Privacy Policy

Last updated: 4 May 2026

This Privacy Policy explains how Hitoric Ltd ("we", "us", "our"), operating as MetricHQ, collects, uses, and protects information when you use our email tracking analytics service at metrichq.com (the "Service").

1. What Data We Collect

Account Data

When you create a MetricHQ account, we collect your name, email address, and billing information (if on a paid plan). This information is used to provide and manage your account.

Tracking Pixel Data (Open Tracking)

When a recipient opens an email containing a MetricHQ tracking pixel, we collect:

• IP address of the device that loaded the pixel
• User-agent string (browser and operating system information)
• Timestamp of when the pixel was loaded

Click Tracking Data

When a recipient clicks a MetricHQ tracked link, we collect:

• IP address of the device that clicked the link
• User-agent string (browser and operating system information)
• Timestamp of when the click occurred
• URL of the original destination link

Usage Data

We collect basic usage data about how you interact with the MetricHQ dashboard and API, including API request logs and feature usage, to maintain and improve the Service.

2. How We Use Your Data

We use the data we collect to:

• Provide aggregate analytics to the sender (our customer) about their email engagement
• Display open and click events on the MetricHQ dashboard
• Deliver webhook notifications about email events
• Maintain, improve, and secure the Service
• Process billing and manage accounts

We do not sell your data to third parties. Tracking data is only visible to the MetricHQ account holder who created the tracked message. We do not use tracking data for advertising, profiling, or any purpose other than providing analytics to our customers.

3. Cookies

MetricHQ uses minimal cookies:

• Authentication session cookie: Used only in the MetricHQ web application (dashboard) to keep you signed in. This is a first-party, session cookie.
• No cookies on tracking endpoints: Our pixel and click tracking endpoints do not set any cookies on email recipients' devices.

We do not use third-party advertising or analytics cookies.

4. Data Retention

Event data (opens, clicks, and associated metadata) is retained based on your plan tier:

• Free plan: 7 days
• Pro plan: 90 days
• Business plan: 1 year

After the retention period, event data is permanently deleted. Account data (your name, email, and billing information) is retained for as long as your account is active and for a reasonable period afterwards for legal and business purposes.

5. Data Sharing

We may share data only in the following circumstances:

• Service providers: We use trusted third-party providers for infrastructure, payment processing, and email delivery. These providers process data only on our behalf and under our instructions.
• Legal requirements: We may disclose data if required by law, regulation, or legal process.
• Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction.

6. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), tenant isolation in our multi-tenant architecture, and API key authentication. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights (GDPR and Data Subject Rights)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate personal data.
• Right to erasure: Request deletion of your personal data.
• Right to data portability: Request your data in a structured, commonly used, machine-readable format.
• Right to restrict processing: Request that we limit how we use your data.
• Right to object: Object to our processing of your personal data.

To exercise any of these rights, please contact us at privacy@metrichq.com. We will respond to your request within 30 days.

Email Recipients

If you are an email recipient and have questions about tracking data collected about you, please contact the sender of the email in the first instance. If you wish to make a request directly to MetricHQ, you may contact us at privacy@metrichq.com.

8. International Data Transfers

Your data may be processed in countries outside the EEA or UK. Where we transfer data internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

9. Children's Privacy

MetricHQ is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Hitoric Ltd
Email: privacy@metrichq.com