360 Analytics

by Amalgam Partners

Privacy Policy

Last updated: October 2026

1. Introduction

Welcome to 360 Analytics ("the Service"), a business analytics platform developed and operated by Amalgam Partners ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use our Service.

By installing or using 360 Analytics, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Business Data from Point-of-Sale Systems

When you install 360 Analytics and authorize access to your point-of-sale account (Clover, Square, or other supported platforms), we collect the following data:

  • Payment and transaction records

  • Order history and line item details

  • Menu items, categories, and associated costs

  • Inventory counts (stock levels per item), where your point-of-sale platform provides them

  • Customer and loyalty program data, including loyalty program structure, enrolled members, and points balances

  • Employee information

  • Discount and promotion records

  • Merchant profile information (business name, address, timezone)

  • Tax configuration data

  • Cash drawer records

2.2 QuickBooks Financial Data (Pro and Business plans)

If you choose to connect your QuickBooks Online account we collect the following financial data in read-only mode:

  • Profit and Loss report data (income, expenses, net profit by period)

  • Expense transactions including date, amount, category, and vendor

  • Company information (business name, address)

  • Chart of accounts structure

This data is only collected after you explicitly authorize the QuickBooks connection via Intuit's OAuth flow. You can disconnect QuickBooks at any time. We never write, modify, or delete data in your QuickBooks account.

2.3 Bank and Credit Card Data (Plaid)

If you choose to connect your bank or credit card accounts, we use Plaid Technologies, Inc. ("Plaid") to securely link them. We collect and store the following, in read-only mode:

  • The name of your financial institution

  • Account names, account types, and the last four digits of each account number

  • Current and available balances

  • An access token that lets us retrieve data from Plaid on your behalf, which we store encrypted

We also access transaction data through Plaid in order to identify your recurring charges, such as subscriptions and fixed costs. We do not store individual transactions. The list of recurring charges is retrieved from Plaid each time you view it and is not saved in our database.

You enter your bank login credentials directly into Plaid's interface. We never see or store them. Plaid collects and uses your information under its own End User Privacy Policy, available at plaid.com/legal. This data is only collected after you explicitly authorize the connection through Plaid. We cannot move money, make payments, or change anything in your accounts.

2.4 Google Reviews Data (Pro and Business plans)

With your authorization, we collect publicly available Google reviews for your business using your Google Business Place ID. This includes reviewer names, star ratings, review text, and review dates.

2.5 Social Media Data (Pro and Business plans)

If you choose to connect your social media accounts, we collect performance data from Instagram, TikTok, Facebook, and Google Business Profile through our integration with Metricool. This includes:

  • Follower counts and growth over time

  • Post reach and impressions

  • Engagement rates and interactions

  • Video views and watch time

  • Individual post performance metrics

  • Google Business Profile search visibility and action data

This data is only collected after you explicitly authorize the connection. You can disconnect your social media accounts at any time by contacting contact@amalgampartners.com.

2.6 Account Information

When you create an account we collect your email address, password, and business name. Your password is handled by our authentication provider, which stores it in hashed form. We do not store it in readable form.

If you choose to turn on optional two-factor authentication, our authentication provider also stores the information needed to verify your authenticator app, and a record that two-factor authentication is enabled on your account. Each time you sign in with two-factor authentication on, you enter a one-time code from your authenticator app, and our authentication provider checks it. We do not collect or store your one-time codes, and two-factor authentication does not require your phone number.

2.7 Billing Information

If you subscribe directly (rather than through an app marketplace), your card details are collected and processed by Stripe, Inc. ("Stripe") and go directly to Stripe. We do not receive or store your full card number, card brand, or last four digits. We store only the identifiers Stripe assigns to your customer record and subscription, your plan, your subscription status, and your trial end date.

2.8 Usage Data

We may collect information about how you interact with the Service including pages viewed, features used, and time spent on the platform.

2.9 Weather Data (Pro and Business plans)

We collect publicly available weather data for your business location from Open-Meteo to provide weather context alongside your sales data.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service

  • Generate analytics, reports, and insights about your business

  • Power the AI assistant that answers questions about your business data (Pro and Business plans)

  • Display financial data from QuickBooks alongside your sales data (Pro and Business plans)

  • Show your connected bank and credit card accounts, balances, and recurring subscriptions and fixed costs

  • Process subscription payments and manage your billing

  • Send you weekly and monthly email digests (Pro and Business plans)

  • Improve and develop new features for the Service

  • Respond to your support requests and feedback

  • Detect and prevent fraudulent or unauthorized activity

Data from your connected bank and credit card accounts is not used by the AI assistant and is not included in email digests.

4. How We Share Your Information

We do not sell your data to third parties. We share your data only in the following limited circumstances:

4.1 Anthropic (AI Assistant — Pro and Business plans)

We use Anthropic's Claude AI to power the conversational AI assistant. When you ask a question, relevant portions of your business data are sent to Anthropic's API to generate a response. Your data is not used to train Anthropic's AI models. See anthropic.com/privacy for more information.

4.2 Resend (Email Delivery — Pro and Business plans)

We use Resend to deliver weekly and monthly email digests. See resend.com/legal/privacy-policy for more information.

4.3 DataForSEO (Google Reviews — Pro and Business plans)

We use DataForSEO to fetch your publicly available Google reviews. See dataforseo.com/privacy-policy for more information.

4.4 Metricool (Social Media Analytics — Pro and Business plans)

We use Metricool to collect and analyze social media performance data. When you connect your Instagram, TikTok, Facebook, or Google Business Profile accounts, those accounts are linked to Metricool's service on your behalf. We never access your social media passwords. See metricool.com/privacy-policy for more information.

4.5 Intuit QuickBooks (Financial Data — Pro and Business plans)

If you connect your QuickBooks Online account, we access your financial data via Intuit's API in read-only mode. We never create, modify, or delete records in your QuickBooks account. Authentication is handled through Intuit's secure OAuth 2.0 flow. See intuit.com/privacy for more information.

4.6 Plaid (Bank and Credit Card Connections)

If you connect your bank or credit card accounts, Plaid securely connects to your financial institution and shares your account and transaction data with us in read-only form. Plaid also processes information you provide to it, such as your bank login credentials and, where you choose, a phone number, under its own privacy policy. We do not receive your bank login credentials. See plaid.com/legal for Plaid's End User Privacy Policy. You can view and manage the connections you have made through Plaid at my.plaid.com.

4.7 Stripe (Payment Processing)

If you subscribe directly, Stripe processes your payment. Your card details go to Stripe, which shares with us only the customer and subscription identifiers and payment status needed to manage your account. See stripe.com/privacy for more information.

4.8 Open-Meteo (Weather Data — Pro and Business plans)

We use Open-Meteo to fetch weather data for your business location. This is a public API and no personal data is shared.

4.9 Infrastructure Providers

We use cloud infrastructure providers to host and operate the Service and store your data, including Supabase (database and authentication), Railway (application hosting), and Vercel (web hosting). These providers process data on our behalf under their own security and privacy commitments and do not use it for their own purposes.

4.10 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority.

4.11 Business Transfer

If Amalgam Partners is involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your business data for as long as your account is active and your subscription is in good standing.

If you cancel your subscription or uninstall 360 Analytics:

  • Your data will be retained for 90 days following cancellation

  • During this period you may reactivate your account and all data will be restored

  • After 90 days all data associated with your account, including stored bank and credit card account details, will be permanently deleted, and our access to your connected accounts through Plaid will be revoked

  • You will receive an email notification before permanent deletion occurs

If you disconnect your bank or credit card accounts at any time, we revoke our access with Plaid and immediately delete the account details we have stored for that connection.

You may request immediate deletion of your data at any time by contacting contact@amalgampartners.com.

6. Data Security

We implement industry-standard security measures including:

  • All data encrypted in transit using TLS/SSL

  • Database access restricted to authorized personnel and systems only

  • API tokens and credentials stored securely and never exposed publicly

  • Strict data isolation — no merchant can access another merchant's data

  • QuickBooks OAuth tokens stored encrypted and refreshed automatically

  • Plaid access tokens stored encrypted

  • Passwords stored hashed by our authentication provider

  • Optional two-factor authentication using an authenticator app, which you can turn on or off at any time from your dashboard settings

  • Card details handled directly by Stripe and never stored on our servers

7. Your Rights and Choices

You have the right to:

  • Access your data by logging into your dashboard or contacting us

  • Correct inaccurate information by updating your account settings

  • Delete your data by cancelling your subscription and requesting deletion

  • Export your data by contacting us at contact@amalgampartners.com

  • Opt out of email digests by contacting us

  • Disconnect your social media accounts at any time

  • Disconnect your QuickBooks account at any time from your dashboard settings

  • Disconnect your bank and credit card accounts (Plaid) at any time from your dashboard settings, or manage connections through Plaid at my.plaid.com

  • Turn optional two-factor authentication on or off at any time from your dashboard settings

8. Children's Privacy

360 Analytics is intended for business owners and operators. We do not knowingly collect personal information from anyone under the age of 18.

9. International Users

360 Analytics is operated from the United States. By using the Service you consent to the transfer of your information to the United States. For EEA users additional rights under GDPR apply including data portability and the right to lodge a complaint with your local supervisory authority.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email and within the dashboard. Continued use after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy please contact:

Amalgam Partners Email: contact@amalgampartners.com Website: amalgampartners.com