Privacy Policy

1. Introduction

Welcome to 1ClickReport, a service operated by AI Labs LLC, a limited liability company registered in Sharjah Media City Free Zone, United Arab Emirates (License No. 2646422.01) ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By accessing or using 1ClickReport, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide to us when you:

• Register for an account
• Join our waitlist
• Subscribe to our services
• Contact us for support
• Participate in surveys or promotions

This information may include:

• Name and contact information (email address, phone number)
• Account credentials (username, password)
• Billing information (processed securely through our PCI-DSS compliant payment processor)
• Communication preferences

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing actions:

• IP address and browser type
• Operating system and device information
• Pages visited and time spent on pages
• Referring website addresses
• Clickstream data

2.3 Third-Party Platform Data

When you connect third-party platforms to 1ClickReport (Google Analytics, Meta Ads, Google Ads, Google Search Console, Shopify, Stripe), we access and process:

• Analytics, advertising, and revenue data authorized by you
• OAuth tokens for secure API access
• Platform-specific account identifiers

Important: We only access the specific data you explicitly authorize through OAuth permissions. We never sell or share your platform data with third parties.

2.4 AI Assistant Integration (MCP)

1ClickReport operates a Model Context Protocol (MCP) server that allows AI assistants such as Anthropic's Claude to access your authorized marketing data on your behalf. When you submit a prompt in Claude (or another MCP-compatible AI client) that requires data from your connected accounts, our MCP server fetches that data using your OAuth credentials, returns it to the AI assistant for use in your conversation, and does not retain the response server-side. We log only the tool name, account identifier, timestamp, and outcome (success/error) for security and rate-limiting purposes — not the data content itself.

3. How We Use Your Information

We use your information for the following purposes:

• To provide and maintain our service: Creating dashboards, processing data, and ensuring functionality
• To manage your account: Registration, authentication, and account management
• To process payments: Billing and subscription management through our PCI-DSS compliant payment processor
• To communicate with you: Service updates, customer support, and marketing communications (with your consent)
• To improve our services: Analytics, bug fixes, and feature development
• To ensure security: Fraud prevention and platform security
• To comply with legal obligations: Tax reporting, legal requirements, and dispute resolution

4. Data Storage and Security

4.1 Security Measures

We implement industry-standard security measures to protect your information:

• SSL/TLS encryption for data in transit
• Encrypted storage for sensitive data at rest
• OAuth 2.0 for secure third-party authentication
• Regular security audits and updates
• Access controls and authentication measures
• Secure payment processing through a PCI-DSS Level 1 compliant provider

4.2 Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information within 90 days.

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

5.1 Subprocessors and Service Providers

We engage the following trusted subprocessors who process limited customer data on our behalf to deliver the Service. Each is bound by contractual confidentiality and security obligations:

• Stripe / Paddle (Ireland / USA) — payment processing and subscription billing
• Google LLC (USA) — OAuth authentication and access to user-authorized analytics APIs (GA4, Google Ads, Search Console)
• Meta Platforms, Inc. (USA) — OAuth authentication and Meta Ads API access
• Neon / Supabase (USA / EU) — managed PostgreSQL database hosting
• Railway / cloud infrastructure provider (USA) — application hosting
• Resend (USA) and Microsoft 365 (USA / EU) — transactional and lifecycle email delivery
• Microsoft Clarity (USA) — anonymized session analytics and product usage insights
• Sentry (USA) — error monitoring and application telemetry
• DeepSeek (China) — AI inference for the AI Analyst. Your question and the account data needed to answer it are sent for processing and are not used to train their models.
• OpenAI (USA) — image understanding, used when you attach a screenshot or ask for a visual creative review
• Cloudflare R2 (USA / EU) — storage for images you attach and screenshots captured by Tracking Check

We do not sell, rent, or share your personal data with third parties for their own marketing purposes. An up-to-date list of subprocessors is available on request at [email protected].

5.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

• Right to Access: Request a copy of your personal information
• Right to Rectification: Request correction of inaccurate information
• Right to Erasure: Request deletion of your personal information
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to our processing of your personal information
• Right to Withdraw Consent: Withdraw consent for data processing at any time

To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for basic functionality (authentication, security)
• Analytics Cookies: Help us understand how visitors use our website
• Preference Cookies: Remember your settings and preferences

7.1 Analytics Services

We use the following third-party analytics services to understand and improve user experience:

• Google Analytics: Tracks website traffic, user behavior, and conversion metrics. Learn more at Google's Privacy Policy.
• Microsoft Clarity: Provides session recordings, heatmaps, and user behavior insights to help us improve website usability. Clarity does not collect personally identifiable information. Learn more at Microsoft's Privacy Statement.

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our service. To opt out of Google Analytics, visit the Google Analytics Opt-out Browser Add-on.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for material changes)

We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. GDPR Compliance (For EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• We process your data based on legal grounds (consent, contract, legal obligation, or legitimate interest)
• You have the right to lodge a complaint with a supervisory authority
• We will notify you of data breaches when required by law
• You can request a Data Protection Impact Assessment (DPIA) if applicable

14. CCPA Compliance (For California Users)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect
• Right to know if we sell or disclose your personal information
• Right to opt-out of the sale of personal information (we do not sell your information)
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

To exercise these rights, contact us at [email protected].