Privacy Policy
Last updated: March 2, 2026
1. Who we are
UTMStandard is a UTM governance and link management platform operated by RevOps Global LLC. Contact us at hello@utmstandard.io.
2. What data we collect
Account data
When you sign up we collect your email address and, if you use Google or GitHub OAuth, your name and profile picture. We do not store passwords — authentication uses magic links or OAuth.
Usage data
We collect data about how you use the product: links you create, UTM parameters, templates, naming conventions, and workspace settings.
Click analytics
When someone clicks a short link you create, we record anonymized click events: timestamp, country, city, device type, browser, OS, and referrer. IP addresses are anonymized (last octet zeroed) before storage.
Billing data
Payment processing is handled entirely by Stripe. We do not store credit card numbers. We store your Stripe customer ID and subscription status.
3. How we use your data
- To provide, operate, and improve the UTMStandard service
- To send transactional emails (magic links, team invites, broken link alerts, scheduled reports)
- To process billing and manage your subscription
- To enforce our Terms of Service and respond to support requests
We do not sell your data. We do not use your data for advertising.
4. Data sharing
We share data only with these service providers who process it on our behalf:
- Neon — PostgreSQL database hosting
- Upstash — Redis cache for link redirects
- Tinybird — Click analytics storage and querying
- Stripe — Payment processing
- Resend — Transactional email delivery
- Vercel — Application hosting
We do not share your data with any other third parties unless required by law.
5. Data retention
We retain your account data for as long as your account is active. Click analytics are retained according to your plan (7 days on Free, 90 days on Growth, 1 year on Scale, unlimited on Enterprise). If you delete your workspace, all associated data is deleted within 30 days.
6. Your rights
You may request access to, correction of, or deletion of your personal data at any time by emailing hello@utmstandard.io. EU/UK residents also have rights to data portability and to lodge a complaint with their local supervisory authority.
7. Cookies
We use only essential cookies required for authentication (session tokens). We do not use tracking or advertising cookies.
8. Security
All data is transmitted over HTTPS. API keys are hashed with SHA-256. IP addresses are anonymized before storage. We do not store plain-text secrets.
9. Changes to this policy
We will notify you by email if we make material changes. The date at the top reflects the most recent revision.