GA4 Data Access and Analytics System User Agreement

1. Parties and Purpose

This agreement is entered into between Datalytix360 Analytics and Consulting Services Joint Stock Company (“Datalytix360”) and the company connecting its Google Analytics 4 (“GA4”) account to the Datalytix360 platform (“User”). The purpose of this agreement is to ensure that data obtained through GA4 API and Google Auth is processed and analyzed securely, lawfully, and transparently.

2. Data Scope & Permissions

- Datalytix360 only requests “analytics.readonly” access.
- This access includes reporting and analytical data only; it does not allow any modifications to the user’s GA4 account.
- Access remains valid as long as the user authorizes it. The user may revoke access or extend the token period at any time.

3. Data Retention & Deletion Policy

- Data is retained for 5 years unless the user requests deletion.
- The user may disconnect access and request data deletion through the “Google Authentication” section of the dashboard. Deletion requests are processed within 3 business days.
- If a user account is terminated, the company can email support@datalytix360.com to request data deletion.

4. Data Anonymization / Identity Linkage

- Data is anonymized and used solely for sector-based analysis.
- Benchmark reports are generated using anonymous data; no company-specific or commercial information is shared.
- Benchmark comparisons require at least 5 companies within a sub-sector. If unavailable, main sector averages are used.

5. Data Transfer & Hosting

- All data is hosted on Amazon Web Services (AWS) servers located in Ireland.
- By accepting this agreement, the user grants Datalytix360 explicit authorization to store and process data abroad.

6. Security & Access Controls

- Database access is restricted to authorized personnel and requires two-factor authentication.
- Employees cannot access individual company data; they only view aggregated, anonymized reports.
- The system is protected using TLS/SSL encryption, data integrity checks, and regular penetration testing.
- Physical security controls and compliance with ISO 27001 standards are maintained.

7. Liability & Compensation

- Datalytix360 is responsible for any data loss, leakage, or unauthorized access and must notify affected users.
- However, Datalytix360’s total liability shall not exceed the annual subscription fee for the related service year.
- Datalytix360 cannot be held liable for disruptions caused by third parties, including Google API shutdowns.

8. Force Majeure

Force majeure events include natural disasters, wars, pandemics, infrastructure outages, government actions, or Google service interruptions. During such events, Datalytix360 may suspend obligations without penalty.

9. Term / Termination & Refunds

- The service term covers 1 year from the invoice payment date. - If service downtime exceeds 48 hours, the user may terminate the contract and receive a refund for the remaining service period within 7 business days. - No penalty applies for termination; justified cancellations receive proportional refunds.

10. Dispute Resolution & Jurisdiction

- Any dispute between the parties shall first go through a mediation process.
- If no resolution is reached, Istanbul (Central) Courts and Enforcement Offices shall have exclusive jurisdiction.

11. Privacy Policy & User Consent

- Datalytix360’s Privacy Policy is available at https://www.datalytix360.com/privacy-and-policy/.
- The user acknowledges that they have read and accepted the privacy policy.
- User consent for Google Analytics access is obtained via Google Authentication and recorded at registration.