Privacy Policy

1. Scope and who we are

This Privacy Policy applies to the Datok website, application, and related services (collectively, the “Service”). Datok provides marketing intelligence tools that help organizations connect, normalize, analyze, and report on advertising, analytics, affiliate, and ecommerce data.

If your organization provides your Datok account, it may control how your account and connected-source data are used. In that case, direct organization-specific privacy questions to your administrator first.

2. Information we collect

Account and authentication information

We process information such as your name, business email address, profile image, account identifier, organization membership, role, and sign-in activity. If you sign in with Google, Google provides the basic identity information you authorize.

Connected-source data

When an authorized user connects a marketing or analytics provider, Datok imports the account and reporting data needed to provide the Service. Depending on the source, this can include account and property names, campaign settings, spend, impressions, clicks, conversions, revenue, traffic and acquisition dimensions, and Search Console performance data. Datok does not request permission to modify Google Ads, Google Analytics, or Search Console data.

Service and device information

We process operational information such as IP address, browser and device details, requested pages, timestamps, error records, security events, audit logs, and feature usage. We use this information to operate, secure, troubleshoot, and improve the Service.

3. How we use Google user data

Google sign-in requests only the openid, email, and profile scopes. We use this data to authenticate you, create or identify your Datok account, display your account identity, maintain your session, prevent abuse, and keep an auditable sign-in record. Google sign-in does not give Datok access to Gmail, Google Drive, contacts, calendars, or files.

Google product connections are separate, user-initiated authorization flows. For Google Analytics 4 and Google Search Console, Datok requests the applicable read-only scopes. For Google Ads, Datok requests the Google Ads authorization required by the API but uses that connection only for reporting and analytics. Datok does not perform campaign-management operations. Datok uses the resulting data to discover the accounts you are already permitted to access, import the reports you select, normalize metrics, and display dashboards and reports to authorized members of your organization. Datok cannot create, edit, pause, or delete anything in these accounts.

The data retrieved is aggregated performance reporting, not personal data about your own customers. From Google Ads: campaign identifiers and names, advertising channel type, date, cost, impressions, clicks, conversions, and conversion value. From Google Analytics 4: date, campaign and channel dimensions, sessions, users, engaged sessions, key events, and revenue measures. From Search Console: date, query, page, country, device, clicks, impressions, click-through rate, and average position. The complete Google Ads field list and its purpose is published at /integrations/google-ads.

Datok's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

• we use Google user data only to provide and improve the user-facing reporting features described on this site;
• we do not sell Google user data;
• we do not use Google user data for advertising, ad targeting, or retargeting;
• we do not use Google user data to assess creditworthiness or for lending purposes; and
• we do not allow humans to read Google user data except with your explicit permission, for security purposes, to comply with applicable law, or where the data is aggregated and used for internal operations consistent with these requirements.

4. Legal bases and purposes

We process personal information to:

• provide the Service and fulfill our agreement with you;
• authenticate users and manage organization access;
• import, retain, normalize, and present authorized source data;
• protect accounts, investigate misuse, and maintain audit trails;
• respond to support and service requests;
• improve reliability, usability, and performance; and
• comply with legal obligations and enforce our terms.

Where applicable law requires it, we rely on consent, performance of a contract, compliance with law, or our legitimate interests in operating and securing a business service.

5. How we share information

We share information only as necessary with authorized members of your organization; infrastructure, database, security, analytics, and support providers that process data for us under appropriate obligations; professional advisers; and public authorities when legally required. We may also transfer information as part of a merger, financing, acquisition, or sale of assets, subject to appropriate confidentiality and notice requirements.

We do not sell personal information or Google user data. We do not share Google user data with third parties for targeted advertising or data-broker purposes.

6. Storage, security, and retention

Datok uses access controls, tenant isolation, encrypted transport, secure session cookies, audit logging, and encryption for stored connector credentials. No system can guarantee absolute security, but we maintain safeguards designed for the nature of the information we process and limit access to people and systems that need it.

We retain account information for as long as the account remains active and retain connected-source data according to the organization's service needs, contractual instructions, and legal requirements. Backups and security records may remain for a limited period after deletion. We delete or anonymize information when it is no longer needed for the purposes described in this policy.

7. Your choices and controls

You can disconnect a Google data source from Datok at any time. You can also revoke Datok's access from your Google Account security settings. Revocation stops future access but does not automatically delete data already imported into your organization's Datok workspace.

To request access, correction, export, restriction, objection, or deletion of personal information, email info@datok.com. We may need to verify your identity and coordinate with your organization's administrator. Rights vary by location and may be subject to lawful exceptions.

8. International processing and children

Datok and its service providers may process information in countries other than your own. Where required, we use lawful transfer mechanisms and safeguards. The Service is designed for business users and is not directed to children under 13 or the minimum digital age in their jurisdiction.

9. Changes and contact

We may update this policy as Datok evolves. We will post the revised version here, update the date above, and provide additional notice when required. Questions, complaints, and privacy requests can be sent to info@datok.com.