Google Analytics Privacy Policy

1) Introduction

This Privacy Policy explains how Velamum handles information when you choose to connect a Google account to its Google Analytics 4 integration. It supplements our general Privacy Policy and applies specifically to Google API data.

2) Information We Access

When you authorize the optional Google Analytics 4 (GA4) connection, Velamum may access the Google account identifier and email address (if permitted), Analytics account and property identifiers, property configuration and metadata, and the GA4 reports, dimensions and metrics you authorize. Examples of report data may include traffic sources, countries, page performance, visitor activity, and aggregated engagement or conversion metrics.

We request only the permissions necessary to operate the features you choose. Google displays the requested permissions during OAuth authorization. We do not request your Google account password.

3) How We Use Information

We use the Google information you authorize to connect your account, identify accessible Analytics properties, retrieve requested reports, display dashboards and insights, maintain the integration, diagnose errors, and protect the service. The information is used to provide or improve these user-facing features, not to build advertising audiences or to sell Google API data.

4) Google API Limited Use

Velamum's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements where applicable. Google API user data is not sold, used for personalized or targeted advertising, or transferred to data brokers or information resellers. Google Workspace API data, if ever accessed, will not be used to develop, improve, or train generalized or non-personalized AI or machine-learning models. We do not use Google Analytics API data to train generalized AI or machine-learning models.

5) OAuth Tokens and Security

Where Google issues OAuth access or refresh tokens, Velamum uses them solely to access APIs you have authorized. We limit access to connection credentials and Google-derived information to personnel and systems that need it for the integration, and apply appropriate technical and organizational safeguards to protect confidentiality and prevent unauthorized access.

We do not ask for or store your Google account password. No internet-based service can guarantee absolute security. Specific technical controls, including any encryption at rest, should be described only where implemented and verified.

6) Storage and Retention

Connection identifiers and OAuth tokens are retained while needed to operate your authorized integration, subject to applicable legal and security requirements. GA4 report information may be processed or cached to display dashboards and improve performance. We review the need to retain this information and remove it when no longer required for its stated purpose, except where lawful retention is necessary.

Revoking Google authorization stops further authorized access but may not automatically delete information previously stored by Velamum. You can request deletion of eligible connection credentials and associated stored Google data by contacting hello@velamum.com. We will explain any applicable retention exceptions and the handling of your request. For details about current retention periods, contact us at that address.

7) Sharing and Service Providers

We do not sell Google user data or share it with third parties for their independent advertising purposes. Hosting, infrastructure, maintenance, or security providers may process data on our behalf only as necessary to operate the requested service and subject to appropriate protections. We may disclose information where required by applicable law. We do not transfer Google API data to data brokers or advertising networks.

8) Revoking Access

You can revoke Velamum's authorization at any time through your Google Account connections. Where the Velamum dashboard provides a disconnect option, you may also use it. Revocation prevents future access using the revoked authorization; it does not necessarily erase data previously retained. To request removal of stored data, see Section 9.

9) Deletion Requests

To request deletion of Google connection details, OAuth credentials, and associated Google API data held by Velamum, email hello@velamum.com. We may need to verify that you are authorized to make the request. We will delete eligible data or explain any limited retention required by law or for legitimate security purposes. You can also use any account-deletion tools available within Velamum.

10) International Processing

Data may be processed in countries where our hosting or service providers operate. Where required, we apply appropriate safeguards for cross-border transfers.

11) Your Rights

Depending on applicable law, you may have rights to access, correct, delete or restrict processing of personal information and to object or withdraw consent. Contact hello@velamum.com to exercise these rights.

12) Children

The integration is intended for people authorized to manage business analytics properties and is not directed at children.

13) Changes to This Policy

We may revise this policy when our integration, data-handling practices, or legal obligations change. We will publish the updated policy here and revise the last-updated date. Where changes materially affect how Google user data is accessed, used, stored, or shared, we will provide an appropriate notice to affected users, such as through the application or email, before or when the change takes effect as applicable.

14) Contact

For privacy questions and requests, contact hello@velamum.com or visit https://velamum.com/.