What these apps are

Arcozy Dashboard is Arcozy's internal management tool. Only Arcozy staff with an issued account can use it; there is no public sign-up. The dashboard connects to Google through two OAuth apps:

• Arcozy — connects Google Ads.
• arcozy-sheets — connects Google Sheets.

Google Ads (app “Arcozy”)

Arcozy staff connect the Google accounts that manage the company's advertising accounts. The app requests:

• Google Ads (https://www.googleapis.com/auth/adwords) — used read-only. The app never creates, edits, pauses or removes campaigns, budgets or keywords, and never touches billing.
• Email address (openid, email) — to identify which Google account is connected and link it to the right staff member.

Data read:

• Advertising accounts, campaign names and statuses.
• Performance metrics: cost, impressions, clicks and conversions, by day, by location and by search term.
• Keyword ideas and estimated search volume from Keyword Planner, used for campaign planning.

This data is used to build Arcozy's internal advertising cost and performance reports and to help staff plan keywords. Staff may also query this data through an internal AI assistant (Claude by Anthropic) via Arcozy's own server; the assistant receives data only when that staff member asks, and only for the accounts that staff member connected. Data passing through the assistant is processed under Anthropic's commercial terms, under which Anthropic does not use it to train its models. Apart from Anthropic for this purpose and the provider hosting the application's servers, Google user data is not transferred to any other party.

Google Sheets (app “arcozy-sheets”)

• Email address of the Google account (openid, email) — only to show which account is connected.
• Spreadsheets the administrator selects through Google's file picker (drive.file). The app cannot see any other file in Google Drive.

This data is used to read advertising campaign figures from the selected spreadsheets into Arcozy's internal reports.

What we do not do

We do not sell Google user data, do not share it with third parties beyond what is described above, do not use it for targeted advertising, and do not use it to develop, improve or train AI/ML models.

Arcozy's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and protection

Google tokens are encrypted with AES-256-GCM before storage, are readable only by the application server, and are never sent to the browser. Figures read from Google Ads and spreadsheets are stored in Arcozy's internal database and are visible only to authorized staff.

Retention: tokens are kept only while the Google account stays connected and are deleted as soon as it is disconnected. Advertising figures are kept for as long as Arcozy needs them for internal cost reporting and reconciliation, and deleted once they are no longer needed.