1. Who is responsible?
Advisionr is responsible for the processing described in this policy. Questions or privacy requests can be sent to info@advisionr.com.
2. Data we process
We process account and organization details, service settings, technical and security logs, billing administration and data that a user chooses to connect from advertising and analytics services. We only access data needed to provide the Advisionr features selected by the user.
3. Google user data and OAuth permissions
For Google Analytics, Advisionr requests openid and email for account identification and https://www.googleapis.com/auth/analytics.readonly to read analytics property and reporting data selected by the user. Advisionr does not request Google Analytics write access and does not modify Google Analytics data. For Google Ads, Advisionr requests https://www.googleapis.com/auth/adwords to retrieve account, campaign, ad, keyword, targeting, bidding, budget and performance data and, only when initiated or authorized through Advisionr, to create or modify supported Google Ads resources. Google Ads read-only access would not support these user-authorized changes.
4. How Google data is used
Google user data is used only to provide and improve visible Advisionr features for the connected user, including dashboards, synchronization, diagnostics, analyses, optimization recommendations, Action Center proposals, execution of user-authorized changes, rollback/safety controls and measurement of results. Google user data is not sold, used for unrelated advertising, credit decisions or surveillance.
5. Sharing, transfer and disclosure
We do not sell Google user data. We disclose or transfer data only when necessary to operate user-facing Advisionr functionality, to service providers acting on our behalf, for security, or where required by law. Depending on the enabled feature, limited data may be processed by infrastructure providers and by AI service providers OpenAI, Anthropic and Google to generate the analysis or recommendation requested within Advisionr. Such processing is limited to providing the Advisionr feature and is not authorized by Advisionr for independent advertising, data brokerage or unrelated purposes.
6. AI processing
Where an Advisionr feature uses AI, only information considered necessary for that feature is sent to the configured AI provider. Advisionr uses AI output to provide user-facing analysis, explanations, recommendations or creative assistance. Advisionr does not sell Google user data or intentionally provide Google user data for the purpose of training a general-purpose AI model. Provider processing remains subject to the applicable service agreements and data-processing terms.
7. Data protection and security
Advisionr uses HTTPS/TLS for data in transit, access controls and server-side authorization, and encrypts stored Google OAuth access and refresh tokens using AES-256-GCM. Credentials and API secrets are kept server-side. We use logging, monitoring, least-access practices and technical controls intended to prevent unauthorized access, alteration, loss or disclosure.
8. Retention
Connected Google data is retained only for as long as needed to provide the service, maintain user-visible history and results, meet security requirements or comply with legal obligations. Detailed performance datasets and operational logs are subject to configured retention and cleanup policies. When a subscription ends, organization data is scheduled for deletion after a 180-day retention period unless an earlier valid deletion request applies. Data that must be retained by law, such as certain financial records, may be kept for the legally required period and isolated from normal product use.
9. Revocation and deletion
A user can revoke Google access from their Google Account at any time and can request deletion of Google-derived data or the full Advisionr account. Revocation stops new API access but does not by itself delete data already imported. Valid deletion requests are normally handled within 30 days. Deleted data may remain temporarily in protected backups until the regular backup cycle expires and is not restored for ordinary product use.
10. Google API Services User Data Policy
Advisionr’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request only permissions that are necessary for production-ready, user-facing Advisionr functionality.
11. Your choices and rights
You may ask for access, correction or deletion of your personal data and, where applicable, object to or restrict processing. You may disconnect integrations and withdraw OAuth access at any time. Requests may require verification of identity and authority for the releoft organization.
12. Contact
Privacy, Google user data and deletion questions can be sent to info@advisionr.com.