1. Scope and who we are
This Privacy Policy applies to the Datok website, application, and related services (collectively, the “Service”). Datok provides marketing intelligence tools that help organizations connect, normalize, analyze, and report on advertising, analytics, affiliate, and ecommerce data.
If your organization provides your Datok account, it may control how your account and connected-source data are used. In that case, direct organization-specific privacy questions to your administrator first.
2. Information we collect
Account and authentication information
We process information such as your name, business email address, profile image, account identifier, organization membership, role, and sign-in activity. If you sign in with Google, Google provides the basic identity information you authorize.
Connected-source data
When an authorized user connects a marketing or analytics provider, Datok imports the account and reporting data needed to provide the Service. Depending on the source, this can include account and property names, campaign settings, spend, impressions, clicks, conversions, revenue, traffic and acquisition dimensions, and Search Console performance data. Datok does not request permission to modify Google Ads, Google Analytics, or Search Console data.
Service and device information
We process operational information such as IP address, browser and device details, requested pages, timestamps, error records, security events, audit logs, and feature usage. We use this information to operate, secure, troubleshoot, and improve the Service.
3. How we use Google user data
Google sign-in requests only the openid, email, and profile scopes. We use this data to authenticate you, create or identify your Datok account, display your account identity, maintain your session, prevent abuse, and keep an auditable sign-in record. Google sign-in does not give Datok access to Gmail, Google Drive, contacts, calendars, or files.
Google product connections are separate, user-initiated authorization flows. Datok requests only the applicable read-only scope for Google Analytics, Google Ads, or Search Console and uses the resulting data to discover accounts you can access, import the reports you select, normalize metrics, and display dashboards and reports to authorized members of your organization.
Datok's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising, sell it, or allow people to read it except when needed to provide or secure the Service, with your consent, or as required by law.
4. Legal bases and purposes
We process personal information to:
- provide the Service and fulfill our agreement with you;
- authenticate users and manage organization access;
- import, retain, normalize, and present authorized source data;
- protect accounts, investigate misuse, and maintain audit trails;
- respond to support and service requests;
- improve reliability, usability, and performance; and
- comply with legal obligations and enforce our terms.
Where applicable law requires it, we rely on consent, performance of a contract, compliance with law, or our legitimate interests in operating and securing a business service.
5. How we share information
We share information only as necessary with authorized members of your organization; infrastructure, database, security, analytics, and support providers that process data for us under appropriate obligations; professional advisers; and public authorities when legally required. We may also transfer information as part of a merger, financing, acquisition, or sale of assets, subject to appropriate confidentiality and notice requirements.
We do not sell personal information or Google user data. We do not share Google user data with third parties for targeted advertising or data-broker purposes.
6. Storage, security, and retention
Datok uses access controls, tenant isolation, encrypted transport, secure session cookies, audit logging, and encryption for stored connector credentials. No system can guarantee absolute security, but we maintain safeguards designed for the nature of the information we process and limit access to people and systems that need it.
We retain account information for as long as the account remains active and retain connected-source data according to the organization's service needs, contractual instructions, and legal requirements. Backups and security records may remain for a limited period after deletion. We delete or anonymize information when it is no longer needed for the purposes described in this policy.
7. Your choices and controls
You can disconnect a Google data source from Datok at any time. You can also revoke Datok's access from your Google Account security settings. Revocation stops future access but does not automatically delete data already imported into your organization's Datok workspace.
To request access, correction, export, restriction, objection, or deletion of personal information, email info@vieromind.com. We may need to verify your identity and coordinate with your organization's administrator. Rights vary by location and may be subject to lawful exceptions.
8. International processing and children
Datok and its service providers may process information in countries other than your own. Where required, we use lawful transfer mechanisms and safeguards. The Service is designed for business users and is not directed to children under 13 or the minimum digital age in their jurisdiction.
9. Changes and contact
We may update this policy as Datok evolves. We will post the revised version here, update the date above, and provide additional notice when required. Questions, complaints, and privacy requests can be sent to info@vieromind.com.