Privacy

What we collect

• Your stable Google account identifier and email address for sign-in, private-MVP access control, and support.
• Accessible Google Ads account IDs and the account route you select.
• An encrypted Google Ads refresh token while the connection remains active.
• The product URL, bounded public product context, keyword-planning evidence, and saved runs. CSV downloads are generated from a saved run when you request them; Answer Map does not store a separate export copy.
• Short-lived OAuth transactions, session and security records, quota counters, request timing, and limited diagnostic logs. Secrets and full OAuth tokens are not written to application logs.

Answer Map does not request Search Console, Gmail, Drive, or unrelated Google data.

How the data is used

Google Ads evidence is used only for keyword research and paid-search planning. Keyword text and bounded product context may be processed by the configured AI provider under no-training terms so Answer Map can classify intent and answer fit.

Answer Map does not create or change campaigns, ads, bids, budgets, billing, or account users. Google Ads data is not presented as proof of App Store, SEO, or social demand.

Answer Map does not sell Google user data, use it for advertising or retargeting, determine creditworthiness, or use it to train a general-purpose AI model.

Processing and sharing

Vercel hosts the service and AI Gateway, a dedicated managed Postgres provider stores application data, the selected model provider processes bounded classification requests, and Google processes identity, authorization, and Google Ads API requests. Google credentials, customer identifiers, and account identity are not included in classifier prompts.

These providers receive data only as needed to operate the requested service. Answer Map does not otherwise disclose Google user data except with your consent, for security, or when legally required.

Storage and deletion

OAuth transaction records expire automatically. Refresh tokens are encrypted at rest and retained only while a connection remains active. Saved runs remain until you delete them or delete the account. Limited backups and security logs may persist until they age out under infrastructure-provider retention schedules.

Disconnecting Google Ads attempts to revoke the Google token and always deletes the locally stored refresh token and routes. Account deletion removes the stored identity, connections, routes, saved runs, and owner-linked quota records. It cannot remove CSV files you already downloaded to your own device. You can also revoke access from Google Account permissions.

Google API data

Use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Privacy questions and deletion requests can be sent to dash@doubledash.me. Material changes will update the effective date and require new consent before Google data is used for a new purpose.