Privacy Policy

Google data and intended workflow

Google Analytics

Report on website performance and conversions, and configure Analytics measurement for authorized properties.

Google Tag Manager

Inspect account, container and workspace configurations, edit tags, triggers and variables, and publish changes to maintain tracking.

Google Search Console

Read property information and search-performance reports, including queries, pages, clicks and impressions. Search Console access is read-only.

Google Ads

Discover accessible accounts and report on campaigns, advertising keywords and conversions. Reporting is the initial priority; implemented Ads functionality is read-only. Production Google Ads verification is pending.

Google Business Profile

Read performance information for authorised business profiles, including profile views, search terms, website clicks, call-button clicks and direction requests. This information is used to prepare performance reports and improve client listings.

Planned Google Ads management includes keyword and negative-keyword changes, ad editing, bids, budgets and campaign settings. These management capabilities are planned, not already operational.

Nine OAuth permissions

Google authorization does not grant access beyond the signed-in user's existing permissions. Access also depends on the OAuth permissions granted and the account, property or Business Profile access controls. These nine permissions support the intended workflow; they do not mean every capability is implemented or that changes happen automatically. In particular, the Google Ads and Google Business Profile permissions are not read-only scopes, even though their initial implemented use is reporting and profile-performance analysis. Changes are made only when explicitly authorised.

https://www.googleapis.com/auth/analytics.readonly

Read Analytics data for performance and conversion reporting.

https://www.googleapis.com/auth/analytics.edit

Edit Analytics configuration to support measurement setup.

https://www.googleapis.com/auth/tagmanager.readonly

Inspect Tag Manager containers and their configuration.

https://www.googleapis.com/auth/tagmanager.edit.containers

Edit container components, including tags, triggers and variables.

https://www.googleapis.com/auth/tagmanager.edit.containerversions

Manage container versions as part of configuration work.

https://www.googleapis.com/auth/tagmanager.publish

Publish container versions for authorized tracking changes.

https://www.googleapis.com/auth/webmasters.readonly

Read Search Console property and search-performance data.

https://www.googleapis.com/auth/adwords

Access Google Ads for reporting and the planned management workflow. This permission is broader than the currently implemented reporting functionality.

https://www.googleapis.com/auth/business.manage

Access and manage Google Business Profiles that the authenticated user is authorised to manage. Initial use is reporting and profile-performance analysis; changes are made only when explicitly authorised.

The tool has no implemented customer-list uploads, app conversion uploads or remarketing uploads. It does not access Gmail or Google Drive.

Purpose and authorized users

Avanti Google Marketing Tools is operated by Emilio / Avanti Interactive for our own Google properties, authorised business profiles and client accounts we are authorized to manage. Contractor access is not currently part of the setup. Reporting on website performance, search queries, advertising keywords, conversions and Google Business Profile performance is the initial priority, alongside Analytics measurement and Tag Manager configuration.

This section specifically covers Google data handled by the internal tool and supplements the website privacy policy above. It is not a public application or client-login service. Reading this website, confirming OAuth scopes or granting Google permissions does not by itself establish a client's consent to every form of AI processing.

Google Business Profile data and use

For Google Business Profiles that Avanti is authorised to manage, the tool may access profile and location identifiers, profile information needed to identify the relevant business listing, and performance information including profile views, search terms, website clicks, call-button clicks and direction requests.

Google Business Profile information is used to prepare performance reports for the relevant business or client, analyse listing performance and improve client listings. Access is restricted to profiles the authenticated user is authorised to manage. Initial use is reporting and profile-performance analysis; changes are made only when explicitly authorised.

Local connector and credential storage

A custom Node.js connector runs locally through OpenAI Codex and communicates with Google APIs. Google OAuth credentials, including access and refresh tokens, and the Google Ads developer token are stored locally outside website repositories. They are protected by filesystem permissions, not application-level encryption. Encryption at rest for the overall setup has not been verified and is not guaranteed by this notice.

Credentials are not deliberately included in connector outputs or AI prompts. This website is an informational page, not the connector or a place to submit credentials.

External AI processing and sharing

AI-assisted tools are used to analyze selected reports and assist with operator-directed work. Selected account information, configuration details and reports returned by the connector can enter an OpenAI Codex session and be processed by OpenAI as part of the AI session context. The workflow is not entirely local or offline.

Emilio uses the results for authorized marketing work and may share relevant reports with the business or client concerned, without providing direct access to the tool. The OpenAI account's model-training, human-access and retention settings have not yet been verified for this setup. This notice does not promise exclusion from model training or a guaranteed human-review process. Authorization for a client's data to be processed by AI must be addressed separately from confirming these OAuth scopes.

Reports and retention

Reports and other returned information, including Google Business Profile performance data and search terms, may remain in Codex session history or in files created by the operator. Retention settings and deletion responsibilities have not yet been verified for this setup. No fixed retention period or automatic deletion is promised. Local credential storage and saved session or report data are separate stores.

Revoking future access

The authorizing user can remove the tool's connection in their Google Account's third-party connections settings. Account and property administrators can also change the signed-in user's permissions within the relevant Google service. Contact Avanti if you need help stopping authorized work or removing locally stored credentials.

Revoking Google authorization stops future access through that authorization. It does not delete reports, Google Business Profile data, account information or configuration data already saved in session history or operator-created files, and it does not undo changes already published in Google Analytics, Google Tag Manager or a Google Business Profile.

Deletion requests and contact

To request deletion of locally stored credentials, saved reports, Google Business Profile data or session information relating to your account, email [email protected]. Identify the business, account or Business Profile and the information concerned, but do not send passwords, tokens or patient records.

Deletion depends on where information has been saved and the controls available for those copies, including service-provider session history and reports already delivered to a client. The deletion process and responsibilities have not yet been verified; no deletion deadline or automatic removal of every copy is promised. Revocation alone is not a deletion request.

Intended data boundaries

The tool is intended for authorized marketing analysis and maintenance, not processing patient records or uploading CRM contact lists. Do not include those records in requests to the tool. Account names, report dimensions or configuration text can still contain identifying information; marketing reports should not be assumed to be anonymous.