Privacy Policy

Effective Date: September 2026

Adwize ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Adwize.

Adwize connects marketing data, models, and agents so teams can make governed growth decisions across an Observe → Resolve → Model → Reason → Act workflow. This policy covers our website, application, and related services (together, the "Services").

This page is written so you—and reviewers of our Google API / OAuth integrations—can clearly see what Google user data we access, why we access it, how we store and share it, how you can revoke access or request deletion, and our commitment to Google's Limited Use requirements.

1. Information We Collect

We collect information you provide directly, information from services you connect, and information we obtain automatically when you use the Services.

Account and profile information

When you register or update an account, we may collect name, email address, company or workspace name, password or authentication credentials, and related profile settings.

Payment information

If you purchase a paid plan, payment card data is processed by Stripe (or a successor payment processor) through Stripe Checkout or similar flows. Adwize does not store full primary account numbers (full card PANs). We may receive billing-related details needed to operate your subscription, such as billing email, billing address, payment status, and Stripe customer or subscription identifiers.

Usage and product data

We collect information about how you use the platform, including workspaces, connected integrations, rules, alerts, recommendations, agent workflows, dashboards, and product interactions. This helps us operate, secure, and improve the Services.

Data you connect

When you choose to connect data sources or tools, we receive the metadata and data needed to provide the features you configure. Connected sources may include, for example:

• Google products you authorize (such as Google Tag Manager, Google Analytics, Google Ads, and Google Sheets)
• Commerce and marketing platforms you connect (such as Shopify or Klaviyo)
• Warehouse and database sources you connect (such as BigQuery, Snowflake, Postgres, or similar destinations/sources you configure)

We use "including" language because available connectors may grow over time. We only receive data from sources you connect and authorize. We process connected data according to your configuration, this Privacy Policy, and any applicable customer agreements.

We do not claim write access to third-party systems beyond what you authorize for a given integration (for example, Shopify connections are used as a data source; Google write capabilities apply only where you grant the scopes described below and approve the relevant product actions).

Technical and log data

When you use our website or application, we may collect IP address, browser type, device information, approximate location derived from IP, referral URLs, and access or diagnostic logs.

Communications

If you contact us (for example for support, demos, or privacy requests), we collect the content of those communications and related contact details.

2. How We Use Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Services, including monitoring, validation, modeling, recommendations, and governed actions you configure
• Authenticate users, manage accounts and workspaces, and enforce access controls
• Process connected data sources according to your configuration
• Execute approved product actions you request (for example, certain Google Tag Manager container edits excluding publish/versioning, Google Analytics management edits, or Google Ads campaign pause/enable/budget-related actions where those features are enabled)
• Send operational alerts, notifications, and support communications
• Process subscriptions and billing through our payment processor
• Analyze usage to improve reliability, security, and user experience
• Comply with legal obligations and enforce our terms
• Communicate about product updates, security notices, and marketing where you have consented or where permitted by law

We do not sell personal information. We do not use Google user data to serve advertising to third parties, and we do not sell Google user data.

3. Google API / OAuth Access

When you connect Google accounts or Google products to Adwize, we use Google OAuth to request only the access needed for the features you enable. Depending on which Google tools you connect, Adwize may request the following scopes:

We do not invent or request additional Google scopes beyond what is required for the Google features you connect. Exact scopes granted are shown in Google's consent screen when you authorize access.

Google user data we may access

Depending on the scopes you grant and the tools you connect, categories of Google user data may include:

• GTM: container and workspace configuration and related subcomponents (tags, triggers, variables, and similar container resources) needed for monitoring/validation and approved container edits that exclude publish/versioning
• Google Analytics: property and related management entities, plus analytics data you authorize us to read for monitoring, validation, and product features
• Google Ads: account, campaign, and related Ads configuration/data needed for pause/enable, budget, and related Ads actions available in the product
• Google Sheets: spreadsheet contents and structure for sheets you connect or that the product uses when Sheets features are enabled
• Identity: primary Google Account email (userinfo.email) and OpenID identity association (openid)

How we use Google user data

Adwize uses Google user data only to provide and improve the user-facing Adwize features the customer has configured, including:

• Monitoring and validation of tracking and marketing data quality
• Approved GTM container edits that do not include versioning or publishing
• Google Analytics management edits where those product features are used
• Google Ads actions such as campaign pause/enable, budget changes, and related Ads capabilities exposed in Adwize
• Reading and writing Google Sheets where the product uses Sheets
• Authenticating and associating the correct Google account with your Adwize workspace

We do not:

• Sell Google user data
• Use Google user data for advertising to other parties
• Use Google user data for purposes unrelated to providing or improving the configured Adwize features
• Transfer Google user data to third parties except as described in this policy (for example, infrastructure/service providers under contract) or as required by law

Google API Services User Data Policy and Limited Use

Adwize's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Because some of the scopes above are sensitive or restricted (including Google Ads, Google Sheets, GTM container edit, and Google Analytics edit), we commit to Limited Use principles for Google user data obtained via those APIs: we use that data to provide or improve user-facing features that are prominent in the requesting application's user interface; we do not use it for serving advertisements; we do not allow humans to read it unless you provide consent for specific support cases, it is necessary for security/compliance investigations, or applicable law requires it; and we do not transfer it except as needed to provide or improve user-facing features, for security, to comply with law, or as part of a merger/acquisition/change of control with continued protections.

Storage and retention of Google-derived data and OAuth tokens

OAuth access and refresh tokens are stored securely using industry-standard protections appropriate to credential storage (including encryption in transit and at rest and access controls). Tokens are retained while the Google connection remains active and as needed to provide the Services you configured.

Google-derived data (for example, GTM configuration snapshots, Analytics or Ads data used in product workflows, or Sheets content processed by a feature) is retained while your account/connection is active and as needed to operate the configured features, maintain security and auditability, and meet legal or contractual obligations. When you disconnect a Google connection or delete relevant data, we stop using that connection for ongoing access and delete or de-identify associated tokens and Google-derived data within a reasonable period, except where retention is required for security, dispute resolution, legal compliance, or backups that rotate out on a limited schedule.

Sharing of Google user data

We do not sell Google user data. Google user data may be processed by service providers that help us host, secure, and operate the Services (for example, cloud infrastructure), under contractual obligations to protect the data and use it only to provide services to us. Google itself is a third party: when you connect Google, Google's own terms and privacy policies also apply to Google's processing of your Google Account and API access.

We may disclose Google user data if required by law, legal process, or to protect rights, safety, or security, or in connection with a business transfer as described in Section 5, with continued protection of the data.

Your controls: disconnect, revoke, and delete

You can control Google access as follows:

1. Disconnect in Adwize: Remove or disconnect the Google integration/connection in your Adwize workspace settings (or equivalent connection management UI). This stops Adwize from using that connection for ongoing product features.
2. Revoke in Google Account: Visit your Google Account permissions page (Google Account → Security → Third-party access / "Your connections to third-party apps and services," or the equivalent current Google UI) and revoke Adwize's access. Revoking in Google invalidates authorization at the Google account level.
3. Request deletion: Contact qt@datastarter.ca to request deletion of personal data or Google-derived data we hold, subject to legal exceptions described in Section 8. We will respond within the timeframe required by applicable law.

Using both disconnect in Adwize and revoke in Google is the most complete way to end ongoing access.

4. Cookies and Similar Technologies

We use cookies and similar technologies to operate our website and services. For details, see our Cookie Policy.

5. Data Sharing

We do not sell your personal information. We may share information with:

Service providers: Third parties that help us operate our business (for example, hosting, infrastructure, analytics, email delivery, and payment processing such as Stripe) under contractual obligations to protect your data and use it only for services provided to us.

Legal requirements: When required by law, court order, or to protect our rights, safety, or property.

Business transfers: In connection with a merger, acquisition, or sale of assets, with notice where required and continued protection of your data.

With your consent: Where you have given explicit consent for specific sharing.

Connected third-party platforms: When you connect a third-party service (including Google, Shopify, Klaviyo, or a warehouse), that provider's own terms and privacy policies govern their processing. Adwize receives only what those connections provide under your authorization.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Services. After account termination or disconnection of a source, we may retain data for a limited period for legal, security, backup, audit, or operational purposes. Aggregated or anonymized data that cannot reasonably identify you may be retained longer.

For Google OAuth tokens and Google-derived data, see the storage and retention subsection in Section 3. Specific retention details for particular connected datasets may also be described in customer agreements or product documentation where applicable.

7. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit and at rest, access controls, and security practices appropriate to the sensitivity of the data (including OAuth tokens). No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Your Rights (GDPR-Aware)

If you are in the European Economic Area, United Kingdom, or other jurisdictions with similar privacy laws, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data, subject to legal exceptions
• Restriction: Request that we limit how we use your data
• Portability: Request a copy of your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests or for direct marketing
• Withdraw consent: Where processing is based on consent, withdraw it at any time
• Lodge a complaint: File a complaint with your local data protection authority

These rights may also apply, where required by law, to Google-derived personal data we process on your behalf or in connection with your account.

To exercise these rights, contact us at qt@datastarter.ca. We will respond within the timeframe required by applicable law.

9. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will take steps to delete it.

10. International Processing

We may process and store information in Canada, the United States, or other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

11. Changes

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the service where appropriate. The "Effective Date" at the top indicates when the policy was last updated. Your continued use after changes constitutes acceptance of the revised policy where permitted by law.

12. Contact

For privacy-related questions, Google user data questions, disconnect/deletion requests, or to exercise your rights, contact us at qt@datastarter.ca.