Privacy Policy

This policy explains how FocusLinkTech (“we”), operator of CampaignMind, collects, uses and protects information when you use our website, dashboard and MCP server (together, the “Service”).

1. Information we collect

• Account information: your name, email address, password (stored only as a salted hash) and timezone.
• Google account information: when you connect Google Ads, we receive your Google email address and an OAuth refresh token with the Google Ads scope (https://www.googleapis.com/auth/adwords).
• Google Ads data: account names and IDs, campaigns, ad groups, ads, keywords, budgets, performance metrics and Keyword Planner data that you request through the Service.
• Websites you ask us to audit or compare: publicly available page content, fetched only when you request it.
• Usage logs: which tools were called, timing and errors (never tokens or passwords).

2. How we use information

• To show your reports and dashboards, and to make campaign changes that you preview and confirm.
• To answer requests you make from AI assistants (such as Claude or ChatGPT) that you have connected to your CampaignMind account.
• To keep an activity log of changes, so you can review and revert them.
• To secure the Service, prevent abuse and fix problems.

We do not sell your data, use it for advertising, or use Google Ads data to train AI or machine-learning models.

3. Google API Services User Data Policy

CampaignMind’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data to provide and improve the user-facing features of the Service that you request. We do not transfer it to others except as needed to provide the Service, to comply with law, or with your explicit consent, and humans do not read it unless you ask us for support, it is required for security, or by law.

4. AI assistants

When you connect an AI assistant, it receives a CampaignMind access token — never your Google credentials. Data returned to the assistant is processed by that assistant’s provider under its own privacy terms. You can revoke any connected assistant at any time under “Connect AI”.

5. Storage and security

• Google refresh tokens are encrypted at rest with AES-256-GCM. Access tokens we issue are stored only as hashes.
• All traffic uses HTTPS. Access to production systems is limited to authorised staff.
• Report results may be cached for up to 15 minutes to reduce load on Google’s systems.

6. Sharing

We share data only with service providers that host or operate the Service (for example cloud hosting and database providers), bound by confidentiality obligations, or when required by law.

7. Retention and deletion

We keep your data while your account is active. Disconnecting Google Ads revokes our access with Google and deletes the stored token and synced account list. You can delete your account and all associated data at any time — see Data deletion. Backups are overwritten within 30 days.

8. Your rights

You may access, correct, export or delete your personal data. India’s Digital Personal Data Protection Act, 2023 and other applicable laws apply. Contact us to exercise these rights.

9. Contact

FocusLinkTech, Jaipur, Rajasthan, India. Email: focuslinktech@gmail.com