Your advertising data stays yours.

Data we access

With the customer’s authorization, the application accesses Google Ads campaign performance data: campaign ID, campaign name, campaign status, cost in micros, impressions, clicks, conversion counts, and reporting date segments. It also receives and securely stores the OAuth refresh token required to retrieve that data on the customer’s behalf.

The application requests only the Google Ads access needed for this reconciliation service. Access is initiated by an authorized customer through Google’s OAuth consent flow and can be revoked through the customer’s Google account or by disconnecting the integration.

How we use Google user data

We use Google Ads campaign performance data solely to compare advertising figures with the same customer’s HubSpot CRM outcomes and present the resulting discrepancy report. We use the OAuth refresh token solely to maintain the authorized connection and retrieve updated campaign data.

The application is read-only. It never creates, edits, pauses, or otherwise changes ads, campaigns, budgets, bids, targeting, or any other Google Ads entity.

Uses we prohibit

We do not sell Google user data. We do not use it to serve advertising, build advertising profiles, determine creditworthiness, or train generalized artificial-intelligence or machine-learning models. We do not transfer Google user data for any purpose unrelated to providing, securing, supporting, or legally operating the reconciliation service.

Storage and retention

Reconciliation aggregates are retained while the customer uses the service and may be retained indefinitely as part of the customer’s historical record. Raw outcome rows are retained for up to 13 months. OAuth credentials are encrypted at rest. When the application is uninstalled, we purge customer data within 30 days, subject only to narrowly required legal or security records that do not contain Google Ads campaign data.

An authorized customer administrator may request an export or earlier deletion by contacting support@venturevd.com. Revoking Google access stops future retrieval but does not itself erase historical reconciliation records; an administrator may request their deletion separately.

Sharing and subprocessors

Google user data is processed only by Venture VD LLC and service providers needed to operate the application. Fly.io provides application hosting and managed PostgreSQL infrastructure. Paddle acts as merchant of record for billing and does not receive Google Ads campaign data. Vercel hosts this public website and does not receive Google Ads data from the application.

We may disclose limited information when required by law or when necessary to protect the service, customers, or others. We do not permit subprocessors to use Google user data for their own advertising or model-training purposes.

Google API Services Limited Use

GapWitness’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Security

We use transport encryption, encrypted credential storage, account-scoped authorization, restricted production access, and operational logging designed to exclude OAuth credentials and sensitive payloads. No storage or transmission system is guaranteed to be completely secure. See our security page for reporting guidance.

Changes and contact

We will update this notice before using Google user data for a materially different purpose and will request any consent required by applicable policy or law. The effective date above identifies the current version.

For access, export, deletion, privacy, or security questions, contact support@venturevd.com. GapWitness is operated by Venture VD LLC, Michigan, USA.