |
|---|---|
| Hostinger | Hosts the website and dashboard. |
| GitHub (private repository) | Stores the dashboard code and the saved reporting files it reads. |
| Anthropic (Claude) | The tools we use to fetch, organise and present reporting data. |
| Google Fonts | Supplies the typeface the pages use. |
Some of these providers store data outside Indonesia, including in the United States. Where that happens, we rely on their contractual and security commitments to protect it.
We may also disclose data if the law requires it, or to protect our rights or the safety of others.
6. Keeping it safe
- All pages are served over an encrypted connection (HTTPS).
- Passwords are stored hashed, and every login is checked on our server before any data is sent.
- A client login can only load its own business's files. This is enforced on the server, not just hidden on screen.
- Access to our systems is limited to the Flow Digital team members who need it.
No system is perfectly secure. If we learn of a breach affecting your data, we'll tell you without undue delay, as the law requires.
7. How long we keep it
We keep reporting data and logins for as long as we work together. When a client agreement ends, we remove that client's login and stop collecting new data. We then delete or anonymise their saved reporting data within 90 days, unless you ask us to keep or hand it over, or the law requires us to keep it longer. Server logs are kept for a short period for security and then deleted.
8. Cookies and browser storage
Metrcs uses one essential session cookie to keep you signed in. Your browser's local storage remembers your theme and last view. We don't use advertising cookies, cross-site tracking or third-party analytics on the dashboard.
9. Your rights
Depending on where you are, you have rights over your personal data. These come from Indonesia's Personal Data Protection Law (Law No. 27 of 2022), and the UK or EU GDPR if they apply to you. They include the right to:
- ask what personal data we hold about you and get a copy
- correct anything that's wrong
- ask us to delete it or limit how we use it
- object to our use of it, or withdraw consent you gave earlier
- complain to your local data protection authority
To use any of these, email hello@flowdgtl.com. We'll reply within 30 days. If your request is about data your business controls, we may pass it to your business or ask them to confirm it.
10. Children
Metrcs is a business tool and isn't meant for anyone under 18.
11. Changes
If we change this policy, we'll update the date at the top. If the change is significant, we'll tell our clients directly.
12. Contact
PT Flow Digital Asia, Bali, Indonesia
Email: hello@flowdgtl.com