RoyaltyOak Marketing HQ Privacy Notice
RoyaltyOak Marketing HQ Privacy Notice
This notice covers the Google reporting connection in RoyaltyOak Marketing HQ, RoyaltyOak's private business dashboard. It is separate from the store privacy policy, which describes shopping and store interactions.
Information accessed and its purpose
After the authorized owner grants permission, Marketing HQ discovers the Analytics and Search Console properties that account can access and lets the owner select the RoyaltyOak properties to use. It requests only the Google Analytics read-only and Search Console read-only permissions.
Reports can include search queries, page addresses, clicks, impressions, click-through rates, average search positions, traffic sources, campaign information, sessions, engagement, page views, key events, and aggregated purchase and revenue metrics. These records support private marketing reporting and performance review. The connection does not request Gmail messages, Drive files, Contacts, or permission to change Google property settings.
Storage and access
Google authorization tokens are encrypted in server-side storage. Imported report snapshots and derived internal reporting records are stored in the private application database and are available through its authorized owner interface. The application renews access using the existing Google permission when that permission remains valid.
Sharing and limited use
The connection communicates with Google's authorization and reporting services. Google reporting records are not published on this information page or in social-media posts. RoyaltyOak does not sell Google user data or use it for advertising targeting or training generalized AI models.
RoyaltyOak Marketing HQ's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnection and deletion
The owner can disconnect Google in Marketing HQ, which removes the saved local connection credentials and pending authorization flows. Disconnection does not automatically delete previously imported reports or revoke the Google-side grant. The owner can separately revoke that grant in their Google Account's third-party connections settings.
Imported Google report snapshots are limited to the most recent 30 per owner. Derived weekly reports and backups can have different retention. For review or deletion of retained reporting data, contact the operator at saaralon93@gmail.com.
This notice must be reviewed before changes expand the Google data accessed, its purpose, or its recipients.
Pinterest connection
This section covers the Pinterest integration in addition to the Google reporting connection described above. Marketing HQ is operated for RoyaltyOak's authorized business owner.
Information and purpose
After the owner grants Pinterest OAuth permission, the app accesses the connected account's identifier, username, account type and business name, along with public-board information needed to choose and verify a destination. It reads information about the owner's Pins to verify access and publication results. These operations support the owner's private account review and individually approved organic publishing workflow.
The owner supplies or approves the Pin's image, title, description, alternative text, board and time. The app sends the approved publication package to Pinterest. Public boards can be created only following a separate owner request. The current scopes are user_accounts:read, boards:read, pins:read, boards:write and pins:write. The integration does not request advertising, billing, secret-board or profile-write access.
Storage and service providers
Access and refresh tokens are encrypted in server-side storage. The private dashboard retains connection metadata, the owner's content and approvals, schedule records and publication receipts. Cloudflare hosts the scheduling worker, encrypted per-job credentials and the media copies required for approved scheduled publication. These copies allow scheduled work to continue while the owner's computer is off. The app does not collect Pinterest passwords or session cookies.
Approved media is made accessible at a public delivery URL so Pinterest can retrieve it. The current cloud cleanup process removes media after a calendar month following completion or confirmed cancellation of all associated jobs; unresolved or uncertain jobs retain their media pending resolution. This cleanup does not remove a Pin already created on Pinterest. Public Pins are subject to Pinterest's own settings and policies.
Disconnection and requests
Disconnecting Pinterest in Marketing HQ removes its saved local connection credentials and pending local authorization flows. It does not automatically cancel an already-approved cloud schedule, delete publication history, delete an existing Pin, or revoke the Pinterest-side permission grant. Pending cloud work must be cancelled separately and its cancellation confirmed. The owner can separately revoke the app's permission in Pinterest account settings.
For review or deletion of retained connection, reporting or publication records, contact saaralon93@gmail.com. Such a request must account for pending work, uncertain publication outcomes and retained backups. The app does not sell Pinterest API data or use it to train AI models.