What we collect, and what we do with it.

Goldbeater is operated by PressRoom, Inc. (“we”, “us”). This policy explains how we handle personal data through goldbeater.ai and the Goldbeater product, and we are the controller of that data. For anything here, write to privacy@goldbeater.ai.

This policy covers our website, the product, and data we read from Google Ads accounts connected to it. It does not cover what you do with the product’s output, your own obligations to the people in your advertising data, or third-party sites we link to. If you connect an account that belongs to someone else, you are responsible for having the authority to do so (see the terms of service).

We collect the following categories of information:

• Account and workspace information: your name, email address and picture from your Google account, your workspace, its members and invitations, and your settings.
• Google Ads data: information read from the accounts you or your workspace connect, such as campaigns, keywords, search terms, ads and assets, conversions, spend and performance, and who has access to an account.
• What your landing pages answer: each time the checks run, Goldbeater opens the pages the ads in a connected account send clicks to, and the store pages its app assets link, and records what each answered (its status, the address a redirect ended at, and how long it took), whether its HTML carries a Google tag, with the tag’s ID, the words of its title or main heading where they say the page wasn’t found, and the phone numbers its call links dial. It sends the addresses of the ten pages with the most spend to Google’s PageSpeed Insights and keeps the load times Google reports. Nothing else on the page is kept. The security page says how it asks.
• What you give us: questions you ask, decisions you make, memories you keep, feedback and messages you send us, and anything else you enter.
• What you tell us about Enterprise: when you ask about it on our form, your name, work email and company, about how much your Google Ads accounts spend, whose accounts they are and how many, what you need, and anything else you write. We use it to reply to you and to agree terms, and we email you a confirmation. We keep the internet address the form was sent from only as a one-way code, to limit how many requests one place can send in a day.
• Referral information: whether you arrived through somebody’s referral link, and the referrals you make.
• Billing information: your plan and its history. Payments are processed by Stripe, which collects your payment details; we don’t receive your full card number.
• Usage, device and diagnostic data: how the product is used, log and error data, browser and device characteristics, and IP address.

Goldbeater’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (opens in a new tab), including the Limited Use requirements. Specifically:

• We request the Google Ads scope (adwords), which Google grants as a single permission to read and to make changes. We use it to read the accounts you connect, and to make a change only where you have approved that change.
• We use data received from Google APIs only to provide and improve the features of Goldbeater that you use. We don't use it to serve advertising, and we don't sell it.
• We don't transfer it to others except to service providers that help us provide those features, as necessary to comply with the law, as part of a merger, acquisition or sale of assets, or where you direct us to, for example by sharing a conversation's link.
• People at Goldbeater don't read it except with your agreement, where necessary for security purposes (for example, investigating a bug or abuse), to comply with applicable law, or for our internal operations where the data has been aggregated and anonymized. You give that agreement when you connect a Google Ads account: people at Goldbeater may review the accounts you connect, to support you and to troubleshoot and improve the service.
• We don't use it to develop, improve or train generalized artificial intelligence or machine learning models.

You can review or revoke Goldbeater’s access at any time at myaccount.google.com/permissions (opens in a new tab), or disconnect a login in the product.

We use the information we collect to:

• Provide, operate, maintain and improve the service, including its analysis, reviews and features.
• Communicate with you about the service, your account, your plan and changes to either, and respond to you.
• Send you information about Goldbeater that you can opt out of at any time.
• Secure the service, prevent fraud and abuse, and debug problems.
• Understand how the service is used and develop new features and products.
• Run programs such as referrals, and process payments.
• Comply with the law, enforce our terms, and protect our rights and those of others.
• For any other purpose we describe when we collect it, or with your consent.

People at Goldbeater read the questions you ask in the product, to see how it’s used and where its answers fall short. Each question is posted as it’s asked, in your words and with your name and the ad account it’s about, to our team’s Slack, which keeps its copy for as long as our Slack workspace does. The answers, and the data read from your account to write them, aren’t posted there.

People at Goldbeater also review the Google Ads accounts you connect, and the records the service makes as it runs, such as which checks ran on an account, what they found, how long they took and any errors. We do this to support you, to troubleshoot the service and to improve it, for example to find problems a new check should catch and to make the checks we have faster and more accurate. You agree to this when you connect an account, as the disclosure above says.

Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interests in running and improving the service, your consent, and our legal obligations.

We create aggregated and de-identified data from what we hold, including performance data and the analysis produced from it. Data in that form doesn’t identify you, your organization or anyone else, and we may use it for any lawful purpose, including benchmarks, research, product development and our own materials, during and after your use of the service. We don’t attempt to re-identify it.

Data received from Google APIs is used this way only in aggregated and anonymized form, consistent with the disclosure above.

The analysis is produced with AI models from third-party providers. They receive the information needed to answer a question or run a review, through their APIs, under terms that don’t allow them to train their models on it. We don’t train models of our own on identifiable customer data.

We don’t sell personal data. One thing we do is what some US state laws call sharing personal data for cross-context behavioral advertising, or targeted advertising: the Google Ads tag on our website lets Google show our own ads to people who have visited it. Cookies and similar technologies says what that covers and how to opt out. Nothing read from an ad account is part of it. Otherwise we share personal data:

• With service providers that process it on our behalf, such as hosting and infrastructure, AI model providers, email delivery, error monitoring, payment processing, website analytics and ad measurement, internal communications and code hosting. We keep a list on the security page.
• With people in your workspace, who see the workspace’s accounts and the work done on them, and with anyone you give a shared conversation’s link to.
• In connection with a merger, acquisition, financing or sale of all or part of our business.
• Where we believe it’s needed to comply with the law or legal process, or to protect the rights, property or safety of us, our customers or others.
• With your consent, or at your direction.

We keep information for as long as your account is open and as long as we need it for the purposes in this policy, and longer where the law requires or permits it, for example billing and tax records. When an account is closed we delete or de-identify its data within a reasonable period, except what we must or may keep for legal, security or business-record purposes. Backups are overwritten on their normal schedule, and aggregated, de-identified data isn’t affected.

We use technical and organizational measures designed to protect the information we hold; the security page describes several of them. No system is completely secure, and we can’t guarantee the security of information you send us.

You can disconnect a Google login in the product, or revoke our access at Google, at any time. You can also ask us, at privacy@goldbeater.ai:

• For a copy of the personal data we hold about you, or of your account's data.
• To correct it, or to delete it.
• What we hold about you, and why.

You can stop a visit to our website being used to show you our ads: Cookies and similar technologies says how, and we honor your browser’s Global Privacy Control signal as a request to opt out.

Depending on where you live, you may have further rights, such as to access, port, restrict or object to our use of your data, or to withdraw consent. We honor them as the law requires, and we won’t discriminate against you for exercising them. We may need to verify your identity before acting on a request, and we may decline a request where the law allows. You can appoint an authorized agent where the law provides for it.

We use cookies and similar technologies that the service needs: to keep you signed in, to secure sign-in, and to remember a referral link you followed so the referral can be credited (for up to 60 days). Our site and product also report errors so we can fix them.

The first time you open a page on goldbeater.ai, we set one more cookie. It records which page it was, the site that sent you there (its name, such as www.google.com, never the full address), any campaign tags in the link (utm_source, utm_medium and utm_campaign), and the date. It lasts 60 days, and only our site and service can read it. If you sign up, we keep what it recorded with your account, so we know how people find Goldbeater. We don’t set it for visitors in the European Economic Area, the United Kingdom or Switzerland.

Our website’s pages, and the first screen after you sign up, use Google Analytics and Google Ads to count visits and to measure whether our ads lead people to sign up. They set Google’s cookies (_ga and _ga_GC270DNMXC for up to two years, _gcl_au for 90 days, and _gcl_aw for 90 days when you arrive from one of our ads, which holds Google’s id for that ad click) and send Google the page you’re on, the page that sent you, whether you looked further (a second page, a picture or a panel of detail you opened, a button you pressed toward signing up), and details of your browser and device. When a workspace you made starts a trial or first pays, we tell Google Analytics that too, with the plan and the amount, against the same browser. The product’s pages send Google’s measurement nothing, and it never receives anything read from your ad accounts.

If you make a workspace in a browser those tags counted, we keep the ad click’s id with it, where an ad brought you. When that workspace starts a trial or first pays, we also tell Google Ads directly, so the ad that led there can be credited whichever device it was seen on. We send what happened and when, a payment’s amount, the ad click’s id, and the email address of the person who made the workspace as a SHA-256 hash: a code Google can match to a Google account and can’t read back into an address. Nothing else about the workspace goes with it.

We also use the Google Ads tag to advertise Goldbeater to people who have been to our website. It tells Google that your browser visited and which pages it opened. Google may then show you our ads on Google Search, YouTube, Gmail and the sites and apps that carry Google’s ads, and may show them to people it judges similar to our visitors. Only the pages those tags are on count: never a page of the product that shows an ad account, and never anything read from one. Google Analytics isn’t used for this, and what we send Google Ads directly is sent with ad personalization off, to measure our ads and nothing else.

You can turn that off. If your browser sends Global Privacy Control (opens in a new tab), we tell Google not to use your visit to personalize ads and to process it only on our behalf. You can also switch off personalized ads for your Google account in Google’s ad settings (opens in a new tab), block the tags with your browser’s tracking protection, or opt out of Google Analytics with Google’s browser add-on (opens in a new tab). For visitors in the European Economic Area, the United Kingdom and Switzerland the tags set no cookies, and a visit isn’t used for advertising. Where the tags set no cookie, for either reason, we send Google nothing about your workspace.

Where the product shows what a finding is about, the picture comes from Google’s own servers, as it does in Google Ads: an ad’s image from Google’s ad image host, a YouTube video’s thumbnail from YouTube, and a person’s picture from their Google account. Your browser fetches each one from Google, which sees your IP address and browser as it would for any page that shows it, and isn’t told which page of ours it was on.

We are based in the United States, and we and our service providers process data there and elsewhere. Where a transfer of personal data out of the UK, the EEA or Switzerland needs a legal mechanism, we rely on the European Commission’s Standard Contractual Clauses or another lawful mechanism.

Goldbeater is a business tool and isn’t directed at anyone under 18. We don’t knowingly collect data from children, and we delete it if we learn we have.

We may update this policy from time to time. The current version is always here, with the date it was last updated. If we make a material change, we’ll give notice as the law requires, for example by email or in the product. Continuing to use Goldbeater after a change takes effect means you accept it.

Privacy questions and requests: privacy@goldbeater.ai. If you are in the UK or the EEA, you may also complain to your local data protection authority.