Privacy Policy

Last updated: February 9, 2026

1. Who We Are

SiteMetrics is a product of Staq Tools (“we,” “us,” “our”). We provide a GBHours monitoring dashboard for Appwrite Sites users. Our contact email is support@staqtools.net.

2. Data We Collect

We collect the minimum data needed to provide the service:

  • Account information: Email address and name (via email/password signup or Google OAuth).
  • Appwrite credentials: Your Appwrite Server API key and Project ID, which you provide voluntarily to connect your project.
  • Usage data: GBHours, request counts, deployment metrics, and route-level performance data fetched from your Appwrite project via its API.
  • Payment information: Subscription status and PayPal subscription ID. We do not store credit card numbers or PayPal account details—all payment processing is handled by PayPal.

3. How We Use Your Data

  • To authenticate you and manage your account.
  • To fetch usage data from your Appwrite project and display it on your dashboard.
  • To process subscription payments through PayPal.
  • To send transactional emails (account verification, password resets, billing notifications).
  • We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Appwrite API Key Security

Your Appwrite API key is encrypted at rest in our database. We use your key solely to fetch usage data from your Appwrite project on your behalf. We never share your key with third parties. You can disconnect your project and delete your stored key at any time from the Settings page.

5. Third-Party Services

We use the following third-party services to operate SiteMetrics:

  • Supabase — Authentication and database hosting (stores account data, encrypted API keys).
  • PayPal — Subscription payment processing.
  • Vercel — Application hosting and deployment.
  • Appwrite — We connect to your Appwrite project using the API key you provide. Appwrite’s own privacy policy governs data stored on their platform.

6. Cookies

We use essential cookies only for authentication session management (provided by Supabase Auth). We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

7. Data Retention

  • Account data is retained for as long as your account is active.
  • Usage data is retained for the duration of your subscription.
  • Upon account deletion, all personal data and stored API keys are permanently deleted within 30 days.
  • PayPal may retain transaction records independently per their own retention policy.

8. Your Rights

Depending on your jurisdiction (including under GDPR and CCPA), you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate personal data.
  • Delete your personal data (“right to be forgotten”). You can delete your account from the Settings page.
  • Export your data in a portable format.
  • Object to processing of your data.

To exercise any of these rights, contact us at support@staqtools.net. We will respond within 30 days.

9. Data Security

We implement industry-standard security measures including encrypted data storage, HTTPS-only communication, Row Level Security on our database, secure authentication, and Content Security Policy headers. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Children’s Privacy

SiteMetrics is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page with a new “Last updated” date. Continued use of the service after changes constitutes acceptance.

12. Contact

For privacy-related questions or concerns, contact us at support@staqtools.net.