Privacy Policy

Last updated: June 12, 2026

1. Introduction

Welcome to ReportNest ("we", "us", or "our"). We are committed to protecting the privacy and security of your personal data and the client metrics data you upload to our platform. This Privacy Policy describes how we collect, use, store, and disclose information when you use our website, services, and applications.

2. Information We Collect

We collect information directly from you when you register an account, customize your profile, upload metrics, or contact us. This includes:

  • Account Information: Name, email address, password hash, and plan details. We use Better Auth for secure user login management.
  • Agency Information: Agency Name, website URL, brand colors, and agency logo image. Logos are stored securely using Vercel Blob storage.
  • Client and Metrics Data: Client names, brand colors, logos, and imported campaign metrics (sessions, conversions, revenue, channel breakdown, and custom notes) uploaded manually or via CSV.
  • External Service Integrations: To provide AI executive summaries, we store the AI API keys (e.g., OpenAI, Anthropic, Gemini) you configure in your Settings page. These keys are stored encrypted and used solely to run completion requests.

3. How We Use Your Information

We process your data to operate, maintain, and improve our platform, including to:

  • Create and update beautiful marketing reports for your clients.
  • Deliver reports to clients via HTML email (using Resend or SMTP/Gmail).
  • Generate automated executive summaries based on your metrics using your configured AI API keys.
  • Manage subscriptions, payments, and plan upgrades securely through our merchant of record, Dodo Payments.
  • Monitor platform status, log errors using Sentry, and analyze user interactions using PostHog analytics.

4. Data Storage and Security

Our core database is hosted using Neon (Serverless PostgreSQL). We implement industry-standard administrative, technical, and physical security measures to safeguard all account credentials and client metrics. While we utilize secure transport layers and encryption algorithms, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

5. Third-Party Services

We share data with third-party service providers only as necessary to fulfill services on our behalf. These partners include:

  • Better Auth: Authentication infrastructure.
  • Neon: Primary cloud database storage.
  • Vercel Blob: Client and agency logo storage.
  • Dodo Payments: Secure subscription and transactional billing.
  • Resend / NodeMailer SMTP: Email delivery services.
  • Sentry: Application performance and crash logs monitoring.
  • PostHog: User navigation analytics.

6. Your Rights and Data Deletion

You have the right to access, correct, or delete your personal and account details. If you wish to delete your account, you can trigger this action directly from your Settings page (Danger Zone). Account deletion permanently removes your user profile, client records, and report historical logs from our primary servers, and immediately cancels active payment billing.

7. Contact Us

If you have any questions or feedback regarding this Privacy Policy, please send us a support request via our Contact Page.