1. Introduction and Overview
Welcome to RaiseReturn ("RaiseReturn," "we," "us," or "our"). This Privacy Policy describes how RaiseReturn collects, uses, processes, stores, and protects information about you when you access or use our website located at raisereturn.com (the "Site"), our web application, and all related services, features, and functionality we offer (collectively, the "Service").
By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use our Service.
This Privacy Policy applies to all users of the Service, including visitors to our website, registered account holders, and paying subscribers (individually and collectively referred to as "you" or "User").
Plain English SummaryWe collect the information you give us directly (like your email and account details) and the marketing performance data you connect to us (like your GA4 or Google Ads data) to generate your reports. We store connected data for up to 90 days to power your dashboards. We do not sell your data. We do not use your client data for advertising. You can request deletion of your data at any time.
2. Who We Are
RaiseReturn is an automated client reporting platform designed for marketing agencies, freelancers, and digital marketing professionals. Our platform connects to marketing data sources including Google Analytics 4, Google Ads, Meta Ads (Facebook and Instagram), Google Search Console, and PageSpeed Insights, and generates AI-powered performance reports in PDF, Excel, and Google Sheets formats.
RaiseReturn is an independently operated software product. For questions related to this Privacy Policy or your personal data, please contact us at the details provided in Section 17 below.
For the purposes of applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), RaiseReturn acts as a data controller with respect to personal data you provide to us directly (such as account information), and as a data processor with respect to marketing performance data you connect to our platform for the purpose of generating reports (such as GA4 data, Google Ads data, or Meta Ads data).
3. Information We Collect
We collect several types of information in connection with the Service:
3.1 Account and Registration Information
When you create an account with RaiseReturn, we collect the information you voluntarily provide, which may include:
- Your name or display name
- Your email address
- Your password (stored in hashed form — we do not store plaintext passwords)
- Your company or agency name (optional)
- Your country or region
- Your subscription plan and billing preferences
3.2 Marketing Performance Data (Connected Source Data)
The core function of RaiseReturn is to connect to your marketing data sources and generate reports from that data. When you authorize connections to third-party platforms, we collect and temporarily store data from those platforms, including but not limited to:
- Google Analytics 4 (GA4): Sessions, users, pageviews, bounce rate, engagement rate, conversion events, traffic sources, device breakdowns, page-level performance data, and related analytics metrics
- Google Ads: Campaign names, impressions, clicks, click-through rates (CTR), ad spend, conversions, cost-per-click (CPC), return on ad spend (ROAS), and campaign-level performance data
- Meta Ads (Facebook & Instagram): Campaign and ad set performance data including reach, impressions, clicks, spend, conversions, and frequency data
- Google Search Console: Organic search clicks, impressions, average position, click-through rates, and query-level search performance data
- PageSpeed Insights: Core Web Vitals scores, Lighthouse audit results, page load performance metrics, and technical performance recommendations
Important Note on Connected DataThis marketing performance data belongs to you and your clients. We access it solely to generate reports as requested by you. We do not use this data for any purpose other than providing the Service to you, and we do not share it with third parties except as described in this Policy.
3.3 Project and Report Configuration Data
We store configuration data you create within the platform, including project names, client names you assign to projects, report templates, report settings, scheduling preferences, and branding configurations (logos, colors, styles) you upload or define.
3.4 Usage and Activity Data
We automatically collect certain information when you interact with our Service, including:
- Log data: IP address, browser type and version, operating system, referring URLs, pages visited, time and date of visits, and time spent on pages
- Device information: device type, screen resolution, and general hardware characteristics
- Feature usage: which features of the platform you use, how frequently, and in what order
- Error logs: technical error messages and stack traces generated when the Service encounters issues
3.5 Communications Data
If you contact us by email or through any support channel, we retain the content of your communications and our responses for customer service purposes and to improve our Service.
3.6 Information We Do NOT Collect
We want to be explicitly clear about data we do not collect:
- We do not collect your clients' personal information (names, emails, phone numbers of your end clients) unless you voluntarily include it in a project name or label
- We do not collect payment card numbers — all payment processing is handled by our third-party payment processor (see Section 9)
- We do not collect biometric data of any kind
- We do not purchase or receive data about you from data brokers
| Data Category | Examples | Purpose | Retention |
|---|---|---|---|
| Account data | Email, name, password hash | Authentication, communication | Until account deletion |
| Connected marketing data | GA4 sessions, Ads spend, GSC clicks | Report generation, dashboard display | Up to 90 days |
| Report files | Generated PDF, Excel, Sheets exports | Download and delivery to user | Up to 90 days |
| Project configuration | Client name, template settings, branding | Report customization | Until project deletion or account deletion |
| Usage logs | IP address, browser, feature usage | Security, troubleshooting, product improvement | Up to 90 days |
| Communications | Support emails, feedback messages | Customer service | Up to 2 years |
4. How We Collect Your Information
4.1 Information You Provide Directly
We collect information when you create an account, connect a data source, configure a project, upload branding assets, make a payment, or contact our support team.
4.2 OAuth Authorization (Data Source Connections)
When you connect a data source (such as Google Analytics, Google Ads, or Meta Ads) to RaiseReturn, you authorize us to access that data through the platform's official OAuth 2.0 authorization flow. This means:
- You are directed to the third-party platform (e.g., Google or Meta) to grant permission
- RaiseReturn receives an access token issued by that platform
- We use that token to fetch data on your behalf when you generate reports or view dashboards
- We store the access token and, where applicable, a refresh token to maintain your connection
- You can revoke our access at any time through your account settings or through the third-party platform's security settings
4.3 Automated Collection (Cookies and Similar Technologies)
We use cookies and similar tracking technologies to collect usage data automatically when you use our website and platform. See Section 10 for full details.
4.4 Scheduled Data Fetches
For users who configure automated reporting, RaiseReturn periodically fetches data from connected sources on your behalf according to your configured schedule. This data is fetched, processed for report generation, and stored temporarily as described in our retention policies.
5. How We Use Your Information
We use the information we collect for the following specific purposes:
5.1 To Provide and Operate the Service
- To create and maintain your account
- To authenticate your identity and secure your account
- To connect to your authorized data sources and fetch performance data
- To generate reports and analytics dashboards as requested by you
- To store generated reports for your download and access
- To apply your configured branding, templates, and settings to reports
- To deliver reports to you or to your configured destinations
5.2 To Process Payments
We use your billing information to process subscription payments through our payment processor. We do not store your full payment card details.
5.3 To Communicate With You
- To send transactional emails related to your account (e.g., registration confirmation, password reset, payment receipts, report delivery notifications)
- To send service announcements, product updates, and important notices about changes to the Service or this Policy
- To respond to your support inquiries and feedback
- To send marketing communications about new features or promotions, where you have consented to receive such communications (you may opt out at any time)
5.4 To Improve and Develop the Service
- To analyze how users interact with our features in order to improve usability and functionality
- To identify and fix technical bugs and errors
- To understand which features are most and least valuable to users
- To develop new features and capabilities
5.5 For Security and Fraud Prevention
- To monitor for and investigate suspicious activity or unauthorized access
- To enforce our Terms of Service and other applicable policies
- To comply with applicable legal obligations
5.6 What We Will Never Do With Your Data
Absolute CommitmentsWe will never sell your personal information or your connected marketing data to any third party. We will never use your clients' marketing performance data to serve advertising to you or anyone else. We will never share your data with competitors or use it for any purpose inconsistent with this Privacy Policy without your explicit consent.
6. Data Storage and Retention
6.1 Where Your Data Is Stored
RaiseReturn's infrastructure and data storage is cloud-based. Data may be stored and processed on servers located in various jurisdictions, including but not limited to the United States and other countries where our hosting and infrastructure providers operate. By using the Service, you consent to the transfer of your information to these locations.
6.2 Data Retention Periods
We retain different categories of data for different periods based on operational necessity:
- Connected marketing performance data (GA4 data, Google Ads data, Meta data, GSC data, PageSpeed data): Retained for a maximum of 90 days from the date of collection. Data older than 90 days is purged from our systems on a rolling basis. This data is used to power your dashboard views and report history.
- Generated report files (PDF, Excel, Google Sheets exports): Stored for up to 90 days from the date of generation, after which they are deleted. You should download and retain copies of reports you wish to keep permanently.
- Account data (email, name, settings): Retained for as long as your account is active. Upon account deletion, account data is deleted within 30 days, except where retention is required by applicable law.
- OAuth access tokens and refresh tokens: Retained for as long as your data source connection is active. Revoked immediately upon your disconnection of a data source or deletion of your account.
- Billing and transaction records: Retained for a minimum of 7 years to comply with applicable financial record-keeping requirements.
- Support and communication records: Retained for up to 2 years from the date of the communication.
- Usage logs and system logs: Retained for up to 90 days for security and troubleshooting purposes.
6.3 Data Deletion
You may request deletion of your account and associated data at any time by contacting us at hello@raisereturn.com or through your account settings if a self-service deletion option is available. We will process deletion requests within 30 days. Please note that certain data may be retained for longer periods where required by law or for legitimate business purposes (e.g., financial records).
7. Data Security
7.1 Our Security Practices
We take data security seriously and implement a range of administrative, technical, and organizational measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include:
- Access controls: Access to user data within our systems is restricted to authorized personnel only, on a need-to-know basis
- Secure authentication: Account access is protected by password authentication. Passwords are stored in hashed form using industry-standard hashing algorithms — we cannot retrieve your plaintext password
- HTTPS: All communications between your browser and our Service are transmitted over HTTPS (TLS), which encrypts data in transit
- OAuth for third-party connections: We access your connected data sources exclusively through official OAuth 2.0 authorization flows — we do not store your Google or Meta login credentials
- Regular security monitoring: We monitor our systems for unusual activity and potential security threats
7.2 Important Limitations
Please Read CarefullyRaiseReturn does not currently implement at-rest encryption for all data stored on our servers. While data in transit between your browser and our Service is protected by HTTPS/TLS, data stored in our databases and file systems may not be encrypted at the storage layer. We are working toward implementing stronger at-rest data protections as the platform matures. You should consider this when deciding what information you connect to or store within the Service.
No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee absolute security. In the event of a security breach that affects your personal data, we will notify you as required by applicable law.
7.3 Your Responsibility
You are responsible for maintaining the confidentiality of your account credentials. You should use a strong, unique password for your RaiseReturn account and should not share your login credentials with others. You should notify us immediately at hello@raisereturn.com if you suspect any unauthorized access to your account.
8. Third-Party Services and Data Sharing
8.1 Service Providers (Sub-processors)
We share data with trusted third-party service providers that help us operate and improve the Service. These providers process your data only on our behalf, for the purposes described in this Policy, and are contractually obligated to handle your data securely and only as directed by us. Categories of service providers we use include:
- Cloud hosting and infrastructure providers: To host our application, database, and file storage
- Payment processors: To process subscription payments (see Section 9)
- Email delivery services: To send transactional and marketing emails
- Analytics services: To understand how our website and application are used (note: this is usage analytics of our own platform, not your connected marketing data)
- Error monitoring services: To detect and diagnose technical errors in the platform
- Artificial intelligence APIs: To power AI-generated report narratives and insights (marketing performance data processed through AI services is handled for this purpose only and is not used to train third-party AI models, subject to those services' own terms)
8.2 Connected Data Source Platforms
When you connect Google Analytics, Google Ads, Meta Ads, or Google Search Console to our platform, you are also subject to those platforms' respective privacy policies and terms of service. RaiseReturn's use of Google APIs is subject to and complies with the Google API Services User Data Policy, including the Limited Use requirements.
8.3 Legal Requirements
We may disclose your information if required to do so by law, regulation, legal process (such as a subpoena or court order), or governmental request, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of RaiseReturn, our users, or the public.
8.4 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website before your information becomes subject to a different privacy policy.
8.5 No Sale of Personal Data
We do not sell, rent, or trade your personal information or your connected marketing data to third parties for their own marketing or business purposes, ever.
9. Payments and Billing
RaiseReturn uses Dodo Payments as our payment gateway to process subscription payments. When you subscribe to a paid plan, you will provide your payment information directly to Dodo Payments through their secure payment interface. RaiseReturn does not receive, process, or store your full payment card number, CVV, or banking details.
Dodo Payments processes your payment information in accordance with their own privacy policy and applicable Payment Card Industry Data Security Standards (PCI DSS). We encourage you to review Dodo Payments' privacy policy to understand how they handle your payment information.
We receive from Dodo Payments a limited set of billing information (such as the last four digits of your card, card type, expiration date, and billing name) for the purpose of displaying your subscription information within your account and for customer support purposes.
Transaction records, including the amount charged, date, and subscription period, are retained by us for a minimum of 7 years as required for financial record-keeping and tax compliance purposes.
11. Your Rights and Choices
You have several rights regarding your personal data, subject to applicable law:
11.1 Right of Access
You have the right to request a copy of the personal data we hold about you. You can access much of your account data directly through your account dashboard. To request a full data export, contact us at hello@raisereturn.com.
11.2 Right to Correction
You have the right to correct inaccurate or incomplete personal data we hold about you. You can update most account information directly through your account settings.
11.3 Right to Deletion
You have the right to request deletion of your personal data. We will honor such requests within 30 days, subject to legal retention obligations. Deleting your account will also remove your connected data source authorizations and purge your stored marketing performance data.
11.4 Right to Data Portability
Where technically feasible, you have the right to receive your personal data in a structured, machine-readable format.
11.5 Right to Withdraw Consent
Where we process your data on the basis of consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
11.6 Right to Disconnect Data Sources
You may disconnect any connected data source (GA4, Google Ads, Meta Ads, GSC, PageSpeed) at any time through your account settings. Upon disconnection, we will cease fetching data from that source, and any stored data from that source will be purged on our next scheduled data cleanup cycle (within 90 days).
11.7 Marketing Communications
You may opt out of receiving marketing emails from us at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us directly. You will continue to receive transactional and service-related emails necessary for the operation of your account.
To exercise any of your rights, please contact us at hello@raisereturn.com. We will respond to all valid requests within 30 days.
12. Children's Privacy
The RaiseReturn Service is intended exclusively for use by individuals who are at least 18 years of age and who are using the Service for professional or business purposes. We do not knowingly collect personal information from children under the age of 13 (or the applicable minimum age in the user's jurisdiction).
If you believe we have inadvertently collected personal information from a child under the applicable minimum age, please contact us immediately at hello@raisereturn.com and we will take prompt steps to delete such information.
13. International Data Transfers
RaiseReturn is a globally available service. Your information may be collected, transferred to, and stored and processed in countries other than your country of residence, including the United States, where data protection laws may differ from those in your country.
Where we transfer personal data from the European Economic Area (EEA) or the United Kingdom to countries that have not been determined to provide an adequate level of data protection, we use appropriate safeguards, such as standard contractual clauses approved by the European Commission.
By using the Service and providing us with your information, you consent to this transfer, storage, and processing.
14. California Privacy Rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) may provide you with additional rights regarding your personal information.
14.1 Categories of Personal Information Collected
In the preceding 12 months, we may have collected the following categories of personal information as defined under the CCPA: identifiers (such as email address and IP address), commercial information (subscription history and billing records), internet or other electronic network activity information (usage logs and browser data), and professional or employment-related information (agency name, if provided).
14.2 Your California Rights
- Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business purpose for collecting it, and the categories of third parties with whom we share it.
- Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
- Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
- Right to Opt Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising. You do not need to take any action to opt out.
- Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined under the CPRA.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
To submit a verified consumer request under the CCPA/CPRA, please contact us at hello@raisereturn.com. We will verify your identity before processing your request.
15. GDPR Rights (EEA and United Kingdom Users)
If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) or the UK GDPR may apply to our processing of your personal data.
15.1 Legal Bases for Processing
We process your personal data on the following legal bases:
- Contract performance: Processing necessary to provide the Service you have subscribed to, including account management, report generation, and payment processing
- Legitimate interests: Processing for our legitimate business interests, such as improving the Service, fraud prevention, and security monitoring, where these interests are not overridden by your rights
- Legal obligation: Processing required to comply with applicable laws, such as tax and financial record-keeping requirements
- Consent: Processing based on your explicit consent, such as marketing communications (which you may withdraw at any time)
15.2 GDPR Rights
In addition to the rights described in Section 11, EEA and UK users have the right to lodge a complaint with your local supervisory authority if you believe we have not handled your personal data in accordance with applicable data protection law.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes to this Policy, we will:
- Update the "Last Updated" date at the top of this page
- Notify registered users by email to the address associated with their account
- For significant changes, provide a prominent notice on our website or within the Service
Your continued use of the Service after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically.
17. How to Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us at:
RaiseReturn — Privacy InquiriesEmail: hello@raisereturn.com
Website: raisereturn.com
We aim to respond to all privacy-related inquiries within 30 calendar days. For GDPR-related requests, we will respond within the timeframes required by applicable law.