groas Privacy Policy

1. Information We Collect

• Account and contact information: Your name, email address, business details and, when you provide it, phone number, together with information you submit in forms, support conversations or the application.
• Connected account information: Google account email addresses, account and property identifiers, permissions granted, and the OAuth access and refresh tokens needed to maintain authorized connections. Google handles the Google sign-in process; groas does not receive your Google password.
• Connected service data: The advertising, analytics, product, search and tag configuration data described in Section 2, depending on the accounts you connect and permissions you grant.
• Service records: Audit findings, reports, recommendations, chat inputs and outputs, changes made through groas, and operational logs needed to run, support and secure the service.
• Communication preferences: Your email and SMS preferences, including records of when and how you opted in or out.

2. Google Data Access and Actions on Your Behalf

Google connections use OAuth authorization. Access depends on the permissions you grant and your access to the selected Google resources. A read permission lets groas inspect data; a write permission also lets it perform the supported changes described below.

Google Ads

We read account and campaign settings, ads, keywords, search terms, budgets, bidding information, conversion actions and goals, and performance metrics such as impressions, clicks, costs, conversions and conversion values. We use this information to manage campaigns, produce reports, identify measurement problems and make changes within the services and controls you authorize. The adwords permission supports these reads and campaign-management actions, as well as conversion-setting repairs such as changing an inappropriate primary conversion to secondary.

Google Analytics 4 (GA4)

We read Analytics account and property information, data streams, event and key-event definitions, Google Ads links, and reporting data such as event counts, traffic, conversions and ecommerce performance. The analytics.readonly permission supports performance reporting and comparison of GA4 measurement with Google Ads. With analytics.edit, groas can create a missing Google Ads link and restore missing key-event definitions when you confirm an audit repair. Defining a key event does not generate website visits or events.

Google Tag Manager (GTM)

We use tagmanager.readonly to inspect accessible accounts, containers, published versions, tags, triggers and variables for conversion-tracking audits. With tagmanager.edit.containers, groas can create a workspace and add supported missing tags, including a Google tag or Conversion Linker, with the required firing configuration. With tagmanager.edit.containerversions and tagmanager.publish, groas can create and publish a container version to deliver a confirmed repair to the website using that container.

Google Merchant Center

We access Merchant Center account information, product identifiers, titles, descriptions, prices, availability, product URLs, images, labels and product status information. We use the content permission to read and manage product data, including product labels used to group products for the Shopping campaigns we manage.

Google Search Console

We read accessible properties and search-performance information, including queries, pages, clicks, impressions, click-through rates and positions, to report on and improve your website's search visibility. The webmasters.readonly permission supports these reads. With webmasters, groas can also submit sitemaps as part of the website services you authorize.

For conversion-audit repairs, groas displays the proposed change before you confirm it and records the repair outcome. Separately, campaign management and other automation can operate under the settings and instructions you authorize without requiring a separate confirmation for every action. Declining or revoking a permission may make the corresponding feature unavailable.

3. How We Use Information

We use information to deliver the features you request, maintain account connections, operate authorized advertising and website workflows, produce reports and recommendations, investigate errors and abuse, and provide customer support. We also use contact details to communicate about your account, bookings, demos and service updates, including SMS where you have opted in.

We also use connected Google data for the model training described in Section 4. We do not request access to unrelated Google services such as Gmail or Google Drive for the integrations described here.

4. AI Processing

groas uses AI to analyze relevant account and performance information, answer questions, generate recommendations and content, and support authorized actions. Inputs can include relevant Google data and information you submit to groas. This information may be processed by contracted AI inference providers and their model-hosting providers to produce results for your groas features.

Third-party AI providers are not permitted to use connected Google data to train their models or for their own independent purposes.

Training by groas: groas uses connected Google data to train shared models that are used across customers. This processing can improve results for customers other than the customer whose Google data was used in training. The restriction on training by third-party providers above does not restrict this training by groas itself.

5. Google API Services

Google integrations are subject to the Google API Services User Data Policy and the rules of the relevant Google APIs. Those requirements include restrictions on how covered data, including derived data, may be used and transferred.

We do not sell or rent Google user data, provide it to data brokers, or use it for credit or lending decisions. Our use of connected Google data, including groas's shared-model training, is described in Sections 2 through 4.

Human access to Google data is limited to authorized access for services or support you agree to, necessary security investigations, legal obligations, or other access expressly permitted by Google's applicable policies.

6. Sharing and Disclosure

We do not sell or rent your personal information. We disclose information only for the purposes described in this policy:

• Service providers: Hosting, database, storage, operational monitoring, support, communications and AI processing providers receive information needed to perform their services for groas. They must handle it under our instructions and applicable confidentiality and data-protection obligations.
• Connected services: We send configuration changes, product updates and other necessary data to the relevant Google service when carrying out the features and actions you authorize.
• Security and legal obligations: We may disclose information where necessary to investigate abuse, protect the service or comply with applicable law.
• Business transfers: If a business transfer involves Google user data, we will obtain prior affirmative consent where required by Google's applicable policies.

Google data is shared with service providers only as necessary to deliver the disclosed user-facing features with your authorization, or for another purpose expressly permitted by Google's applicable policies. Providers may process information in countries other than your own; applicable data-protection safeguards continue to apply.

7. Data Storage and Security

groas stores connection credentials and service data in server-side databases and supporting storage systems used to operate the application. We use HTTPS/TLS to protect data in transit, authenticated access and account-level authorization controls to limit access, and operational logging to help investigate failures and unauthorized activity. Access to stored information is restricted to systems and personnel that need it for authorized purposes.

We take reasonable technical and organizational measures to protect information from unauthorized access, alteration, loss and disclosure. No system can guarantee absolute security.

8. Retention and Deletion

We retain personal information and connected Google data for as long as needed to provide the services you use, maintain your requested reports and history, and meet applicable legal obligations. Retention depends on the data's purpose, whether your account or connection remains active, and whether you have requested deletion.

You can request deletion of your account or specified data by emailing scale@groas.ai. We may verify your identity and authority over the account before acting. We complete deletion of the requested data from active systems and backups within three months after verifying the request. During that period, retained backup copies are restricted to recovery and security purposes and are not used for ordinary product processing.

If applicable law requires us to retain particular records, we retain only those records for the required period, restrict their use to that purpose, and delete them when the obligation ends. Once information is no longer needed for the purposes described above, it is deleted within three months. Deleting data held by groas does not delete the original data in your Google accounts.

9. Disconnecting Google and Your Rights

You can manage connected accounts in groas under Platforms / Manage accounts and revoke groas's Google authorization through your Google Account connections settings. Revocation prevents further access through that grant once it takes effect. If you have authorized multiple connections, manage each relevant connection separately.

Revoking Google authorization does not by itself delete information already stored by groas or undo changes already made in Google. Use the deletion process in Section 8 to request removal of stored data. An account-removal action in groas may also delete associated service records; review the confirmation shown for that action.

Depending on your jurisdiction, you may have rights to access, correct, delete or obtain a copy of your personal information, restrict or object to certain processing, withdraw consent, or complain to a data-protection authority. Contact scale@groas.ai to exercise these rights. Withdrawing consent affects future processing and may prevent connected features from working.

10. SMS / Mobile Messaging

When you provide your mobile phone number through our booking form or another consent point, we may send SMS messages about your account, bookings, demos and service updates where you have opted in.

Mobile phone numbers and SMS opt-in information are not shared, sold or rented to third parties or affiliates for their marketing or promotional purposes. Communications providers may process this information only to deliver messages on our behalf.

Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help, or contact scale@groas.ai. Opting out of SMS does not affect your ability to use our services.

11. Changes to This Policy

We update this policy when our services or data practices change and show the revision date above. We will notify you of material changes through the application or an appropriate contact channel. Before accessing or using Google data for a new purpose outside your existing authorization, we will provide an updated disclosure and obtain any additional consent required by Google or applicable law.

12. Contact Us

For privacy questions, access requests, deletion requests or other concerns about groas's handling of information, email scale@groas.ai.