ClimbMetricsSign in

Privacy Policy

Last updated: 14 August 2026

1. Who we are

ClimbMetrics ("we", "us") is operated by a sole trader based in the United Kingdom and is the data controller for the personal data described in this policy. For any privacy questions or to exercise your rights, contact us at support@climbmetrics.co.uk.

2. What data we collect

We collect and process the following:

  • Account data: your email address and business name.
  • Service data: the website URL(s) you add, keywords you track, audit results, competitors you track, and AI Visibility topics you track.
  • Payment data: processed securely by Stripe. We do not see or store your full card details — Stripe provides us only with limited information such as your subscription status and the last four digits of your card.
  • Usage data: basic analytics events and technical logs (e.g. errors) used to operate and improve the Service.

3. How and why we use your data (legal bases)

  • To provide the Service (performance of a contract): running audits, tracking rankings, generating reports and recommendations, and processing your subscription.
  • To communicate with you (contract / legitimate interests): transactional emails such as trial reminders, payment notices, and monthly reports.
  • To improve and secure the Service (legitimate interests): analytics, error monitoring, and fraud/bot prevention.
  • To comply with legal obligations: for example, tax and accounting records.

4. AI processing

Some features use AI to generate SEO recommendations and analyse your site. To do this, information you provide (such as your website URL and business details) is sent to our AI providers — OpenAI for AI-generated recommendations, and, if you use AI Visibility Tracking (Pro+), Perplexity — for processing. This data is used to generate your results and is not used by these providers to train their AI models.

4a. Connecting your Google account

If you choose to connect Google Search Console or Google Business Profile, you'll be asked to sign in with Google and grant permission for us to access the relevant data (read-only for Search Console; your Business Profile data for Business Profile). We store a secure access token so we can fetch this data on your behalf on an ongoing basis. You can disconnect at any time from Settings, which removes our access and deletes the stored token. We only request the minimum access needed for the features you choose to use.

5. Who we share data with (processors)

We share data only with service providers who process it on our behalf to run the Service:

  • Stripe — payment processing
  • Supabase — database, authentication, and storage
  • Resend — sending transactional emails
  • OpenAI — AI-generated recommendations
  • Perplexity — AI Visibility Tracking (checking whether your business is mentioned in AI search results, Pro+ only)
  • Google — if you connect Google Search Console or Google Business Profile, we access data from your account via Google's APIs, only for the features you've connected
  • Cloudflare — bot protection at sign-in
  • Firecrawl — website crawling for audits
  • Railway — application hosting

We do not sell your personal data.

6. International transfers

Some of our providers are based outside the UK (for example, in the United States). Where data is transferred internationally, we rely on appropriate safeguards such as the UK's International Data Transfer Agreement or equivalent contractual protections offered by these providers.

7. How long we keep your data

We keep your account and service data for as long as your account is active. If you close your account, we delete or anonymise your personal data within a reasonable period, subject to short-term backups and any records we must retain for legal or accounting purposes.

8. Your rights

Under UK GDPR you have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. You can exercise most of these from your account Settings, or by emailing us. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We use encryption in transit and at rest, row-level access controls, and reputable infrastructure providers to protect your data. No system is completely secure, but we take reasonable measures to protect your information.

10. Cookies

We use only essential cookies and similar technologies needed to sign you in and keep the Service working. See our Cookie Policy for details.

11. Changes

We may update this policy from time to time. Material changes will be notified by email or in-app, and the "last updated" date above will change.

12. Contact

Questions about your privacy or this policy: support@climbmetrics.co.uk.