Privacy Policy
What Analytics Power collects — no passwords, no tracking cookies — why, who processes it, how long we keep it, and your rights.
1Who we are and what this covers
Coastal Carolina Tech operates Analytics Power. This policy explains what personal information we collect through the website at analytics-power.com and the Analytics Power service, why, who we share it with, and the choices you have.
For the data our customers connect and query in their workspaces, the customer decides what is processed and we act as its processor under the Data Processing Addendum. If your employer uses Analytics Power, its own privacy notice also applies, and it may be the right first contact for requests about workspace data.
2What we collect
Account information
- Your email address, the display name you give (optional), your workspace’s name, and your role in it.
- The email address of anyone you invite, and the role and data-source access offered.
Passkeys — and no passwords
- When you create a passkey, we store its public key, credential ID, signature counter, whether it is synced or device-bound, and any nickname you give it. We never receive the private key.
- Fingerprints, face scans and device PINs used to unlock a passkey stay on your device. We never see them.
- We have no passwords to store, leak or reset.
- Recovery codes and email recovery links are stored only as one-way hashes, and each works once.
Sessions and cookies
- A random session identifier, kept in a cookie, plus the session’s start time, last-activity time and your browser’s user-agent string (so you can see and sign out your other sessions).
IP addresses
- Your IP address is used to rate-limit requests and to check sign-ups and recovery requests for bots. The rate-limit counter is keyed by IP address and resets every minute. Our hosting provider also processes IP addresses to deliver and protect the site.
Audit ledger
- Each workspace has a tamper-evident log of actions taken in it: which member acted, what they did, when, which data source was involved, whether it was allowed or blocked and why, and a hash of any query run. Some entries name a member’s email address (for example, an invitation).
Data source and query information
- The data sources you register (names, hosts, database names, classification), the metric definitions you approve, and connector endpoints.
- Database credentials and connector tokens are encrypted at rest with AES-256-GCM under a key specific to your workspace, and are never shown back to anyone, including you.
- The questions you ask and the results returned. To avoid re-running expensive queries, results may be cached for up to one hour.
Terms acceptance
- Which version of the Terms of Service and this policy you accepted, and when.
Billing
- Billing is handled in Main Street Suite, Coastal Carolina Tech’s own billing system, which keeps the billing contact, plan, price and invoice history for your workspace. Card payments are processed by Stripe; we do not receive or store full card numbers. Stripe shares with us the billing details needed to invoice you, such as the card brand, last four digits and payment status.
Things you send us
- The contents of emails and support requests you send us.
3What we don’t do
- We do not sell personal information, or share it for cross-context behavioral advertising.
- We do not show ads, and we use no advertising, analytics or tracking cookies or pixels.
- We do not use your data, your questions or your results to train artificial-intelligence models.
5How we use information
- To provide the Service: authenticate you, run your questions, show results, and keep your workspace’s audit ledger.
- To keep it secure: detect and prevent abuse, rate-limit requests, investigate incidents.
- To send transactional email: invitations and account-recovery links. We do not send marketing email without your consent.
- To bill for subscriptions and to provide support.
- To comply with law and enforce our Terms.
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performance of our contract with you or your organization; our legitimate interests in securing and improving the Service; compliance with legal obligations; and consent where we ask for it.
6AI features
Analytics Power uses Anthropic’s Claude models for two narrow jobs. When a question doesn’t match a known metric, the question text and the list of available metrics and dimensions are sent so the model can choose among them. After a query runs, the question, the metric name, the column names and up to 20 rows of the result are sent so the model can write a short summary. The model never writes or runs queries, and never receives database credentials, connector tokens or the rest of your data. See Subprocessors.
8How long we keep it
| Information | Kept for |
|---|---|
| Account and passkey records | While you are a member of a workspace. Removing a member deletes their account record and passkeys and ends their sessions. |
| Session records | Each session is valid for up to 12 hours; the record stays with the account so you can review sign-in history. |
| Sign-in challenges | 5 minutes, single use. |
| Email recovery links | Valid for 30 minutes, single use. |
| Invitations | Valid for 7 days; the record of who was invited stays with the workspace. |
| Rate-limit counters | A one-minute window, overwritten each window. |
| Cached query results | Up to 1 hour. |
| Audit ledger | For the life of the workspace. Workspace administrators can prune old entries. |
| Terms acceptance records | For the life of the account, and afterwards as long as needed to show what was agreed. |
| Workspace data after termination | A 30-day export window, then deleted within 30 days (backups expire on their normal cycle). |
9Security
We protect information with the measures described on our Security page, including passwordless sign-in, encryption of stored credentials, and strict separation between workspaces. No system is perfectly secure; if we learn of a breach affecting your personal information we will notify you as the law requires.
10Your rights and choices
Depending on where you live, you may have the right to:
- access the personal information we hold about you, and receive a copy in a portable format;
- correct it;
- delete it;
- object to or restrict certain processing, and withdraw consent where we rely on it;
- not be discriminated against for exercising these rights.
You can see your passkeys and sessions, and remove them, in Account & team in the console. For anything else, email matt@coastalcarolinatech.com. We will verify the request comes from you and respond within 30 days (or sooner if the law requires). If the information is part of a workspace your organization controls, we may need to involve its administrators. You may also complain to your local data protection authority.
California residents: the information we collect is described in section 2, its sources are you, your organization and your browser, and its purposes are in section 5. We do not sell or share personal information as those terms are defined in California law, and we do not use sensitive personal information to infer characteristics about you.
11Children
Analytics Power is a business service and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
12International users
We are based in the United States. The Service runs on Cloudflare’s global network, and our providers process data in the United States and other countries. Where the law requires a transfer mechanism for personal data leaving the EEA, UK or Switzerland, we will provide one, such as the Standard Contractual Clauses, on request.
13Changes to this policy
The effective date above shows the current version. If we make a material change we will tell you by email or in the Service before it takes effect, and signed-in members will be asked to acknowledge it.