Privacy Policy
What GMG360 collects, why, how long we keep it, and the choices you have.
Who we are
GMG360 (“GMG360”, “we”) is an internal marketing tool operated by Abdullah Tarek. It lets invited users connect Google Ads, Google Analytics 4, Google Search Console and Google Tag Manager to AI assistants such as Claude and ChatGPT. Questions about this policy can be sent to hi@abtarek.com.
Information we collect
Account information
Your name, email address, a hashed password, your role, and the activation key assigned to you (stored as a hash).
Google user data
When you sign in with Google and approve access, we receive your Google account email address and an OAuth refresh token, and we access data from the Google products you authorize:
- Google Ads: accounts, campaigns, ad groups, ads, keywords, search terms, budgets and performance metrics.
- Google Analytics 4: property settings and reports.
- Google Search Console: sites and search performance data.
- Google Tag Manager: accounts, containers, workspaces, tags, triggers and variables.
Usage records
For security and accountability we log the name of each tool call, the time, the Google account or property identifiers involved, and, for changes, the change that was requested. We do not log report content.
Technical information
Our server and hosting provider may record IP addresses and request details in standard logs. We use a session cookie to keep you signed in. We do not use advertising or analytics cookies.
How we use Google user data
We use Google user data only to provide the features you request through the connector: fetching reports and making the changes you ask your assistant to make. Data is retrieved when you ask and returned to your assistant for that conversation. We do not store the content of reports.
How we store and protect it
- Refresh tokens are encrypted before they are stored.
- Passwords are hashed. Activation keys are stored as hashes.
- Secrets are kept in server environment settings, not in source code.
- All traffic uses HTTPS.
- Access to the database is limited to the operator.
How we share information
We do not sell Google user data and we do not share it with third parties, except:
- With your AI assistant (for example Claude or ChatGPT), because returning results there is the purpose of the service. The assistant provider’s own terms and privacy policy govern what happens to the conversation on their side.
- With our hosting provider, Hostinger, which stores our data on our behalf.
- If required by law, or to protect the security of the service.
Google API Services User Data Policy
GMG360’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google user data only to provide and improve the user-facing features you request.
- We do not transfer Google user data to others except as described above, as needed to provide the features, to comply with law, or as part of a merger or sale with notice to you.
- We do not use Google user data for serving advertisements.
- We do not allow people to read Google user data, except with your consent, for security purposes, or to comply with law.
- We do not use Google user data to develop, improve or train generalized AI or machine-learning models.
Retention and deletion
We keep account information and encrypted tokens while your account is active. Usage records are kept so that changes can be audited. When you delete your account, or ask us to, we delete your account information and your Google tokens. You can remove GMG360’s access to your Google account at any time at myaccount.google.com/permissions, after which the stored token no longer works.
Your choices and rights
You can ask us to tell you what we hold about you, correct it, export it or delete it by emailing hi@abtarek.com. Depending on where you live you may have additional rights under local law, and we will respect them.
Children
GMG360 is a business tool and is not directed to children.
Changes to this policy
If we change this policy, we will update the date at the top. If a change materially affects how we handle Google user data, we will tell active users by email before it takes effect.