Privacy Policy

GA3 helps you read and ask questions about your own Google Analytics data. We request read-only access, we never modify your analytics, we never sell your data, and we never use it to train any AI model. That’s the whole spirit of this page; the rest is detail.

GA3 (“GA3”, “we”, “us”) is an independent analytics tool available at ga3.ai. We are not affiliated with, endorsed by, or sponsored by Google LLC. For any privacy question, email privacy@ga3.ai.

• Your Google account basics — name and email address, used only to sign you in and identify your workspace.
• Your Google Analytics data (read-only) — reports, metrics and dimensions for the GA4 properties you choose to connect, via the analytics.readonly scope. We cannot create, edit or delete anything in your Analytics account.
• Publicly available context — to make insights specific to your business, GA3 reads publicly accessible pages of your website, your competitors and your industry (the kind of pages anyone can open in a browser). We do not access private or authenticated pages.

GA3’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically, data obtained from Google Analytics is used only to provide and improve the in-product features you requested; it is not transferred to others except as needed to provide those features, to comply with applicable law, or as part of a merger or acquisition; it is not used for advertising; and it is not used to train, and is not read by humans except where you give explicit consent, for security, or to comply with law.

• To display your analytics dashboards and real-time view.
• To answer the questions you ask, in natural language.
• To generate your daily briefings and proactive alerts.
• To build the business context that makes those insights specific to you.

We do not use your Google Analytics data for advertising, and we do not sell it to anyone, ever.

To turn your questions into answers, relevant portions of your analytics data and business context are sent to our AI provider (Anthropic) and our embeddings provider (Voyage AI) at the moment you ask. These providers process the data to return a response and, per their terms, do not use it to train their models. You can read more at Anthropic and Voyage AI.

We rely on a small set of vetted providers to run GA3:

• Google — sign-in and Analytics data source.
• Anthropic — language model that powers answers and briefings.
• Voyage AI — text embeddings used for search and context.
• ScrapingDog — fetches publicly available web pages for business context.
• Railway — application hosting and storage.

We store your account basics, the properties you connect, your conversation history, and the business context we build for you, so the product works between visits. Your raw Google Analytics reports are fetched on demand to answer your questions and are not warehoused long-term. You can delete your workspace and all associated data at any time by emailing privacy@ga3.ai; we action deletion requests within 30 days.

You are in control. You can revoke GA3’s access to your Google account at any time from your Google Account permissions. Revoking access immediately stops GA3 from reading any further data.

Access tokens and your data are transmitted over encrypted connections and stored on access-controlled infrastructure. No system is perfectly secure, but we keep the attack surface small: read-only scopes, minimal retention, and no resale.

If we make material changes, we’ll update the date at the top and, where appropriate, notify you in-product. Continued use after a change means you accept the updated policy.

Questions, concerns, or deletion requests: privacy@ga3.ai.