Privacy Policy

Last updated: July 5, 2026

This Privacy Policy describes how UTM Studio for GA4 ("we", "us", "our") collects, uses and protects personal data when you use our website utm-studio.app and our application at app.utm-studio.app.

This policy is issued in compliance with the EU General Data Protection Regulation (GDPR) - Regulation (EU) 2016/679.

1. Data Controller

[NOME COGNOME]
P.IVA: [P.IVA]
Italy
Email: hello@utm-studio.app

2. Data We Collect

2.1 Data you provide directly

  • Email address - collected when you sign in via Google OAuth to access the application.
  • Payment data - handled entirely by Lemon Squeezy (our payment processor). We never store credit card or payment information.

2.2 Data collected automatically

  • Usage data - pages visited, session duration, interactions with the app, collected via Google Analytics 4 through Google Tag Manager.
  • Technical data - browser type, operating system, IP address (anonymized), referral source.
  • Cookies - see our Cookie Policy for full details.

2.3 GA4 property data (when you connect your account)

When you use the GA4 Audit feature, we query your Google Analytics 4 property via the official GA4 Data API using read-only OAuth2 access. This data is used exclusively to generate your audit report and is never stored on our servers beyond the duration of your session.

3. Legal Basis for Processing

  • Contract performance (Art. 6.1.b GDPR) - to provide the service you signed up for.
  • Legitimate interest (Art. 6.1.f GDPR) - to improve our service and ensure security.
  • Consent (Art. 6.1.a GDPR) - for non-essential cookies and analytics tracking.

4. How We Use Your Data

  • To authenticate you and maintain your session
  • To enforce usage limits (free vs. Pro plan)
  • To process payments and manage subscriptions
  • To analyze and improve the service
  • To send transactional emails related to your account (no marketing without explicit consent)

5. Data Sharing

We do not sell your personal data. We share data only with the following third-party service providers:

6. Data Retention

  • Account data (email, plan, usage counters) - retained for the duration of your account and deleted within 30 days of account deletion upon request.
  • Analytics data - retained per Google Analytics 4 default settings (14 months).
  • GA4 audit data - not persisted beyond your active session.

7. Data Transfers Outside the EU

Some of our service providers (Google, Lemon Squeezy, Netlify) are based in the United States. Data transfers are covered by Standard Contractual Clauses (SCCs) or equivalent mechanisms as required by GDPR.

8. Your Rights

Under GDPR, you have the right to:

  • Access - request a copy of your personal data
  • Rectification - correct inaccurate data
  • Erasure - request deletion of your data ("right to be forgotten")
  • Restriction - request we limit processing of your data
  • Portability - receive your data in a structured, machine-readable format
  • Objection - object to processing based on legitimate interest
  • Withdraw consent - at any time, for consent-based processing

To exercise any of these rights, contact us at hello@utm-studio.app. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority. In Italy: Garante per la protezione dei dati personali.

9. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure or destruction. All data is transmitted over HTTPS. We never store passwords or OAuth tokens in plain text.

10. Children

Our service is not directed at children under 16. We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or a notice on the website. The "Last updated" date at the top reflects the most recent revision.

12. Contact

For any questions or requests regarding this Privacy Policy, contact us at:
hello@utm-studio.app