Privacy
Privacy Policy
Plain language, the whole policy, one page.
Who we are
Saymetry (saymetry.com) is operated by Blackwood Management LLC, 400 Rella Blvd Ste. 207-1153, Montebello, NY 10901, USA. For anything in this policy, write to hello@saymetry.com. Under GDPR, Blackwood Management LLC is the data controller for the personal data described here.
What we collect
When you buy a scan: your company name, website, market description, email, and the intake you type. When you use the dashboard: your email, a salted password hash if you set one, and the state of your action queue. When you contact us: your email and what you write. That is the list.
What we do with it
We run the product you paid for, email you its results, and answer you when you write. We do not sell data, share it with advertisers, or use your scan results for anything except delivering them to you. Aggregated, non-identifying statistics (like average visibility across all scans in an industry) may inform our published research; nothing identifying any customer is ever published without written consent.
Cookies
One functional cookie (your dashboard session, sm_session, set only when you log in) and Google Analytics measurement cookies (_ga), which we use solely to understand how the site is used. GA4 is configured without advertising features; no advertising cookies, no cross-site tracking, and analytics data is never joined with your account data.
Where data lives and who processes it
Supabase (EU-hosted database), Vercel (hosting), Stripe (payments; we never see card numbers), Resend (email), and the AI engine providers queried during scans (OpenAI, Anthropic, Google, Perplexity, xAI, OpenRouter), who receive buyer questions only, never your account data. Full list with roles on our Trust page.
How long we keep it
Scan results and order records: as long as your account exists, because tracking trends is the product. Login tokens: 20 minutes. Emailed free-report leads: 12 months. Backups age out on our database provider’s standard schedule.
How we protect your data
Everything moves over HTTPS (TLS 1.2 or better); we serve nothing over plain HTTP. Data at rest is encrypted by our database and hosting providers, and the most sensitive item we hold — the Google refresh token that authorises read-only access to your Analytics and Search Console — is separately encrypted with AES-256-GCM using a key held only in our server environment, so it is unreadable even to someone holding a copy of the database. Every table has row-level security enabled and is reachable only with a service key that lives on the server and is never sent to a browser. Dashboard passwords are stored as salted hashes, never as text. Access to production data is limited to the operators who run the service and is used only to deliver and support the product. If you disconnect Google, the stored token is deleted outright rather than marked inactive.
Google user data
If you connect Google, we request exactly two read-only scopes and nothing else: analytics.readonly and webmasters.readonly. We use that access for one purpose — to show your own Analytics and Search Console figures back to you, beside your visibility data, inside your own dashboard. Saymetry’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell it, transfer it to anyone except the hosting and database providers needed to run the service, use it for advertising, or use it to train any AI model. No human reads it except where you ask us to for support, where it is needed for a security investigation, or where the law requires it. Disconnect at any time from the dashboard: the token is deleted and access ends immediately.
Your rights
Export or delete everything tied to your email at any time: write to hello@saymetry.com and it is done within 30 days, confirmed in writing. EU/EEA customers have the full set of GDPR rights (access, rectification, erasure, portability, objection); we honor the same rights for everyone regardless of geography.
Changes
If this policy changes materially, existing customers get an email before the change takes effect. Last updated: 23 August 2026.