Privacy Policy

Verifypixel ("we", "us") is a conversion-tracking monitoring service operated by FC Consultoria em Tecnologia LTDA, a company registered in Brazil. This policy explains what data we access, what we store, and what we will never do with it. We have tried to write it the way we would want to read it.

What Verifypixel does

Verifypixel connects to your analytics and advertising accounts — Google Analytics 4, Meta (Facebook) Pixel/datasets, and Google Ads — through their official APIs, using read-only access that you grant explicitly via OAuth. We continuously read aggregate event counts (for example, "217 purchase events between 14:00 and 15:00") to detect when your conversion tracking breaks, and we alert you when it does.

Data we access and store

• Account data you provide: your name, email address, and password hash when you create an account; billing details are handled by our payment processor and never stored by us.
• OAuth tokens: the access credentials Google and Meta issue when you connect an account. These are stored encrypted at rest and used only to perform the read-only API calls described here.
• Aggregate analytics metadata: hourly event counts, event names, and event values per connected property or pixel (e.g., "purchase: 41 events, R$4,059 between 14:00–15:00"). This is the data our monitoring runs on.
• Waitlist and contact data: if you join our waitlist or email us, we store your email address and message.

Data we deliberately do not access or store

• We do not access or store user-level or visitor-level analytics data — no individual profiles, no client IDs, no IP addresses of your visitors, no browsing histories.
• We do not access your advertising audiences, creatives, or budgets.
• We do not modify anything in your accounts. Our access is read-only by scope design.
• We do not sell, rent, or share any data we access with third parties. We do not use it for advertising. We do not use it to train machine-learning models.

Google user data

Verifypixel's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: data obtained through Google APIs (Google Analytics and Google Ads) is used only to provide the monitoring and alerting features you see in the product, is never sold, never used for advertising, and never read by humans except (a) with your explicit permission for support, (b) for security purposes, or (c) as required by law.

Meta platform data

Data obtained through Meta's APIs (aggregate pixel/dataset event statistics) is used solely to provide monitoring and alerting on the datasets you connect. We comply with the Meta Platform Terms. You may disconnect Meta access at any time from within the product or from your Meta Business settings, and you may request deletion of all associated data (see below).

How long we keep data

• Aggregate event counts: up to 15 months, to power baselines and historical comparisons.
• OAuth tokens: until you disconnect the integration or delete your account.
• Account data: until you delete your account.
• Waitlist emails: until launch communications end or you unsubscribe.

Deleting your data

You can disconnect any integration at any time, which stops all data collection from it. To delete all data associated with your account — including stored aggregate statistics and tokens — email [email protected] from your account email, or use the delete-account option in the product. Deletion is completed within 30 days. Requests originating from Meta's data-deletion callback are processed automatically.

Where data lives and who helps us run the service

Our infrastructure runs on cloud providers located in the United States and the European Union (hosting), Cloudflare (networking and static hosting), and a transactional email provider (alert delivery). Payment processing is handled by a merchant-of-record payment provider; we never see or store card numbers. Each provider processes data only as needed to run the service.

Legal bases (LGPD / GDPR)

For users in Brazil, we process data under the Lei Geral de Proteção de Dados (LGPD); for users in the EU/UK, under the GDPR. Our legal bases are performance of a contract (providing the monitoring service you signed up for) and legitimate interest (service security and improvement). You have the right to access, correct, export, and delete your data — contact [email protected].

Changes

If we change this policy, we will update the date above and, for material changes, notify you by email. Questions: [email protected].