Privacy policy

Overview

Conversion Console ("we", "our", "the platform") is a software-as-a-service application operated at conversionconsole.com. We provide SEO, AIO, PPC, and CRO intelligence for authorized business users. This policy describes how we collect, use, store, and protect data accessed through our service.

Google API Services User Data Policy

Conversion Console's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We request OAuth 2.0 user-delegated access to Google Ads, Search Console, Google Analytics 4, and Google Tag Manager with minimum read-only scopes required for reporting and optimization insights.
• Google user data is used solely to provide and improve Conversion Console features visible to the user who granted access.
• We do not sell Google user data. We do not use Google user data for advertising or retargeting.
• We do not allow humans to read Google user data unless required for security, compliance, or with the user's explicit consent for support.

Google Ads API

Conversion Console uses the Google Ads API under Basic Access for performance sync (impressions, cost, clicks, conversions, campaign structure) and, when you approve automation guardrails or use Ads controls, may pause or update campaign status on your behalf. Budget and creative edits remain human-approved unless you enable those automations.

Data retention & security

Conversion Console uses a multi-tenant architecture with owner-scoped access checks on mutations. Integration API keys and Clarity tokens are encrypted at rest with AES-256-GCM when ENCRYPTION_KEY is configured. Content and metrics are access-controlled (not field-encrypted) and transmitted over TLS. Cron jobs require a strong CRON_SECRET. Aggregate analytics are processed at parameter level — we do not ingest PII from analytics platforms for optimization features.

Contact

Questions about privacy: hello@conversionconsole.com