Privacy policy

UltraROAS.ai is owned and operated by Tagan Labs LLC, a Wyoming limited liability company, of 30 N Gould St, STE R, Sheridan, Wyoming 82801, United States ("we", "us").

• We are the controller of account, billing, support, website and security information about the people who use UltraROAS.ai.
• For personal data inside the Google accounts and product data that a customer connects, such as search terms or names in product data, the customer is the controller and we act as its processor under our data processing addendum.

• Account information: your name, email address, profile photo if you upload one, password (stored only as a hash by our authentication provider) or Google sign-in, workspace names, a team photo if an administrator uploads one, roles and team memberships.
• Google Ads data, when you connect a Google Ads account: account and manager details, campaigns, ad groups, budgets, bidding settings, keywords and negatives, listing groups, search terms, conversion actions, and performance such as impressions, clicks, cost, conversions and conversion value.
• Google Merchant Center data, when you connect a Merchant Center account: account details, products and their attributes, product and account issues, data sources and supplemental feeds, and product performance.
• Google OAuth tokens that let us reach the accounts you authorise.
• What you create in the service: cost of goods, rules, decisions, change proposals, approvals, the changes applied to your Google accounts, and an audit log of who did what and when.
• Ask UltraROAS conversations: your questions, the answers, the sources they cite and what each answer cost.
• Connected AI tools: the name of each tool you connect, the accounts and permissions you give it, and a record of its requests.
• Agreement records: which version of our terms, privacy policy and data processing addendum you accepted, and when.
• Support and email: messages and attachments you send us, and whether our emails to you were delivered.
• Technical data: IP address, browser and device type, service logs and error reports, and, if you allow it, website usage measured by Google Analytics.
• Billing information, if paid plans are introduced: plan and subscription status. Card details would be collected and held by Stripe; we would not receive full card numbers.

We use data from your Google Ads and Merchant Center accounts only to provide the features you use in UltraROAS.ai:

• importing and reporting on campaign, product and search-term performance;
• diagnosing Merchant Center product issues, feed quality and campaign coverage;
• answering your questions in Ask UltraROAS, and drafting product title and description suggestions for you to review;
• simulating rules and preparing change proposals for you to review;
• applying changes to your Google Ads and Merchant Center accounts, such as budgets, campaign status, negative keywords, listing groups and supplemental feed values, only when a person in your workspace with the right role approves them, or when you have switched on an automation that allows them;
• providing data to an AI tool that you have connected and authorised.

UltraROAS.ai's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We transfer Google user data only to provide or improve the features you use, as described above: to OpenAI when you use an AI feature, to an AI tool you connect, and to the providers that host the service. We do not sell Google user data. We do not use it or transfer it for advertising, including retargeting or personalised ads, to build profiles for unrelated purposes, to determine creditworthiness or for lending, or to train generalised AI or machine-learning models.

People at Tagan Labs LLC read your Google user data only with your permission (for example, to answer a support request you raise), when needed for security, to comply with the law, or when it has been aggregated and anonymised for running the service.

When you ask Ask UltraROAS a question, we send OpenAI your question, the earlier messages in that conversation, and the results of the lookups it makes in your workspace. These can include account names, campaign and product names, and performance figures. When you request AI feed suggestions, we send the product's existing title, description, brand and attributes; prices, stock levels and performance are not sent.

We call OpenAI's API with storage turned off, and OpenAI does not use API data to train its models. AI output is only ever a draft or an answer: nothing reaches your Google accounts unless a person approves it. See AI features and your data for details.

• to create and secure your account, run your workspace and provide the features you use;
• to send service emails, such as sign-in links, invitations, alerts you set up and notices about these policies;
• to answer support requests;
• to detect, investigate and prevent abuse, fraud and security incidents;
• to understand how our website is used, if you allow analytics cookies;
• to comply with the law and enforce our terms.

• Contract: to provide the service you or your business signed up for.
• Legitimate interests: to keep the service secure, prevent abuse, improve it and support you, balanced against your rights.
• Consent: for analytics cookies, which you can withdraw at any time from Cookie settings.
• Legal obligation: where the law requires us to keep or disclose information.

We share information with the service providers that host or operate UltraROAS.ai for us, under contracts that limit their use to providing the service. They are listed, with what they do and where, on our subprocessors page. Google Analytics measures website usage only and never receives data from your connected Google accounts.

Data that a connected AI tool reads is sent to that tool and handled under its provider's terms. People in your workspace see workspace data according to the roles your administrators give them; Ask UltraROAS conversations are visible only to the person who had them.

We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a merger, acquisition or sale of our business, in which case this policy continues to apply to your information. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

We are based in the United States, and our database and servers are in the United States. If you are outside the United States, your information is transferred there. Where the law requires it, we protect these transfers with the European Commission's standard contractual clauses and the UK addendum to them, as set out in the data processing addendum.

Data is encrypted in transit. Google refresh tokens are also encrypted at rest with AES-256-GCM and are never sent to your browser, placed in URLs or written to logs. Each workspace's data is isolated with row-level security in the database, and access inside a workspace follows the roles you assign. See Security for more.

• Profile photos: until you remove them. Team photos: until an administrator removes them, or the workspace is deleted.
• Daily performance data imported from Google: up to 25 months.
• Raw import data held while a report is processed: 30 days at most.
• Ask UltraROAS conversations: 180 days after the last message, or sooner if you delete them.
• Products, settings, rules, decisions, change records, audit log and support conversations: while your workspace exists.
• Service logs and error reports: up to 90 days.
• Agreement records: while your account exists, as evidence of what was accepted.

When you disconnect a Google account, we revoke our access and stop all imports and pending changes for it. When you delete a workspace, we revoke its credentials and remove its data from our active systems within 30 days; backups expire on their normal schedule. Changes already applied to your Google accounts stay in place unless you undo them. To delete your personal account, email support@ultraroas.ai.

You can revoke UltraROAS.ai's access at any time from your Google Account permissions page.

We use essential cookies to sign you in and keep the service secure. We use Google Analytics cookies only if you accept them. See our cookie policy.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict how we use it, and to withdraw consent. Residents of some US states, including California, have similar rights and the right not to be discriminated against for using them.

Workspace owners can export and delete workspace data from Settings. For anything else, email support@ultraroas.ai. We may need to verify your identity, and we respond within the time the law requires. If the request is about data a customer controls, we will pass it to that customer. You may also complain to your local data protection authority.

UltraROAS.ai is a business service and is not intended for anyone under 18. We do not knowingly collect their information.

If we make material changes, we will update the effective date, email workspace owners before the changes take effect, and ask you to review the new version the next time you sign in.

Tagan Labs LLC, 30 N Gould St, STE R, Sheridan, Wyoming 82801, United States. Questions or requests about privacy: support@ultraroas.ai.