Privacy Policy

Account data: Your email address and hashed password when you create an account via Supabase Auth.

Stripe credentials: Your Stripe restricted API key and webhook signing secret. These are stored server-side and never exposed to the browser.

Stripe data: Subscription, invoice, and customer data pulled from your Stripe account via the API key you provide. This data is stored in our database to power your dashboard.

Attribution data: UTM parameters (utm_source, utm_medium, utm_campaign, keyword) captured by the LTV Tracker JavaScript snippet on your site and linked to Stripe customer IDs after a successful payment. No personal data about your end-customers is stored — only the Stripe customer ID and UTM values.

Ad spend data: CSV files you upload containing campaign spend data from Google Ads or Meta Ads. Only the spend amounts, campaign names, and dates are stored.

Usage data: Standard server logs including IP addresses and request timestamps, retained for up to 30 days for security and debugging purposes.

We use the data you provide solely to operate LTV Tracker — to compute your MRR, LTV, CAC, and attribution metrics and display them in your dashboard. We do not sell, rent, or share your data with third parties for marketing purposes.

We may use your email address to send transactional messages (password resets, billing notifications). We do not send marketing emails without your explicit consent.

Your data is stored in a PostgreSQL database hosted on Supabase infrastructure in the EU (Ireland). Stripe API keys are stored server-side and never transmitted to the browser.

We use industry-standard security practices including HTTPS encryption in transit and access controls on our database. No system is perfectly secure — please use a restricted Stripe API key with read-only permissions as described in our setup guide.

We retain your data for as long as your account is active. If you cancel your subscription and request account deletion, we will delete your data within 30 days.

Backups may retain data for up to 90 days after deletion.

If you are based in the European Economic Area, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Request a portable copy of your data

To exercise any of these rights, email us at hello@ltv-tracker.com.

LTV Tracker uses session cookies for authentication (managed by Supabase). No third-party advertising or analytics cookies are set on ltv-tracker.com.

The JavaScript snippet you install on your own site sets a first-party cookie (ih_attr_data) to store UTM attribution data for 30 days. This cookie is set on your domain, not ours. You are responsible for disclosing it in your own privacy policy and obtaining consent where required.

We use the following third-party services to operate LTV Tracker:

• Supabase — authentication and database hosting
• Stripe — payment processing for LTV Tracker subscriptions
• Vercel — application hosting and edge delivery

Each of these providers has their own privacy policy governing their handling of data.

We may update this policy from time to time. We will notify you of material changes by email or via a notice in the dashboard. Continued use of LTV Tracker after changes constitutes acceptance of the updated policy.

For any privacy-related questions, contact us at hello@ltv-tracker.com or write to: Vizora FZ LLE, UAE.