This policy is a working draft describing how Metis currently handles data. It has not yet been reviewed by counsel and should not be treated as a final, binding statement until that review is complete.
What we collect
When you create an account and use Metis, we collect:
- Account information — name and email address, provided directly or via Google sign-in.
- Research activity — the companies, people, and products you search for, and the reports and watchlists you create, so we can serve them back to you.
- Usage data — basic technical logs (timestamps, request counts) needed to operate the service and enforce plan limits.
- Product analytics — a small set of events (for example: signed up, ran a report, hit a plan limit, started checkout), tied to your account ID, so we can see which features get used. Event data doesn't include the names you research or the contents of your reports.
- Billing information — your plan and subscription status. Card details go to our payment processor and never reach our servers.
We don't run advertising trackers.
How we use it
- To provide the research and reporting features you request.
- To operate your account, including enforcing the usage limits of your plan.
- To communicate with you about your account or changes to the service.
We do not sell your personal data.
Who we share it with
We use service providers to run Metis. Each one gets only what its job needs:
- Supabase — authentication and database. Your account and research data is stored there on our behalf.
- Stripe — payments. Stripe handles your card details directly; Metis never stores them.
- Search and AI providers — to build a report, the name of the company, person or product you research, and public web content about it, is sent to search and language-model providers (such as Serper, Groq and OpenRouter). Your name and email are not sent. Some of these providers may keep or use the requests they receive under their own terms, so don't put confidential information into a search.
- Resend — account emails, such as the welcome email. It receives your email address and first name.
- PostHog — the product analytics described above.
- Vercel and Railway — hosting for the website and the research service.
- Google — if you sign in with Google, it handles that sign-in under its own privacy policy.
We don't share your data with anyone else, except where the law requires it.
Cookies
We use only the essential cookies required to keep you signed in. Analytics doesn't set cookies, and we don't set advertising or cross-site tracking cookies.
Data retention and deletion
Your account and research data is retained for as long as your account is active. You can request deletion of your account and associated data at any time by contacting us below.
Your rights
You can request a copy of your data, ask us to correct it, or ask us to delete it, by reaching out to the contact below. We'll respond within a reasonable time.
Children's privacy
Metis is not directed at, and is not knowingly used by, anyone under 16.
Changes to this policy
If this policy changes materially, we'll update the date at the top of this page and, where appropriate, notify account holders directly.
Contact
Questions about this policy or your data can be sent to support@metisanalytic.com.