DashDeck Privacy Policy

DashDeck provides an automated reporting platform that helps digital marketing agencies generate branded, presentation-ready reports from their Google Ads advertising data. This Privacy Policy explains what information we collect, how we use it, and the choices you have - including specific disclosures required by Google's API Services User Data Policy.

This policy applies to the DashDeck website and application at https://dashdeckhq.vercel.app.

1. Information We Collect

1.1 Account Information When you sign up for DashDeck, we collect your name and email address through our authentication provider (Clerk) to create and manage your account.

1.2 Google Account Data (via Google Ads API) When you connect a Google Ads account to DashDeck, you grant us access to your Google Ads data through Google's OAuth authorization flow, using the https://www.googleapis.com/auth/adwords scope. Through this connection, we access: - Your Google Ads account identifiers (customer IDs) and manager/child account hierarchy - Campaign performance metrics (impressions, clicks, cost, conversions, and similar advertising performance data) - OAuth access tokens and refresh tokens, which we store securely to maintain your connection without requiring you to re-authenticate for every report

We request only the scope necessary to read advertising performance data for report generation. We do not request access to modify or manage your Google Ads campaigns.

1.3 Uploaded Content We store the PowerPoint brand templates and logo files you upload, so we can apply your brand's colors, fonts, and layout to your generated reports.

1.4 Generated Reports We store the reports (PPTX files) generated on your behalf, along with metadata such as the client and date range the report covers, so you can access your report history.

2. How We Use Your Information

We use the information described above solely to operate, maintain, and improve the user-facing features of DashDeck. Specifically, we use Google user data to: - Authenticate your Google Ads connection and retrieve advertising performance metrics on your behalf - Generate branded PPTX reports summarizing that performance data - Display report history and account status within your DashDeck dashboard - Diagnose and fix technical issues with your specific connection or reports

We do not use Google user data for advertising, and we do not sell, rent, or trade Google user data to any third party.

3. How Google User Data Is Shared

We limit our use and transfer of Google user data as follows: - AI processing: To generate narrative summaries and insights within your reports, relevant performance metrics (not your raw account credentials) are sent to a third-party AI model provider strictly to produce the specific report you requested. This data is not used by us or by our AI provider to train models on your data beyond fulfilling your request. - Infrastructure providers: Data is stored using our database provider (Neon, PostgreSQL) and hosted on our application infrastructure (Vercel), both of which act strictly as data processors under our instruction and are not permitted to use your data for their own purposes. - No human review of your Google user data occurs except: (a) with your explicit consent, (b) as necessary for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) as part of a merger, acquisition, or sale of assets, in which case we will notify you before your data is transferred and becomes subject to a different privacy policy. - We do not transfer Google user data to any other third party outside of what is described in this policy.

Our access, use, and storage of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Data Retention and Deletion

We retain your account information, connected Google Ads tokens, uploaded templates, and generated reports for as long as your DashDeck account remains active.

You may revoke DashDeck's access to your Google account at any time via your Google Account permissions page. You may also request deletion of your DashDeck account and all associated data - including stored Google Ads tokens, templates, and reports - by contacting us at the email below. We will process deletion requests within a reasonable timeframe.

5. Data Security

We use industry-standard safeguards to protect your data, including encryption in transit (TLS) and access controls restricting who can access stored credentials and report data. OAuth tokens are stored securely and are never exposed to the client-side application or to other DashDeck users.

6. Children's Privacy

DashDeck is a business-to-business tool intended for use by marketing agency professionals. It is not directed at, and we do not knowingly collect information from, individuals under the age of 18.

7. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify users via email or an in-app notice before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

8. Contact Us

If you have questions about this Privacy Policy, or wish to request access to or deletion of your data, contact us at:

Email: support@dashdeckhq.com