Privacy Policy

Tagify Analytics (“we”, “us”) lets you connect your Google Ads, Google Analytics and Google Tag Manager accounts and query that data from AI assistants through a private MCP endpoint. This policy explains what we collect, why, and how we protect it.

Information we collect

• Account information: your name, email address and password (stored only as a secure hash), or your Google/GitHub profile name and email if you sign in with them.
• Container details: the names, websites and notes you enter for each business.
• Google connection: when you click “Connect Google”, an OAuth refresh token, the Google account email and the permissions you granted.
• Chosen accounts: the names and IDs of the Google Ads accounts, GA4 properties and Tag Manager containers you choose for each business, with their currency and time zone.
• Usage logs: for each AI request and each dashboard report — which tool or report ran, whether it succeeded, how long it took and how many Google API requests it made. We do not store the questions you ask or the queries sent.
• Cached reports: the results of dashboard reports, kept for up to 6 hours so pages load quickly (see below).

How we use Google user data

With your permission we access Google Ads (adwords scope), Google Analytics (analytics.readonly scope) and Google Tag Manager (tagmanager.readonly scope) in read-only mode, solely to answer the requests you or your connected AI assistant make through your container’s MCP endpoint, and to show reports on your container’s dashboard.

• When your AI asks, data is fetched live from Google and passed to the assistant that asked for it. We don’t keep a copy.
• Dashboard reports (for example spend, sessions or tag counts for a date range) are cached for up to 6 hours so pages load quickly, then deleted automatically.
• The list of accounts your Google login can reach is cached for 10 minutes while you choose accounts for a business.
• Cached data is only ever shown to the owner of that container; nothing is shared between accounts.

Tagify Analytics’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train AI models.

Security

• Google refresh tokens and sign-in tokens are encrypted at rest (AES-256-GCM).
• Each container is isolated: its endpoint uses its own secret key, which you can rotate at any time.
• All traffic is encrypted in transit (HTTPS).

Sharing

We share data only with the services needed to run Tagify Analytics: our hosting and database providers, our email provider (to send verification and password-reset emails), and the AI assistant you connect to your container. We do not sell personal data.

Retention and deletion

• Usage logs (AI requests and dashboard reports) are deleted automatically after 90 days.
• Cached dashboard reports are deleted automatically after at most 6 hours, and the cached list of reachable accounts after 10 minutes.
• Disconnecting Google deletes the stored token, the chosen accounts and cached reports, and revokes our access at Google.
• Deleting a container deletes its connection, chosen accounts, cached reports and usage history. To delete your account, email us and we’ll remove it.
• You can also revoke access any time at myaccount.google.com/permissions.

Changes

We’ll update this page if our practices change, and notify you by email for significant changes.