Privacy Policy

Some of our services ask you to sign in with Google and grant Boost Marketing's applications access to your Google accounts. This section covers the data we receive through Google APIs ("Google user data"). Where it differs from the rest of this policy, this section applies.

4.1. Data we access. We request only the permissions listed on Google's consent screen, and only those needed for the services you have engaged us for. Depending on those services, we may access:

• Basic Google account information (your name, email address, and profile picture), which we use to identify you and link the connection to your business.
• Google Ads data, through the Google Ads API: the accounts you authorize and their campaigns, ad groups, ads, keywords, audiences, budgets, bids, conversion settings, billing setup, and performance reports. This permission also lets us create and change campaigns in those accounts.
• Google Analytics data, with read-only access: account and property settings, and reports on traffic, engagement, and conversions for the properties you authorize. This permission does not let us change your Analytics configuration.

4.2. How we use it. We use Google user data only to provide and improve the features you use and the services you have engaged us for:

• Producing reports and dashboards on the performance of your accounts
• Auditing your accounts and recommending improvements
• Creating, editing, and pausing campaigns, and adjusting budgets and bids, where you have engaged us to manage your Google Ads account
• Measuring the results of our work against the goals we have agreed with you

We do not use Google user data to show advertisements to you or anyone else, including personalized, retargeted, or interest-based advertisements. Working on the campaigns in your own Google Ads account, at your request, is the service itself. We do not sell Google user data, pass it to data brokers or information resellers, use it to determine credit-worthiness or for lending purposes, or use it to build databases beyond what your services need.

4.3. AI and machine learning. We may use AI tools to analyze your account data and draft the reports and recommendations you have asked for. We do not use Google user data to develop, improve, or train generalized or non-personalized AI or machine learning models. We only use AI providers whose terms prohibit them from training their models on the data we send them.

4.4. Who can see it. Our team views Google user data only when you have engaged us to work on your accounts or have otherwise given your consent, when necessary for security purposes such as investigating abuse, to comply with applicable law, or when the data has been aggregated and anonymized for internal operations.

4.5. Sharing, transfer, and disclosure. We do not transfer or disclose Google user data to third parties except:

• To service providers that host or process the data for us in order to deliver your services, such as cloud hosting, database, and AI analysis providers. They act only on our instructions, are bound by confidentiality and data protection obligations, and may not use the data for their own purposes.
• When you ask us to, for example by sharing a report with your team or another agency you work with
• When required by law, or when necessary to protect against fraud, abuse, or security threats
• As part of a merger, acquisition, or sale of assets, in which case we will notify you and the same protections will continue to apply

4.6. How we protect it. Google user data and OAuth tokens are encrypted in transit using TLS and encrypted at rest. OAuth tokens are stored on our servers and never exposed in the browser. Access is limited to authorized staff who need it to deliver your services, and their accounts are protected with multi-factor authentication. We review access regularly and revoke it when it is no longer needed.

4.7. Retention and deletion. We keep Google user data only for as long as we need it to provide your services. When you disconnect your Google account, end your engagement with us, or ask us to delete your data, we delete your OAuth tokens immediately and delete the Google user data we hold within 30 days. The exception is any information we must keep by law, such as invoices. Reports we have already delivered to you remain yours.

You can revoke our access at any time from your Google Account permissions page at https://myaccount.google.com/permissions. Revoking access stops us from collecting new data. To have the data we already hold deleted, email us at hello@marketwithboost.com.

4.8. Limited Use. Boost Marketing's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.