Last updated: August 20, 2026
ReportStrat is operated by 9533-1476 Québec inc., Saint-Augustin-de-Desmaures, Québec, Canada. This policy explains what we collect, why, and what we will never do with it. Questions and privacy requests: privacy@reportstrat.com. The person responsible for the protection of personal information (Québec Law 25) is Christian Gomez, reachable at the same address.
Account data: your name, email and password (hashed), and your agency branding (logo, colors). Connected-platform data: when you connect an advertising or analytics account (Meta Ads, Google Analytics, Google Ads, Shopify, Klaviyo, Stripe), we store the OAuth tokens or API keys you authorize and retrieve performance data only — campaign metrics, spend, traffic, orders and revenue aggregates — to build your dashboards and reports. All connections are read-only: ReportStrat cannot create, modify or delete anything in a connected account.
We use connected-platform data solely to display your dashboards, compute aggregates, and generate the reports and recommendations you request — including summaries written with the help of AI models. Data sent to our AI provider is limited to aggregated performance metrics, is not used to train their models, and is never sold or shared with third parties for advertising.
Google user data: ReportStrat's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the reporting features you see, is never used for advertising, and is never sold.
Data is stored with our processors (Supabase — database and authentication, Vercel — hosting, Stripe — billing) using encryption in transit and at rest. We keep connected-platform data only while the connection is active: revoking a connection deletes its tokens immediately and its cached metrics within 30 days. Deleting your account deletes all associated data within 30 days. See data deletion instructions.
You may access, correct, export or delete your personal information, and withdraw consent, by writing to privacy@reportstrat.com. We respond within 30 days. You may complain to the Commission d'accès à l'information du Québec. We use only essential cookies (authentication); no advertising trackers.