This Privacy Policy explains what information CPA Analytics ("we," "us," "our") collects when you use our service, how we use it, and the choices you have. It applies to organizations that register for an account and to individual users who sign in to use the service.
When you register, we collect your organization name, address, primary contact email, phone number, and billing information. For each user account we collect name, email, username, optional phone number, and an encrypted password hash. We never store passwords in plain text.
The service receives operational data from Mutha Goose devices and their attached machines that you or your organization have registered. This includes meter readings, transaction events, timestamps, device identifiers, and machine identifiers. Telemetry does not include personally identifiable information about end customers of the machines.
Subscription payments are processed by Stripe. We do not store full card numbers; Stripe retains the card and returns a reference token we store to charge your subscription. See Stripe's privacy policy at stripe.com/privacy.
We collect standard server logs including IP address, browser user agent, pages viewed, timestamps, and errors. We use cookies to keep you signed in and to remember preferences. We do not use third-party advertising cookies.
When you submit a support ticket or reply to one, we retain the subject, body, and metadata (status, priority, who it was assigned to). Agents may add internal notes that are not visible to you.
We do not sell personal information. We share information only with:
Account and billing records are retained for the life of your subscription and for a reasonable period thereafter to comply with tax, accounting, and legal obligations. Device telemetry is retained according to your plan. Support tickets and replies are retained for historical reference. Deleted records are soft-deleted in our database; we purge backups on a rolling schedule.
We use industry-standard safeguards: encrypted transport (HTTPS/TLS), hashed passwords, role-based access controls, session timeouts, CSRF protection, and audit logging. No system is perfectly secure; please use a strong password and do not share it.
The service is intended for business use. We do not knowingly collect personal information from children under 13.
We operate in the United States. If you access the service from outside the US, you understand that your information will be transferred to and processed in the US.
We may update this policy from time to time. Material changes will be posted here with a new effective date. Continued use of the service after changes become effective constitutes acceptance of the updated policy.
Questions about this policy? Contact CPA Analytics support through the in-app support page, or by email at the address listed in your account.