Data Processing Agreement

This agreement is part of the Terms of Service and governs the billing data you import into Kometrics. For that data you are the controller and Fields Apps LTDA is the processor: we process it only to provide the service you configured, never for our own purposes.

Customers, subscriptions and invoices read from the billing providers you connect, and the metrics computed from them. Access to your providers is read-only. If your workspace enables privacy mode, customer names are pseudonymized and emails dropped at ingest, before storage.

Data is encrypted in transit, workspaces are isolated at the database layer, and source credentials are stored server-side and never exposed to the browser. Privacy mode uses a per-workspace secret; deleting the secret makes the pseudonyms permanently unlinkable. Imported data is deleted within 30 days of disconnecting a source or closing the account.

These are the providers that can touch personal data while running the service, and what each one receives:

Kometrics AI runs through OpenRouter, which routes to the configured model provider; the underlying model can change, OpenRouter as the gateway does not. Currency reference rates come from the Brazilian Central Bank and the Frankfurter API, which receive dates and currency codes only, never personal data.

The MCP connector lets you authorize an assistant, such as Claude or ChatGPT, to read one workspace on your behalf. That assistant is not our subprocessor: you choose it, you authorize it, and your relationship with its vendor governs what it does with what it receives. We are naming it here anyway, because the practical effect is that data leaves Kometrics.

A connected assistant receives whatever it asks for through the read-only tools, which can include customer names, email addresses and the figures attached to them, for the single workspace you picked when you approved the connection. Under privacy mode it sees the pseudonyms and no emails, the same as the app does. Nothing it can call writes. You can see every assistant you have connected, and disconnect any of them, under Settings, API.

Most processing happens in the United States. Transfers rely on the safeguards in each provider's own data processing terms, including standard contractual clauses where they apply under GDPR and LGPD.

We update this page before a new subprocessor starts handling personal data, and announce material changes by email. If you object to an addition, you can export your data and close the account before it takes effect.

Questions about data processing: privacy@kometrics.com.