Privacy Policy

1. Data we collect

We collect the minimum data necessary to provide the service:

• Account information: Your email address and hashed password when you register.
• OAuth credentials: Access tokens and refresh tokens for the platforms you connect — Google Ads, Google Analytics 4 (GA4), Meta Ads, and Shopify. These tokens allow us to pull marketing data on your behalf.
• Job configuration: The metrics, dimensions, date ranges, schedules, and destination settings you configure for your data pipelines.
• Marketing data in transit: When a sync job runs, we retrieve marketing data from your connected source platforms and write it to the destination you specified (Google Sheets). This data passes through our servers in memory for the duration of the run and is not stored.
• Billing information: We don't collect or store card numbers. Payments are handled by Stripe; see Payments in section 5. Payment processing is handled entirely by Stripe, and we will not store your credit card number or payment details on our servers.

In the app, the platforms you connect are called sources (earlier, “connections”), and each scheduled transfer of data into a sheet tab is called an import (earlier, a “sync job”).

2. How we store your data

All OAuth tokens are encrypted at rest using Fernet symmetric encryption before being stored in our managed PostgreSQL database. Your password is hashed using bcrypt and is never stored in plaintext. Our database and infrastructure are hosted on DigitalOcean with managed services.

3. How we use your data

We use your data exclusively to provide and maintain the Siphon service:

• Authenticate with your connected platforms (Google Ads, GA4, Meta Ads, Shopify)
• Pull marketing data according to your configured schedules
• Write that data to your specified destinations (Google Sheets)
• Process subscription billing through Stripe, if and when paid subscriptions become available

4. We do not sell your data

We do not sell, rent, trade, or otherwise share your personal information or marketing data with third parties for their own purposes. Your data is yours. We are a pipeline — data flows through us to where you tell it to go.

5. Third-party services

We integrate with the following third-party services to provide our core functionality:

• Google (Google Ads API, GA4 Data API, Google Sheets API) — to pull marketing data and write to destinations
• Meta (Marketing API) — to pull advertising data from Meta Ads
• Shopify (GraphQL Admin API) — to pull store and marketing data
• Cloudflare Turnstile — on the sign-up page and the forgot-password, resend-verification and change-email forms, to check that a sign-up comes from a person rather than an automated script. When that page loads, Turnstile receives your IP address and information about your browser and device, and may store data in your browser (such as cookies or local storage) for this check. Cloudflare processes this to run the check. Siphon receives only a pass or fail result.
• Postmark (postmarkapp.com), which sends our account emails.
• Stripe (stripe.com), which processes our subscription payments.
• DigitalOcean — to host our infrastructure
• Cloudflare — for DNS, CDN, DDoS protection, and website visit statistics (Cloudflare Web Analytics).

Each of these services has their own privacy policies. We encourage you to review them.

To count visits to siphon.to, we use Cloudflare Web Analytics. It gives us totals, such as which pages were visited, the referring site, the browser and operating system, the country, and how quickly pages loaded. It doesn't set cookies on siphon.to, and we don't use it to identify you or for advertising.

Shopify stores. When an agency connects a client's Shopify store, Siphon reads that store's orders: order number, date, totals, subtotals, discounts, currency, and the products, quantities and SKUs ordered. Siphon does not read customers' names, email addresses, phone numbers or postal addresses. Siphon writes this order data only to the Google Sheets the agency chooses and keeps no copy of it. Siphon stores the access tokens Shopify issues for the store, encrypted. When a store owner removes Siphon from their store, Shopify notifies Siphon and Siphon stops reading that store. When Shopify asks Siphon to erase a store's data, Siphon deletes that store's access tokens. Shopify customer data requests and customer erasure requests are acknowledged as Shopify requires; Siphon holds no customer records to return or erase. Data already written to an agency's Google Sheets is controlled by the agency.

Payments. When you start a subscription, you enter your card and billing details on Stripe's checkout page, not on Siphon. We never receive or store your full card number. Stripe handles these details under its own privacy policy (stripe.com/privacy). We store the Stripe reference numbers for your customer record and subscription, your subscription's status, and the price you're on.

6. Google user data

When you connect a Google account, Siphon requests the following OAuth scopes and uses each one only for the purpose stated:

• analytics.readonly — read report data from the Google Analytics 4 properties you select, so it can be delivered to the destination you choose.
• adwords — read report data from the Google Ads accounts you select, so it can be delivered to the destination you choose.
• drive.file — access only the Google Sheets spreadsheets you choose for Siphon to use, so it can write your results to the tab you specify. Siphon cannot see or open any other file in your Google Drive.

Siphon reads only the reporting data your configured jobs request, and writes only to the destination you name. For append jobs, the only spreadsheet content it reads is the tab's header row and date column, which it uses to replace the rows dated inside each run's date range: it writes the new rows, then deletes the older rows with those dates. For replace jobs it reads no spreadsheet content. Where a job is configured to replace rather than append, Siphon clears the sheet tab you named before writing the new results.

We do not use Google user data for advertising, to train machine-learning or artificial-intelligence models, or to build profiles of you or your customers. We do not transfer it to third parties except as required to operate the service or to comply with the law.

Limited Use disclosure. Siphon's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Cookies

We use essential browser session storage only for authentication (session tokens), which your browser clears when you close the tab. We do not use tracking cookies, analytics cookies, or any third-party advertising cookies. The one exception is Cloudflare Turnstile on the sign-up page and the forgot-password, resend-verification and change-email forms, which may set cookies or use browser storage only to run its security check (see section 5).

8. Data retention

• Account data: Retained for the lifetime of your account, and deleted within 30 days of a deletion request (see section 9).
• OAuth tokens: Encrypted at rest and retained for as long as the connection exists. Disconnecting a platform deactivates the connection so that Siphon stops using it, but the encrypted tokens remain in our database until you request account deletion.
• Marketing data: Not retained. It is held in memory only for the duration of a sync run and written directly to your destination.
• Job run state: Each sync job stores the status, error message, and timestamps of its most recent run. These are overwritten on every run and kept for as long as the job exists. We do not keep a separate history of past runs.

To protect accounts, we record sign-in and account events (for example logins, failed logins, signups, email verification, email changes and password resets) with the time, the type of event, and a shortened IP address: the first three parts of an IPv4 address, or the first half of an IPv6 address. We keep these records for 90 days and then delete them. We also keep the time of your most recent login.

Client-count records. To bill per client, we keep a record of how many clients your account had and when that number changed. We keep these records for as long as we need them for billing and accounting.

9. Your rights

You have the right to:

• Access the personal data we hold about you, by request
• Request a copy of your account data and job configurations. There is no self-service export in the app; email us and we will send it to you.
• Request deletion of your account and all associated data, including the stored OAuth tokens. There is no self-service account deletion in the app; email us and we will complete it within 30 days.
• Disconnect any platform at any time from the Connections page. Siphon stops using that connection immediately and attempts to revoke its access with the provider. If that revocation call does not succeed, the connection is still deactivated and unusable by Siphon, and you can revoke our access directly from your Google Account permissions page. If you have connected more than one Google service, a single authorization covers all of them, so disconnecting one leaves that shared Google authorization in place for the others; revoking Siphon's access to Google entirely is done from the same Google Account permissions page. Disconnecting also permanently deletes every sync job that used that connection as a source or a destination.
• Withdraw consent by disconnecting the platform, or by emailing us to close your account

To exercise any of these rights, email us at [email protected].

10. Security

We take reasonable measures to protect your data, including encryption of tokens at rest (Fernet), hashed passwords (bcrypt), HTTPS-only connections, and managed database infrastructure with automated backups. However, no method of electronic storage is 100% secure.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes through a notice on the service. Your continued use of Siphon after changes take effect constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or your data, contact Eversong LLC at [email protected].