Privacy Policy

We collect personal information, including when you…

• Visit our website or request a demo
• Create an account or are invited into a workspace
• Submit our contact form or otherwise correspond with us
• Connect a third-party data source to your workspace
• Provide comments, suggestions, or other input

Types of personal information we collect may include:

• Your name
• Your work email address
• Your company, industry, and role
• Your mailing address, where you provide it
• Account credentials and authentication records
• The contents of messages you send us

We use cookies and similar technologies to receive and store certain types of information whenever you interact with the Services through your computer or mobile device. For example, this may include the pages you visit, which web address you came from, your approximate location derived from your IP address, and the type of browser you are using. We use strictly necessary cookies to keep you signed in and to secure your session. We also use this information for internal reporting and analysis, such as understanding how the Services are used and how they perform.

When you connect a third-party account — such as Google Analytics or Google Tag Manager — we retrieve data from that account on your behalf in order to operate the Services. This is described in detail in the next section.

Intelligence Studio requests the following OAuth scopes when you connect a Google account. Both are read-only. We never request write, edit, or delete access, and we cannot modify anything in your Google account.

• .../auth/analytics.readonly — used with the Google Analytics Data API and the Google Analytics Admin API to list the Google Analytics 4 accounts and properties you have access to, and to read report data for the properties you choose to link.
• .../auth/tagmanager.readonly — used with the Google Tag Manager API to list the Tag Manager accounts, containers, and workspaces you have access to, and to read the tag, trigger, and variable configuration of containers you choose to link.

You grant this access through Google’s standard OAuth consent screen, and you choose which properties and containers are linked to your workspace. Data is only retrieved for the properties and containers you explicitly link.

We use Google user data solely to provide and improve the user-facing features of the Services that you asked for. Specifically, we use it to:

• Display traffic, engagement, conversion, and audience reporting in your workspace
• Generate written insights, summaries, alerts, and recommendations about your performance
• Answer questions you ask about your own analytics data in our chat feature
• Produce audits, scheduled reports, and presentations you request
• Detect measurement and tag configuration problems in your Google Tag Manager setup

We do not use Google user data for advertising, we do not sell it, and we do not transfer it to advertising platforms, data brokers, or information resellers. We do not use it to determine credit-worthiness or for lending purposes.

Several Intelligence Studio features are AI-assisted. To generate insights, summaries, audits, and chat answers, we send the relevant portions of your Google Analytics and Google Tag Manager data to our AI service provider, Anthropic, through the Anthropic API, which processes it and returns generated text to your workspace.

This processing happens only to execute a user-facing feature you have requested, and the output is returned only to your workspace. Anthropic acts as our service provider and is contractually prohibited from using data submitted through the Anthropic API to train its models.

• OAuth refresh tokens are encrypted at rest using AES-256-GCM before they are written to our database. They are decrypted only in memory, at the moment an authorized API call is made on your behalf.
• We store an OAuth refresh token, not your Google password. We never see, request, or store your Google account password.
• Report data and configuration listings retrieved from Google are cached in our database to reduce API load and improve performance, and are scoped to the workspace that authorized the connection.
• All data is transmitted over TLS and stored with hosted infrastructure providers that maintain physical, administrative, and technical safeguards.
• Access is restricted by workspace. Members of one workspace cannot access data belonging to another.

We share Google user data only in these limited circumstances, and never for advertising:

• With other authorized members of your own workspace, as you have configured it
• With the infrastructure and AI service providers who process it on our behalf in order to run the Services, under contracts that restrict their use of it
• Where necessary to comply with applicable law, or in response to a valid legal process
• To investigate and prevent fraud, abuse, or a security incident, or to protect the rights, property, or safety of our users or the public
• In connection with a merger, acquisition, or sale of assets — with your explicit prior consent for the transfer of Google user data

Human access to your Google user data is limited. Our personnel do not read it except where you have given us permission — for example when you ask for support with a specific report — or where it is necessary for security purposes, to comply with applicable law, or where the data has been aggregated and anonymized for internal operations.

We retain Google user data only as long as needed to provide the Services to you. You may revoke our access at any time, and you can do so in two ways:

• In Intelligence Studio, open the Connections page and choose Disconnect on the Google connection. This immediately deletes the stored refresh token and the cached Google data associated with that connection from our database.
• In your Google Account, visit myaccount.google.com/permissions and remove access for Intelligence Studio. This revokes our token at Google, after which we can no longer retrieve any data from your account.

You may also email us at hello@cargointelligencestudio.com to request deletion of your Google user data, and we will delete it. When you close your account or terminate your subscription, we delete or de-identify Google user data associated with your workspace within 90 days, except where we are required to retain records for legal compliance.

We share personal information we collect within the Cargo group, which includes Cargo’s corporate parent (Cargo, LLC), subsidiaries, and affiliates. When your personal information is shared within the Cargo group, it will still be used and protected according to this Privacy Policy.

When needed in order to perform their services, we may share personal information with companies that provide hosting, database, email, AI processing, error monitoring, and similar support services. These companies are not authorized to use the personal information we share with them, or that they collect on our behalf, for any other purpose. They are required to appropriately protect the personal information and to comply with applicable privacy laws.

Cargo and the Cargo group have international offices and service providers. Accordingly, your personal information may be processed or stored outside your country, including in the United States and other countries. In accordance with the laws of those countries, in certain circumstances your personal information may be accessible by foreign law enforcement, regulatory bodies, or other authorities. For more information about our use of foreign service providers, please contact us as described below.

We may disclose personal information you provide to us when we believe disclosure is appropriate to comply with the law; in response to a search warrant or other legally valid inquiry or order; to enforce or apply applicable terms and conditions and other agreements; or to protect the rights, property, health, or safety of our company, our customers, our team members, or others.

Your personal information may be disclosed or transferred to an affiliate or third party in the event of a proposed or actual purchase, sale, merger, transfer, reorganization, or similar transaction involving all or part of Cargo’s business or assets. Google user data will only be transferred in such a transaction with your explicit prior consent.

We will only collect, use, and share your personal information with your consent, except where otherwise permitted or required by law. The method of consent will be appropriate for the type of personal information involved and the purposes for which it will be collected, used, or shared.

You have choices about what marketing materials you receive. You can unsubscribe from promotional emails using the opt-out link included in each email, or contact us to opt out. We will still send you transactional messages about your account, such as security notices and billing notifications.

You can disconnect any third-party data source at any time from the Connections page in the application, or by revoking access from within that provider’s own security settings.

Your web browser’s help function should contain instructions to set your computer to accept all cookies, to notify you when a cookie is issued, or to decline cookies. Note that if you decline cookies, you will still be able to browse our website, but you will not be able to sign in to the application, because a session cookie is required to keep you authenticated.

We maintain administrative, technical, and physical safeguards to protect your personal information against loss, theft, and unauthorized access. These safeguards are appropriate for the sensitivity of the personal information involved, and include encryption in transit, encryption of third-party credentials at rest, and workspace-level access controls.

“Phishing” is a scam designed to steal your personal information. If you receive an email that looks like it is from us asking you for your personal information, do not respond. We will never request your password, user name, API keys, or other sensitive personal information through email.

Your personal information is kept only as long as needed to fulfill the reasonable business purposes for which it was collected, or for legal compliance. When no longer needed for these purposes, your personal information is either appropriately destroyed or de-identified by removing any information that could identify you.