Privacy Policy

1. Information we collect

• Account information: your name, email address, business name, workspace membership and role.
• Authentication data: OAuth tokens issued when you connect Google Ads, Google Analytics 4, Google Search Console or Google Merchant Center. Refresh tokens are encrypted at rest. We never see or store your Google password.
• Advertising and analytics data: campaign, ad group, keyword, search-term, product-feed, conversion and site-performance data read through the official Google APIs.
• Activity data: recommendations shown, approvals made, changes pushed, reversals, and the audit trail of who did what and when.
• Billing data: subscription status, plan, billing period and payment records. Card details are handled by our payment provider and are never stored on our systems.
• Technical data: sign-in events, pages used, error logs and diagnostics used to keep the service secure and working.

2. How we use it

Our lawful bases are performance of our contract with you, our legitimate interest in keeping the service secure and improving it, and legal obligation where record-keeping is required.

• To run the checks that produce recommendations, and to show you the evidence behind each one.
• To apply changes you have approved, read them back from Google, and measure what happened afterwards.
• To send service email such as the morning digest, billing notices and security messages.
• To provide support, investigate incidents and prevent abuse.
• To improve the accuracy of our detection and measurement, using aggregated data that cannot identify you or your accounts.

3. Artificial intelligence

Some features use AI models to classify search intent, summarise performance and draft copy for your review. Data sent to those models is limited to the account being worked on, is stripped of personal contact details where present, and is never used by us to train public models.

AI output is advisory. It cannot create, approve, push or reverse a change; a person in your workspace must approve anything that reaches Google.

4. Who we share it with

We do not sell, rent or share your advertising data for marketing. We share data only with the subprocessors needed to run the platform, each under confidentiality and security obligations:

• Google (Ads, Analytics, Search Console, Merchant Center), the source of, and destination for, your advertising data.
• Our cloud hosting and database provider, application hosting and storage.
• Our AI model provider, the limited, account-scoped inputs described above.
• Our payment provider, subscription billing, tax and receipts.
• Our email provider, service and notification email.

5. Where data is held and for how long

Data is stored on secure cloud infrastructure inside the UK/EU or in countries with equivalent safeguards, using standard contractual clauses where required.

We keep advertising and performance data for as long as your workspace is active, and for up to 12 months after it closes so that history and measurement remain available if you return. Audit records of approvals and changes are kept for 6 years. Billing records are kept for 7 years to meet UK tax requirements. Backups are rotated within 35 days.

6. Security

Access to production systems is restricted, authenticated and logged. Each workspace's data is separated at the database level so one customer cannot see another's. Sensitive credentials are encrypted at rest. Our staff support views are read-only and audited; our staff cannot approve, push or reverse changes in your account.

7. Your rights

You can access, correct, export or delete your data, object to or restrict processing, and withdraw consent for a connected Google account at any time by disconnecting it in the platform.

To make a request, email accounts@mesmerise.media. We respond within one month. You also have the right to complain to the UK Information Commissioner's Office.

8. Cookies

We use essential cookies to keep you signed in and to protect your session. We do not use advertising cookies or third-party tracking on the app.

9. Changes and contact

We may update this policy as the service develops; the current version and its date are shown on this page and material changes are notified by email or in the platform. For any privacy question, email accounts@mesmerise.media.