1. Who is responsible?
Advisionr is responsible for the processing described in this policy. Questions or privacy requests can be sent to info@advisionr.com.
2. Data we process
We process account and organization details, service settings, technical and security logs, billing administration and data that a user chooses to connect from advertising and analytics services. We only access data needed to provide the Advisionr features selected by the user.
3. Google user data and OAuth permissions
Per Google Analytics, Advisionr richiede openid ed email per identificare l’account e https://www.googleapis.com/auth/analytics.readonly per leggere i dati delle proprietà e dei report Analytics selezionati dall’utente. Advisionr non richiede accesso in scrittura a Google Analytics e non modifica i dati di Google Analytics. Per Google Ads, Advisionr richiede https://www.googleapis.com/auth/adwords per recuperare dati relativi ad account, campagna, annunci, parole chiave, targeting, offerte, budget e prestazioni e, solo quando l’azione viene avviata o autorizzata tramite Advisionr, creare o modificare le risorse Google Ads supportate. L’accesso in sola lettura a Google Ads non sarebbe sufficiente per queste modifiche autorizzate dall’utente.
4. How Google data is used
I dati utente di Google vengono usati esclusivamente per fornire e migliorare le funzionalità visibili di Advisionr per l’utente collegato, tra cui dashboard, sincronizzazione, diagnostica, analisi, consigli di ottimizzazione, proposte nel Centro azioni, esecuzione delle modifiche autorizzate, controlli di annullamento e di sicurezza e misurazione dei risultati. I dati utente di Google non vengono venduti né usati per pubblicità non correlata, decisioni sul credito o sorveglianza.
5. Sharing, transfer and disclosure
We do not sell Google user data. We disclose or transfer data only when necessary to operate user-facing Advisionr functionality, to service providers acting on our behalf, for security, or where required by law. Depending on the enabled feature, limited data may be processed by infrastructure providers and by AI service providers OpenAI, Anthropic and Google to generate the analysis or recommendation requested within Advisionr. Such processing is limited to providing the Advisionr feature and is not authorized by Advisionr for independent advertising, data brokerage or unrelated purposes.
6. AI processing
Where an Advisionr feature uses AI, only information considered necessary for that feature is sent to the configured AI provider. Advisionr uses AI output to provide user-facing analysis, explanations, recommendations or creative assistance. Advisionr does not sell Google user data or intentionally provide Google user data for the purpose of training a general-purpose AI model. Provider processing remains subject to the applicable service agreements and data-processing terms.
7. Data protection and security
Advisionr uses HTTPS/TLS for data in transit, access controls and server-side authorization, and encrypts stored Google OAuth access and refresh tokens using AES-256-GCM. Credentials and API secrets are kept server-side. We use logging, monitoring, least-access practices and technical controls intended to prevent unauthorized access, alteration, loss or disclosure.
8. Retention
Connected Google data is retained only for as long as needed to provide the service, maintain user-visible history and results, meet security requirements or comply with legal obligations. Detailed performance datasets and operational logs are subject to configured retention and cleanup policies. When a subscription ends, organization data is scheduled for deletion after a 180-day retention period unless an earlier valid deletion request applies. Data that must be retained by law, such as certain financial records, may be kept for the legally required period and isolated from normal product use.
9. Revocation and deletion
A user can revoke Google access from their Google Account at any time and can request deletion of Google-derived data or the full Advisionr account. Revocation stops new API access but does not by itself delete data already imported. Valid deletion requests are normally handled within 30 days. Deleted data may remain temporarily in protected backups until the regular backup cycle expires and is not restored for ordinary product use.
10. API Google Services User Data Policy
Advisionr’s use and transfer of information received from Google APIs adheres to the API Google Services User Data Policy, including the Limited Use requirements. We request only permissions that are necessary for production-ready, user-facing Advisionr functionality.
11. Your choices and rights
You may ask for access, correction or deletion of your personal data and, where applicable, object to or restrict processing. You may disconnect integrations and withdraw OAuth access at any time. Richieste may require verification of identity and authority for the relevant organization.
12. Contact
Privacy, Google user data and deletion questions can be sent to info@advisionr.com.