Dexfinity Access Privacy Policy
This policy explains how Dexfinity Access (the „app“) handles data it receives from Google when you use it. It supplements the general Dexfinity privacy notice.
1. Controller
Dexfinity s.r.o., Gagarinova 7/A, 821 03 Bratislava, Slovakia, Company ID 47801379. Contact: privacy@dexfinity.com.
2. What the app does
The app lets a Dexfinity client grant Dexfinity access to the client’s Google Analytics 4, Google Tag Manager, Google Ads and Google Merchant Center accounts. The client signs in with Google, chooses accounts and an access level, and the app adds Dexfinity as a user or links the Google Ads account to Dexfinity’s manager account.
3. Google user data we access and why
- Sign-in (openid, email): your email address and Google account ID, to record who granted access.
- Google Analytics (analytics.readonly, analytics.manage.users): names and IDs of your accounts and properties, and their user lists, to show your accounts and add Dexfinity as a user with the role you choose.
- Google Tag Manager (tagmanager.readonly, tagmanager.manage.users): names and IDs of your accounts and containers, and their user permissions, to show your accounts and add Dexfinity as a user with the permission you choose.
- Google Ads (adwords): IDs and names of the accounts you can access and their manager links, to show your accounts and accept the link to Dexfinity’s manager account.
- Merchant Center (content): names and IDs of your accounts and your role in them, to show your accounts and add Dexfinity as a user.
We do not read reports, campaign, conversion, product or audience data, or any other content of your accounts.
4. How we use the data
Only to provide the feature you started: listing your accounts and granting the access you selected. We do not use Google user data for advertising, we do not sell or transfer it to advertising platforms or data brokers, and we do not use it to develop, improve or train AI or machine-learning models.
5. Storage and retention
- Access token: kept only in the app server’s memory for the few minutes you need to complete the steps (at most one hour), and revoked immediately after the access is granted, or after 10 minutes of inactivity. It is never written to disk or a database.
- Record of the authorization: your email, Google account ID, the IDs and names of the accounts you selected, the access granted, and the date and time. We keep it as evidence of your authorization for the duration of our cooperation and 4 years after it ends (legal basis: performance of the contract and our legitimate interest, GDPR Art. 6(1)(b) and (f)).
6. Sharing
We do not share Google user data with third parties. The app runs in the EU, on Dexfinity’s own infrastructure or on Google Cloud servers in the EU acting as our processor. Dexfinity staff see the record from section 5 only to complete your onboarding.
7. Limited Use
Dexfinity Access’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
8. Security
Data is transmitted only over encrypted connections (TLS), access to the app’s systems is limited to authorized Dexfinity staff, and credentials are kept in managed secret storage.
9. Your choices and rights
- You can remove the app’s permissions at any time at myaccount.google.com/permissions. We revoke them ourselves after each use.
- You can remove Dexfinity’s access in Google Analytics, Tag Manager, Merchant Center or Google Ads (Admin → Access and security → Managers) at any time.
- Your rights under the GDPR (access, rectification, erasure, restriction, objection, and complaint to the Office for Personal Data Protection of the Slovak Republic) are described in the general Dexfinity privacy notice. Contact: privacy@dexfinity.com.
10. Changes
We will publish any changes on this page and update the effective date.
Dexfinity Access, zásady ochrany údajov (SK)
Tieto zásady dopĺňajú všeobecné zásady ochrany osobných údajov Dexfinity a vysvetľujú, ako appka Dexfinity Access narába s údajmi od Google.
- Prevádzkovateľ: Dexfinity s.r.o., Gagarinova 7/A, 821 03 Bratislava, IČO 47801379, privacy@dexfinity.com.
- Čo appka robí: klient sa prihlási cez Google, vyberie účty Google Analytics 4, Tag Manager, Google Ads a Merchant Center a úroveň prístupu. Appka pridá Dexfinity ako používateľa, resp. prepojí účet Google Ads s manažérskym účtom Dexfinity.
- Aké údaje: váš e-mail a ID Google účtu, názvy a ID vašich účtov, ich zoznam používateľov a vaša rola v nich. Nečítame reporty, kampane, produkty ani iný obsah účtov.
- Na čo: iba na zobrazenie vašich účtov a udelenie prístupu, ktorý ste vybrali. Údaje nepoužívame na reklamu, nepredávame ich, neposkytujeme tretím stranám a nepoužívame ich na trénovanie AI.
- Uchovávanie: prihlasovací token je iba v pamäti servera (najviac hodinu) a hneď po udelení prístupu, prípadne po 10 minútach nečinnosti, ho zrušíme. Nikdy ho neukladáme. Záznam o udelení (e-mail, ID účtu Google, vybrané účty, udelený prístup, dátum a čas) uchovávame počas spolupráce a 4 roky po jej skončení ako doklad o vašom súhlase (čl. 6 ods. 1 písm. b) a f) GDPR).
- Zdieľanie: údaje nezdieľame. Appka beží v EÚ, na infraštruktúre Dexfinity alebo na serveroch Google Cloud v EÚ, ktorý je vtedy naším sprostredkovateľom.
- Limited Use: používanie a prenos informácií získaných z Google API sa riadi zásadami Google API Services User Data Policy vrátane požiadaviek Limited Use.
- Bezpečnosť: šifrované spojenie (TLS), prístup len pre poverených ľudí z Dexfinity, prihlasovacie údaje v spravovanom úložisku tajomstiev.
- Vaše možnosti: oprávnenia appky môžete kedykoľvek odobrať na myaccount.google.com/permissions a prístup Dexfinity odobrať priamo v každej službe. Vaše práva podľa GDPR opisujú všeobecné zásady Dexfinity, kontakt privacy@dexfinity.com.
- Zmeny zverejníme na tejto stránke.