Privacy policy

Data controller

Webimpacto Consulting, SL, with tax ID B45814670 and registered office at C/ Plasencia 1-17, Nave 7, 28935 Móstoles (Madrid), España, is the controller of the personal data processed on wimmetrics.com and in the WIM Metrics service.

For any data protection matter, write to us at privacidad@webimpacto.es.

What data we process and why

Access request form: name, work email, company, type of company, your store platform and the message you write, together with the address and title of the page (without parameters) and the consent text you accept. When you submit it, your browser connects directly to HubSpot, which also receives your IP address and technical browser data. We use them to handle your request and contact you about access to the beta.

Browsing: this website does not use tracking cookies or analytics. Our hosting provider, Cloudflare, processes technical data such as the IP address to serve the website and protect it against attacks.

WIM Metrics service: if you sign up, we process the data of your organisation’s users (name, email and login credentials) and the data of the platforms you connect, under the contract and, where applicable, the data processing agreement.

Legal basis

Access request form: your consent, which you can withdraw at any time without affecting the processing carried out before.

Technical browsing data: our legitimate interest in keeping the website available and secure.

WIM Metrics service: the performance of the contract.

Processors and international transfers

Hetzner Online GmbH: servers, storage and backups of the WIM Metrics service, in the European Union.

Cloudflare, Inc.: network and security of this website and the service; it processes technical data such as the IP address to serve them and protect them from attacks.

Anthropic, PBC: the AI models (Claude) that generate the answers of the assistant, through its API. It may process the data outside the European Union and only receives the aggregated figures each answer needs, never data of your buyers.

HubSpot, Inc.: receives the access request form data to manage sales contacts.

We do not sell your data or share it with third parties for advertising.

Data from connected platforms (Google and Meta)

If you connect a platform, WIM Metrics accesses it with your authorisation (OAuth) and only with the permissions it needs. We only read: we do not create or change campaigns, properties, products or settings in any of your accounts.

Google: we read Google Analytics 4 (analytics.readonly), Search Console (webmasters.readonly), Google Ads (adwords), Merchant Center (content) and the Google Sheets spreadsheets you pick with the Google picker (drive.file, which only gives access to those sheets). This is performance data: sessions, conversions, clicks, impressions, positions, spend, conversion value and product status.

Meta: with the ads_read permission we read the performance of your Facebook and Instagram ad accounts: spend, impressions, clicks, purchases and value by campaign, ad set and ad.

What for: only to show it to you within the service, to you and the people of your organisation with access to the project, in dashboards, reports, exports and answers of the assistant. To answer, the assistant sends the aggregated figures it needs to the AI models described above. If you connect your Claude account through the MCP connector, Claude queries your data on your behalf and under the terms of your Anthropic account.

WIM Metrics’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. So: we only use it to provide or improve the features you see in the service; we do not transfer it except for those features, for security, to comply with the law or in a merger or sale with your prior consent; we do not use or transfer it for advertising; and no person reads it unless you give express consent, for security, to comply with the law or, aggregated and anonymised, for the internal operation of the service. This also applies to data aggregated or derived from it. Nor do we use it to train general AI models.

Disconnecting: access tokens are stored encrypted. You can disconnect any platform from the WIM Metrics console: we delete its tokens, stop reading it and you choose whether to keep or delete the data already imported. The permission you gave stays granted at the platform, because withdrawing it would also cut the other connections made with that account; you withdraw it whenever you want: for Google, from myaccount.google.com/permissions; for Meta, from the business integrations of your account (facebook.com/help/405094243235242).

Deletion: to ask us to delete the data imported from a platform, or all the data of your organisation, write to privacidad@webimpacto.es.

Retention periods

Access requests: up to 12 months from the last contact, unless you withdraw your consent earlier.

Service data: for as long as the contract lasts and, afterwards, only for as long as needed to meet legal obligations.

Original responses from the connected platforms: 90 days, encrypted.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to privacidad@webimpacto.es.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security

We apply technical and organisational measures such as encrypted credentials, isolation of each organisation’s data, two-factor authentication for administrators and an audit log.

Changes to this policy

We will publish any change here, with its update date.