Privacy Policy

1. Information we collect

• Account information — your name and email address when you sign in with Google, or your email address and a hashed password if you register with email.
• Google user data — the data described in section 2, only after you grant access on Google's consent screen.
• Business context you provide — for example your website, goals, target locations and notes you enter about a project.
• Billing information — handled by our payment processor, Stripe. We do not store full card numbers; we retain limited details such as plan, subscription status and the last four digits of your card.
• Usage and technical data — pages visited, feature usage, device and browser information, IP address, and error logs needed to operate, secure and improve the Service. We use cookies and similar technologies for sign-in, analytics (Google Tag Manager, Google Analytics, Microsoft Clarity) and measuring our own advertising.

2. Google user data we access

Velliq requests the following Google permissions (scopes), each for a specific purpose:

• openid, email, profile — to sign you in with Google and identify your Velliq account. We use your Google account ID, email address and name.
• Google Ads API (https://www.googleapis.com/auth/adwords) — requested only when you choose to connect a Google Ads account. We read the accounts you can access and, for the account you select, its campaigns, ad groups, keywords, search terms, ads, budgets, bidding and account settings, conversion settings, performance metrics and change history. This scope also allows changes to the account; Velliq uses that ability only to apply a specific change you have reviewed and explicitly approved in the Service. We never make changes on our own.
• Google Analytics, read-only (https://www.googleapis.com/auth/analytics.readonly) — requested only if you choose to connect Google Analytics where that feature is offered. We read the account and property list and aggregated report data to add website-behaviour context to findings. We never modify Google Analytics.

3. How we use Google user data

We use Google user data only to provide and improve the user-facing features of Velliq:

• signing you in and keeping your account secure;
• syncing your Google Ads data and calculating findings about wasted spend, missed demand and tracking health (all figures are computed by our own code);
• generating plain-language explanations of those findings and answering your questions about your account;
• applying a Google Ads change only after you explicitly approve it, and keeping an audit log of that change;
• sending you service emails, such as when an analysis is ready or a connection needs attention.

Velliq's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We do not sell Google user data.
• We do not use or transfer Google user data for advertising, retargeting or personalized ads.
• We do not use Google user data to determine creditworthiness or for lending purposes.
• We do not use Google user data to develop, improve or train generalized artificial intelligence or machine-learning models, and our AI providers are contractually prohibited from doing so.
• Humans do not read your Google user data unless you give us permission (for example in a support request), it is necessary for security or to comply with law, or the data is aggregated and anonymized for internal operations.

Velliq does not generate images, video or any other media, and does not use Google APIs to create or distribute intimate imagery of any kind.

4. How we share information

We share information only with service providers that process it on our behalf to run the Service:

• Cloud hosting (Hetzner, Germany) — stores the application and its database.
• AI model providers (such as OpenAI and Anthropic, accessed directly or through OpenRouter) — receive the minimum campaign data needed to write the explanation of a finding or answer a question you asked. They act as processors, may not use the data to train their models, and do not receive your Google credentials.
• Stripe — payments; Postmark — transactional email; Sentry — error monitoring.

We may also disclose information if required by law, to protect the rights, property or safety of our users or others, or as part of a merger or acquisition, in which case this policy continues to apply to the transferred data.

5. Storage, retention and deletion

While a Google Ads account is connected, we store its data for roughly the previous 7 months and refresh it in the background. Google OAuth tokens are stored only so the Service can keep syncing, and only while the connection is active.

You can disconnect a project from Google inside Velliq at any time, which stops syncing it. You can also revoke Velliq's access entirely at myaccount.google.com/permissions, which immediately invalidates the tokens we hold. To delete your Velliq account and all associated data, including stored tokens and synced Google Ads data, email us at the address below; we complete deletion within 30 days, except for billing records we must keep by law.

6. Security

We protect information with TLS encryption in transit, application-level encryption of stored OAuth tokens, isolated storage for credentials, least-privilege access controls and audit logging of account changes. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights

Depending on your location, you may have rights to access, correct, export or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. We do not knowingly collect data from anyone under 18.

8. International transfers

Your information may be processed in countries other than your own, including the European Union and the United States. Where required, we use appropriate safeguards for such transfers.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email before they take effect.

10. Contact

RYNE TECH TRADING OF EQUIPMENT L.L.C. — for privacy questions or requests, email [email protected].