Privacy Policy
Last updated: April 1, 2026
1. Introduction
Horizon Factory ("we", "our", "us") operates the Horizon platform at horizonfactory.tech. This Privacy Policy explains how we collect, use, and protect your personal data when you use our services.
2. Data We Collect
We collect the following types of data:
- Account information: name, email address, and password (hashed) when you sign up.
- Organization data: organization name and settings you configure.
- Google Analytics data: website analytics metrics accessed through the Google Analytics API on your behalf, using OAuth authorization.
- Google Search Console data: search performance data accessed through the Google Search Console API on your behalf, using OAuth authorization.
- LinkedIn data: public post metrics and engagement data from connected LinkedIn accounts via third-party integrations.
- Usage data: pages visited, features used, and interactions within the platform for improving our service.
3. How We Use Your Data
- To provide and operate the Horizon platform and its features.
- To display your Google Analytics and Search Console data within our dashboard.
- To generate marketing insights and analytics reports.
- To send transactional emails (verification, password reset, notifications).
- To improve and develop new features.
4. Google API Data
When you connect your Google account, we request access to Google Analytics and Google Search Console data through OAuth 2.0. We adhere to the Google API Services User Data Policy, including the Limited Use requirements:
- We only access data necessary to provide the features you use.
- We do not sell, rent, or share your Google data with third parties.
- We do not use your Google data for advertising purposes.
- Your Google data is stored securely and access tokens are encrypted.
- You can revoke access at any time from your Google Account settings or from within Horizon.
5. Data Storage & Security
Your data is stored on secure servers. We use encryption for sensitive data including passwords (bcrypt) and API tokens (AES-256). Access to production systems is restricted to authorized personnel only.
6. Data Sharing
We do not sell or rent your personal data. We may share data only with:
- Service providers: Brevo (transactional emails), Stripe (payments), and infrastructure providers necessary to operate the platform.
- Legal requirements: if required by law or to protect our rights.
7. Your Rights
Under GDPR and applicable data protection laws, you have the right to:
- Access your personal data.
- Correct inaccurate data.
- Request deletion of your data.
- Revoke third-party integrations (Google, LinkedIn) at any time.
- Export your data.
8. Cookies
We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.
9. Contact
For any questions about this Privacy Policy or to exercise your data rights, contact us at: contact@horizonfactory.fr