Privacy Policy

withConflux (“we”, “us”) runs this website to share what we’re building and to collect early-access sign-ups, and to run the withConflux product for onboarded customers. This notice covers what the marketing site, the waitlist, and connected Google accounts (see section 7) actually do. Questions? Contact us.

1. What we collect

• Waitlist / early-access: the details you submit — typically name, email, company, role, and what you’re building.
• Analytics (only if you accept): if you click Accept on the cookie banner, Google Analytics records basic, IP-anonymised usage (pages viewed, rough location, device). Decline and none of this is collected.
• Essential: a small preference cookie (e.g. your theme) and standard server logs needed to run and secure the site.

2. Why we use it

• To contact you about early access and launch — because you asked us to (consent), which you can withdraw anytime.
• To understand and improve the site (our legitimate interest), only with your analytics consent.
• To keep the site secure and meet legal obligations.

3. Who we share it with

We don’t sell your data. We use a few processors to run the site: hosting and database (EU region where available), an email provider to reply to you, and — only with your consent — Google Analytics. Each only processes what’s needed for its job.

4. Cookies & analytics

No analytics cookie loads until you choose Accept on the banner. Choose Decline and we set nothing beyond the essential preference cookie. You can change your mind by clearing the site’s cookies in your browser.

5. Keeping & deleting it

We keep waitlist details until launch or until you ask us to delete them, whichever comes first. Contact us to be removed.

6. Your rights

If you’re in the EU/UK you can ask us to access, correct, or delete your data, or object to its use — just email us. You can also complain to your local data-protection authority.

7. Connected Google accounts (Search Console & Analytics)

If you connect a Google account in the withConflux Insights feature, we access the following Google user data, read-only, through Google’s official APIs. We never write to, change, or delete anything in your Google account.

• What we access: your Google Search Console data (your verified sites and search-performance metrics — clicks, impressions, CTR, average position, top queries and pages) via the webmasters.readonly scope; and your Google Analytics (GA4) data (users, sessions, engagement, traffic sources, pages and geography) via the analytics.readonly scope. We also read your Google account email (userinfo.email) to know which account you connected.
• How we use it: solely to display your own Search Console and Analytics data back to you inside your withConflux dashboard, and in reports you choose to export. We do not use it for any other purpose.
• How we share it: we do not sell or transfer this Google user data to third parties, advertisers, data brokers, or for AI/ML model training. It is processed only by our hosting/database provider (EU region where available) to run the dashboard, and is shown only to the account owner and their invited workspace members.
• How we protect it: the Google OAuth refresh token is encrypted at rest; all data is transmitted over HTTPS; access is scoped per organization.
• Retention & deletion: we cache only what’s needed to render your dashboard. You can disconnect a Google account at any time from the Insights page — this deletes the stored token and stops all access. You can also revoke access at myaccount.google.com/permissions.

Limited Use: withConflux’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. Changes

We’ll keep this notice current as the product evolves and update the date above when it materially changes.