GDPR Compliance

At TheMetrics, we are committed to protecting and respecting your privacy. This GDPR Compliance statement explains how we comply with the General Data Protection Regulation (GDPR) in relation to your personal data.

1. Our Commitment to GDPR Compliance

As a company that processes personal data of individuals within the European Union, we are committed to complying with the GDPR. This means that we:

• Process personal data lawfully, fairly, and in a transparent manner
• Collect personal data only for specified, explicit, and legitimate purposes
• Process only personal data that is adequate, relevant, and limited to what is necessary
• Ensure personal data is accurate and kept up to date
• Store personal data only for as long as necessary
• Process personal data in a manner that ensures appropriate security
• Are able to demonstrate compliance with these principles

2. Who We Are

TheMetrics is an engineering analytics platform for ClickUp teams. We are based in the United States but serve customers globally, including those in the European Union.

For the purposes of the GDPR, TheMetrics, Inc. is the data controller for personal data collected through our website and Service. Our Data Protection Officer can be contacted at [email protected].

3. What Personal Data We Collect

We collect personal data as outlined in our Privacy Policy. This includes:

• Identity and contact information (name, email address, phone number)
• Account credentials for our Service
• ClickUp integration data, which may contain personal data of your team members
• Technical data (IP address, browser type, device information)
• Usage data related to how you interact with our Service
• Marketing and communications preferences

4. Legal Basis for Processing

Under the GDPR, we must have a legal basis for processing your personal data. We rely on the following legal bases:

4.1 Contract

Where we need to process your personal data to fulfill our contractual obligations to you, such as providing our Service after you have subscribed.

4.2 Legitimate Interests

Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. For example, we may process your data to improve our products and services or for direct marketing of relevant services.

4.3 Consent

Where you have given clear consent for us to process your personal data for a specific purpose. For example, we may rely on your consent to send marketing communications or to use certain types of cookies.

4.4 Legal Obligation

Where we need to process your personal data to comply with a legal or regulatory obligation.

5. Your Rights Under the GDPR

The GDPR provides you with several rights regarding your personal data. These include:

5.1 Right to Be Informed

You have the right to be informed about how we collect and use your personal data. We provide this information in our Privacy Policy and in this GDPR Compliance statement.

5.2 Right of Access

You have the right to request a copy of the personal data we hold about you, as well as information about how we process it.

5.3 Right to Rectification

You have the right to have inaccurate personal data rectified, or completed if it is incomplete.

5.4 Right to Erasure

Often known as the 'right to be forgotten', you have the right to request the deletion or removal of your personal data in certain circumstances.

5.5 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

5.6 Right to Data Portability

You have the right to request that we provide your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another controller.

5.7 Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing and processing based on legitimate interests.

5.8 Rights Related to Automated Decision Making and Profiling

You have rights related to automated decision-making and profiling. Our Service does not currently make automated decisions that have significant effects on individuals.

6. How to Exercise Your Rights

You can exercise your rights by contacting our Data Protection Officer at [email protected]. We will respond to all legitimate requests within one month. Occasionally it may take us longer if your request is particularly complex or you have made several requests.

7. Data Security

We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. For more information, please see our Security page.

8. International Transfers

As we are based in the United States, personal data that we collect may be transferred to and stored at a destination outside the European Economic Area (EEA). When we transfer personal data outside the EEA, we ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules
• Adequacy decisions by the European Commission

9. Data Protection Impact Assessments

Where processing operations are likely to result in a high risk to your rights and freedoms, we carry out Data Protection Impact Assessments (DPIAs) to identify and minimize the data protection risks.

10. Data Breach Procedures

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

11. Changes to This GDPR Compliance Statement

We may update this GDPR Compliance statement from time to time. Any changes will be posted on this page with an updated revision date. Please check back regularly to keep informed of updates or changes to this GDPR Compliance statement.

12. Contact Us

If you have any questions about this GDPR Compliance statement or our data protection practices, please contact our Data Protection Officer at [email protected].