1. Who is responsible?

Advisionr is responsible for the processing described in this policy. Questions or privacy requests can be sent to info@advisionr.com.

2. Data we process

We process account and organization details, service settings, technical and security logs, billing administration and data that a user chooses to connect from advertising and analytics services. We only access data needed to provide the Advisionr features selected by the user.

3. Google user data and OAuth permissions

Para Google Analytics, Advisionr solicita openid y email para identificar la cuenta y https://www.googleapis.com/auth/analytics.readonly para leer los datos de propiedades e informes de Analítica seleccionados por el usuario. Advisionr no solicita acceso de escritura a Google Analytics ni modifica datos de Google Analytics. Para Google Ads, Advisionr solicita https://www.googleapis.com/auth/adwords para obtener datos de cuentas, campañas, anuncios, palabras clave, segmentación, pujas, presupuestos y rendimiento y, solo cuando se inicia o autoriza desde Advisionr, crear o modificar recursos de Google Ads compatibles. El acceso de solo lectura a Google Ads no permitiría realizar estos cambios autorizados por el usuario.

4. How Google data is used

Los datos de usuario de Google se utilizan exclusivamente para ofrecer y mejorar funciones visibles de Advisionr para el usuario conectado, como paneles, sincronización, diagnósticos, análisis, recomendaciones de optimización, propuestas en el Centro de acciones, ejecución de cambios autorizados, controles para deshacer cambios y de seguridad, y medición de resultados. Los datos de usuario de Google no se venden ni se utilizan para publicidad no relacionada, decisiones de crédito o vigilancia.

5. Sharing, transfer and disclosure

We do not sell Google user data. We disclose or transfer data only when necessary to operate user-facing Advisionr functionality, to service providers acting on our behalf, for security, or where required by law. Depending on the enabled feature, limited data may be processed by infrastructure providers and by AI service providers OpenAI, Anthropic and Google to generate the analysis or recommendation requested within Advisionr. Such processing is limited to providing the Advisionr feature and is not authorized by Advisionr for independent advertising, data brokerage or unrelated purposes.

6. AI processing

Where an Advisionr feature uses AI, only information considered necessary for that feature is sent to the configured AI provider. Advisionr uses AI output to provide user-facing analysis, explanations, recommendations or creative assistance. Advisionr does not sell Google user data or intentionally provide Google user data for the purpose of training a general-purpose AI model. Provider processing remains subject to the applicable service agreements and data-processing terms.

7. Data protection and security

Advisionr uses HTTPS/TLS for data in transit, access controls and server-side authorization, and encrypts stored Google OAuth access and refresh tokens using AES-256-GCM. Credentials and API secrets are kept server-side. We use logging, monitoring, least-access practices and technical controls intended to prevent unauthorized access, alteration, loss or disclosure.

8. Retention

Connected Google data is retained only for as long as needed to provide the service, maintain user-visible history and results, meet security requirements or comply with legal obligations. Detailed performance datasets and operational logs are subject to configured retention and cleanup policies. When a subscription ends, organization data is scheduled for deletion after a 180-day retention period unless an earlier valid deletion request applies. Data that must be retained by law, such as certain financial records, may be kept for the legally required period and isolated from normal product use.

9. Revocation and deletion

A user can revoke Google access from their Google Account at any time and can request deletion of Google-derived data or the full Advisionr account. Revocation stops new API access but does not by itself delete data already imported. Valid deletion requests are normally handled within 30 days. Deleted data may remain temporarily in protected backups until the regular backup cycle expires and is not restored for ordinary product use.

10. API de Google Services User Data Policy

Advisionr’s use and transfer of information received from Google APIs adheres to the API de Google Services User Data Policy, including the Limited Use requirements. We request only permissions that are necessary for production-ready, user-facing Advisionr functionality.

11. Your choices and rights

You may ask for access, correction or deletion of your personal data and, where applicable, object to or restrict processing. You may disconnect integrations and withdraw OAuth access at any time. Solicitudes may require verification of identity and authority for the relevant organization.

12. Contact

Privacy, Google user data and deletion questions can be sent to info@advisionr.com.

Lea las instrucciones para la eliminación de datos de usuario.