Last updated: August 15, 2026
Kometrics is operated by Fields Apps LTDA, a Brazilian company ("we", "us"). For your account data we act as the controller. For the billing data you import, your customers are yours: you are the controller and we process that data on your instructions, as described in the Data Processing Agreement.
Account data: your name, email and workspace settings. Billing data you connect: customers, subscriptions and invoices imported read-only from providers like Stripe, Paddle, Creem and Asaas. Product usage data needed to operate and secure the service. On the public site, cookieless page analytics and one first-touch record of the page and referrer that brought you here.
To compute your revenue metrics, send the notifications you opt into, bill you for the service, understand which channels bring signups, and keep the service secure. Nothing else. We do not sell personal data and we do not run advertising trackers.
Workspaces can enable anonymized mode: customer names are replaced by irreversible pseudonyms and emails are dropped before touching storage, keyed by a per-workspace secret. Deleting that secret makes the pseudonyms permanently unlinkable, and your metrics keep working without personal data at rest.
Data is stored with our infrastructure providers, primarily in the United States, and only the providers the service needs to run: hosting, database, email delivery, payments, and the AI provider when you use Kometrics AI. The full list, with what each one receives, is in the Data Processing Agreement. Each processor handles only what its role requires.
Imported billing data lives while your workspace does. Disconnecting a source or deleting your account removes the imported data within 30 days of the request.
Access, correction, export and deletion, per GDPR and LGPD. Write to privacy@kometrics.com and we act on it within the legal deadlines. If you are in Brazil you can also complain to the ANPD; in the EU, to your local supervisory authority. How we approach all of this is summarized on the GDPR page.
Session cookies keep you signed in. One attribution cookie records the first page and referrer that brought you to the site, for up to six months, so we know which channels actually bring signups; it identifies a visit, not a person, and is never shared for advertising. Preference cookies remember small choices like your sidebar state. Analytics on the marketing site is cookieless. There are no third-party advertising trackers anywhere.
Material changes are announced before taking effect. Questions: privacy@kometrics.com, or see the contact page.