Privacy Policy

1. Introduction

Golden Analytics, Inc. ("the Company," "we," "us," or "our"), located at 10400 Northeast Fourth Street, Suite 1400, Bellevue, WA 98004, operates goldenanaltyics.com and the Golden Analytics platform (collectively, the "Service"). Golden Analytics is a self-serve business intelligence and metric attribution product that connects to your organization's data warehouse and delivers automated root-cause analysis for metric changes in plain language.

This Privacy Policy explains what information the Company collects when you visit our website or use the Golden Analytics platform, how we use that information, and the choices available to you. Because the Company processes warehouse connection credentials, query metadata, and usage telemetry as part of delivering the Service, we have written this policy to be specific about exactly what flows where.

Questions or requests can be directed to [email protected].

2. Information We Collect

2.1 Account and Contact Information

When you register for a Golden Analytics account or contact us, we collect:

• Name, work email address, and (if provided) phone number;
• Company name, job title, and the type of analytics work you do;
• Billing details (handled by our payment processor; we do not store raw card numbers);
• The content of any messages you send to our support team.

2.2 Warehouse Connection Metadata

To connect Golden Analytics to your data warehouse (Snowflake, BigQuery, Redshift, Databricks, or dbt), you provide connection credentials such as a service account key or IAM role ARN. We store these credentials in encrypted form solely to execute queries on your behalf. We do not copy your underlying warehouse data to our servers. Query execution occurs within your cloud environment through read-only access; the Company receives only the structured query results needed to generate metric attribution outputs.

2.3 Platform Usage and Query Data

As you use the Golden Analytics platform, we collect:

• The natural-language questions and attribution queries you submit;
• The metric names and dimension labels that appear in query results (not the underlying row-level data from your warehouse);
• Feature interaction logs: which parts of the attribution UI you use, drill-down paths, and alert configurations;
• Session identifiers, timestamps, and error reports that help us diagnose and improve the Service.

We do not use your query content or metric attribution results to train machine learning models without your explicit written consent.

2.4 Website Visitor Data

When you visit goldenanaltyics.com, we automatically collect limited technical information:

• IP address and approximate location (city/region level);
• Browser type, operating system, device class;
• Pages visited, referring URLs, time on page;
• Cookie and similar identifiers (see Section 5 and our Cookie Policy).

2.5 Children's Data

goldenanaltyics.com and the Golden Analytics platform are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it promptly.

3. How We Use Information

The Company uses collected information to:

• Provision and operate the Golden Analytics platform, including executing warehouse queries, generating metric attribution outputs, and delivering anomaly alerts and stakeholder digests;
• Authenticate users and enforce account-level access controls (including SSO and SAML on Enterprise plans);
• Respond to support requests and communicate about your account;
• Improve the attribution algorithms and platform performance based on aggregate usage patterns;
• Send product update notifications and, where you have opted in, marketing communications about new features;
• Detect, investigate, and prevent unauthorized access or abuse of the Service;
• Comply with legal obligations applicable to our business.

We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see your state's section below.

4. Sharing of Information

The Company shares personal information only with:

• Infrastructure and service providers (cloud hosting, email delivery, payment processing, error monitoring) acting on our behalf under contractual confidentiality obligations;
• Authorities, when required by valid legal process or to protect the rights, safety, or property of the Company or others;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy continuing to govern the transferred data.

We do not sell personal information to third parties. Warehouse connection credentials and metric query data are never shared with third parties outside of the technical infrastructure required to deliver your query results.

5. Cookies and Tracking

We use cookies and similar technologies to keep you signed in, remember platform preferences, and measure usage patterns on goldenanaltyics.com. For details on what cookies we set and your choices, see our Cookie Policy.

6. Data Retention

We retain personal and account information for as long as your account is active and for a reasonable period after account closure to handle support requests, resolve disputes, and comply with legal obligations. Specifically:

• Active account data (profile, connection credentials, query history) is retained for the duration of the subscription plus 60 days after account closure;
• Aggregated usage metrics are retained indefinitely in de-identified form;
• Website access logs are retained 90 days, then purged;
• Inactive marketing-list contacts who have not engaged with any communication are purged after 24 months.

You may request earlier deletion by contacting [email protected].

7. Security

We protect the personal information and credentials entrusted to us with administrative, technical, and physical safeguards, including TLS encryption in transit, AES-256 encryption at rest for warehouse credentials, role-based access controls, and periodic security reviews. No system is perfectly secure. We cannot guarantee absolute security, and we encourage you to use strong, unique passwords for your account.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access to, correction of, deletion of, and the ability to limit certain processing of your personal information. To make a request, email [email protected] with enough detail to verify your identity. The Company will respond within the timeframe required by applicable law.

9. Washington State Residents

Washington does not currently have a comprehensive consumer privacy statute that broadly applies to a company at our stage and scale. As a matter of policy, the Company extends the following baseline rights to all U.S. residents regardless of state of residence.

9.1 Baseline Rights

• Right to Know: request the categories of personal information we have collected about you.
• Right to Delete: request deletion of personal information you have provided.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Marketing: unsubscribe from marketing emails via the unsubscribe link in any marketing message or by emailing us.

9.2 How to Exercise

Email [email protected] with a description of your request and enough detail for us to verify your identity. The Company responds within 45 days.

9.3 Sector-Specific Rights

If you are protected by federal sector laws (such as HIPAA, GLBA, or FERPA), those laws may give you additional rights with respect to data covered by them. Golden Analytics does not operate as a HIPAA covered entity or business associate; customers who process health-related data in their warehouse remain responsible for their own compliance obligations.

9.4 California Visitors

If you are a California resident, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. The Company does not sell personal information and does not "share" personal information for cross-context behavioral advertising.

To submit a CCPA / CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

The Company may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date at the top of this page and, where appropriate, a notice within the platform.

11. Contact

Questions, requests, or complaints about this Privacy Policy can be sent to: