Privacy Policy

Last updated: June 16, 2026

1. Introduction

Insights ("the App") is a business analytics and growth planning tool operated by Rural Mountain Media LLC ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect information when you use our application.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, and securely hashed password. If you use the magic link login option, we store a temporary token associated with your email.

Google Analytics Data: With your explicit consent, we access read-only Google Analytics data (sessions, users, traffic sources) for your verified properties via the Google Analytics Data API.

Google Search Console Data: With your explicit consent, we access read-only Search Console data (clicks, impressions, queries, pages) for your verified properties via the Google Search Console API.

Facebook Page Data: With your authorization, we access public page metrics (followers, reach, engagement, post performance) via the Facebook Graph API.

Usage Data: We store checklist progress, AI-generated recommendations, referral tracking data, and scheduling preferences that you create within the App.

3. How We Use Your Information

We use the collected information solely to:

  • Display your analytics data on your personalized dashboard
  • Generate AI-powered growth recommendations based on your business metrics
  • Track progress on your growth plan and quick-win checklist
  • Send scheduled email reports (only when you explicitly enable them)
  • Manage referral tracking links you create

4. Data Storage and Security

Your data is stored securely on encrypted servers. Integration tokens (Google, Facebook) are stored server-side and are never exposed to the browser. We use HTTPS for all data transmission. Passwords are hashed using bcrypt and are never stored in plain text. Access tokens are refreshed automatically and old tokens are overwritten.

5. Third-Party Services

The App integrates with the following third-party services, each governed by their own privacy policies:

6. Google API Services User Data Policy

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only use Google data to provide and improve the App's features as described in this policy
  • We do not transfer Google user data to third parties except as necessary to provide the App
  • We do not use Google user data for advertising purposes
  • We do not allow humans to read Google user data unless required for security purposes, to comply with law, or with your explicit consent

7. Data Retention and Deletion

We retain your data for as long as your account is active. You may request deletion of your data at any time by contacting us. Upon disconnecting a Google or Facebook integration, the associated access tokens are immediately removed from our servers. Cached analytics data is refreshed on each visit and not permanently archived.

8. Data Sharing

We do not sell, rent, or share your personal information or analytics data with any third parties. Your data is used exclusively to power your own dashboard and is not accessible to other users.

9. Your Privacy Concerns, Answered

Handing any part of your business over to a piece of software is a leap of trust, and you're right to ask hard questions first. Here are the worries I hear most — answered straight.

"If I connect my accounts, can you see everything?" No. For Google Analytics and Search Console, I only ever ask for read-only access — I can look at your traffic and search numbers, and that's all. I can't change your settings, post anything, send email, touch your ad spend, or reach any other corner of your Google account. Your Facebook page is connected through Facebook's own Business settings, where you stay the owner and can revoke my manager access any time.

"Is my login password safe?" I never see it. When you connect Google or Facebook, you sign in on their page, not mine, and they hand back a limited access token — never your password. That token lives server-side, encrypted, and is never exposed to your browser.

"Will a tracking tag hurt or expose my website?" No. A Google tag is the same standard snippet nearly every business site already runs. It can't harm your site, slow it down in any way folks would notice, or give anyone control of it — it only lets Analytics count visits. Take it out any time and there's no trace left behind.

"Are you reading my data or selling it?" No human reads your data except where the law requires it, for a genuine security need, or with your explicit say-so (see Section 6). I never sell it, rent it, share it with third parties, or use it for advertising — it powers your own dashboard and nothing else.

"What if I change my mind?" You're never locked in. Disconnect any integration with one click, and the access token is wiped from my servers immediately. Delete your account and your data is purged for good. The door is always open both ways.

10. Your Rights

You have the right to:

  • Access the data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Disconnect any third-party integration at any time
  • Revoke Google access via your Google Account permissions page

11. Contact

For privacy-related questions or data requests, contact us at: faye@ruralmountainmedia.com

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.