Turbo AnalyticsTurbo Analytics

Privacy Policy

Last updated: February 18, 2026

Turbo Analytics (“Turbo,” “we,” “us,” or “our”) is a product of Captive Demand. This Privacy Policy explains how we collect, use, store, and share information when you use the Turbo Analytics service at goturbo.ai (the “Service”).

By using the Service you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Account Information

When you sign up we collect your name, email address, and profile picture through our authentication provider, Clerk. If you subscribe to a paid plan we collect billing information through Stripe (we never see or store your full credit card number).

Google Analytics Data

Turbo Analytics requests read-only access to your Google Analytics 4 properties via the analytics.readonly OAuth scope. This means we can view your GA4 report data but cannot modify your Google Analytics account, settings, or data in any way.

When you connect a GA4 property we access:

  • Property metadata (available dimensions, metrics, custom definitions)
  • Report data (metric values, dimension breakdowns) in response to your queries
  • Property name and identifier

Conversations and Queries

We store the questions you ask, the AI-generated responses (including any charts or tables), and metadata about each query (model used, token count, latency, number of GA4 API calls). This is necessary to provide conversation history, follow-up context, and usage tracking.

Alerts and Lexicon

If you configure alerts or lexicon entries, we store those configurations (metric names, thresholds, custom term definitions) tied to your workspace and GA4 property.

Phone Number

If you enable SMS alert notifications, we collect your phone number. Your phone number is stored in our database and used solely to deliver alert notifications via SMS through our provider, Twilio. We do not use your phone number for marketing, advertising, or any other purpose. You can remove your phone number at any time by disabling SMS notifications on your alerts.

Usage and Analytics

We collect anonymized product usage data (page views, feature usage) through PostHog to improve the Service. We use Sentry for error monitoring and Langfuse for AI query observability.

2. How We Use Your Information

  • To provide the Service — answering your analytics questions, generating charts, evaluating alerts, and applying your lexicon definitions.
  • To send alert notifications — email, in-app, and SMS notifications when a metric you’re monitoring crosses a threshold. SMS notifications are opt-in only and sent via Twilio. Message frequency varies based on your alert configuration. Standard message and data rates may apply. You may opt out at any time by disabling SMS on your alerts or replying STOP to any message.
  • To manage billing — tracking query usage, processing subscription payments, and reporting metered usage to Stripe.
  • To improve the Service — analyzing aggregate usage patterns, debugging errors, and optimizing AI performance.

3. How We Use Google User Data

Your Google Analytics data is used solely to answer your queries and evaluate your alert configurations within the Turbo Analytics interface. Specifically:

  • GA4 report data is fetched on-demand when you ask a question or when an alert evaluation runs.
  • GA4 property metadata (dimensions, metrics) is cached for up to 4 hours in Redis to reduce API calls and is refreshed daily.
  • GA4 report results may be included in the AI prompt context sent to Anthropic (Claude) to generate your answer. Anthropic does not retain this data for training.
  • Your encrypted OAuth refresh token is stored in our database using AES-256-GCM encryption so we can maintain your GA4 connection.

Google API Services Limited Use Disclosure

Turbo Analytics’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Data Sharing

We do not sell, rent, or trade your personal information or Google user data. We do not use your data for advertising, retargeting, or interest-based profiling. We share data only with the following service providers, solely as needed to operate the Service:

  • Anthropic — AI model provider (processes query context to generate responses)
  • Stripe — payment processing and subscription management
  • Clerk — user authentication and workspace management
  • Supabase — database hosting (PostgreSQL)
  • Upstash — Redis caching and rate limiting
  • Resend — transactional alert emails
  • Twilio — SMS alert notifications
  • Vercel — application hosting
  • Sentry — error monitoring
  • PostHog — product analytics
  • Langfuse — LLM observability

We may also disclose information if required by law, to protect our rights, or in connection with a merger or acquisition (with prior user notification).

5. Data Retention

Conversation history is retained based on your subscription tier:

  • Trial — 14 days
  • Free — 30 days
  • Starter — 90 days
  • Growth — 1 year
  • Pro — 2 years

Query logs (token counts, costs, latency) are retained for internal analytics purposes. Cached GA4 metadata expires automatically after 4 hours. If you delete your account, all associated data (conversations, alerts, lexicon entries, connections) is permanently deleted.

6. Data Security

  • All data is encrypted in transit (TLS) and at rest.
  • Google OAuth refresh tokens are encrypted with AES-256-GCM before storage.
  • GA4 access is strictly read-only via the analytics.readonly scope.
  • Rate limiting and per-property API quota management prevent abuse.
  • Row-level security is enforced at the database level.

7. Your Rights and Choices

  • Revoke GA4 access — You can disconnect a GA4 property at any time from your account settings, or revoke Turbo Analytics’ access from your Google Account permissions page.
  • Delete your account — Contact us at support@captivedemand.com to request full account and data deletion.
  • Export your data — Contact us to request a copy of your stored data.

8. Children’s Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. If we make changes to how we use Google user data, we will prompt you to consent before those changes take effect.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Captive Demand
Email: support@captivedemand.com