Privacy policy
Last updated November 1, 2026
GHLData is a reporting service operated by GHL Plugins ("we", "us"). It lets businesses and agencies connect their own advertising and analytics accounts and view the reports from those accounts in one place. This policy explains what we collect, how we use it, who we share it with and how to delete it.
What we collect
- Your sign-in profile. When you sign in with Google we receive your name, email address and profile picture.
- Connected account access. When you connect a data source you approve read-only access on Google's (or Meta's) consent screen. We store the access and refresh tokens that the platform issues, encrypted.
- Report data. When you or your team run a report, we fetch it from the connected platform and may keep a temporary copy (a cache) for up to 24 hours so repeat requests are fast. We store the list of properties, sites and ad accounts you place in each workspace, with their names, currency and time zone.
- Account and billing details. Your account name, team members and roles, and your plan. Payments are handled by Stripe; we never see or store full card numbers.
- Usage and security logs. Sign-in times, IP address and browser type, and a log of sensitive actions such as connecting or deleting a data source.
Google user data
GHLData requests these read-only Google scopes, only when you connect a data source:
| Scope | Why we need it |
|---|---|
analytics.readonly | List your Google Analytics 4 properties and run the reports you ask for. |
webmasters.readonly | List your Search Console sites and read search performance and sitemap data. |
adwords | List your Google Ads accounts and read campaign performance reports. We never create, change or pause anything. |
GHLData's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google user data only to provide and improve the reporting features you use in GHLData.
- We do not transfer it to others except as needed to provide those features, to comply with law, or as part of a merger or acquisition with notice to you.
- We do not use it for advertising, and we do not sell it.
- No person at GHL Plugins reads it unless you ask us to for support, it is needed for security or abuse investigation, or the law requires it.
- We do not use it to develop, improve or train generalized or non-personalized AI or machine learning models.
AI assistants
If you connect GHLData to an AI assistant such as Claude, report data is sent to that assistant only when you or your team ask it a question that needs the data. That assistant's own terms and privacy policy then apply to what it receives. You can remove the connection at any time.
How we protect it
- Tokens are encrypted with AES-256-GCM. The encryption key is kept in our hosting provider's secret settings, never in the database.
- Every customer account is isolated; our software checks your membership on every request.
- All traffic uses HTTPS.
Who we share it with
We use these service providers to run GHLData. They process data only on our instructions:
- Vercel (hosting) and Neon (database), in the United States.
- Stripe (payments).
- Google and Meta, only to fetch the reports you request from your own connected accounts.
We do not sell personal information and do not share it for cross-context behavioral advertising.
How long we keep it
- Cached report data: up to 24 hours.
- Connection tokens: until you disconnect the data source, revoke access in your Google or Meta account, or delete your account.
- Account records and security logs: while your account is open, then up to 30 days, except billing records we must keep by law.
Your choices and rights
You can disconnect a data source, delete a workspace, or ask us to delete your whole account at any time. See data deletion for the steps. You can also ask for a copy of your personal information or to correct it by emailing support@ghlplugins.com. Depending on where you live you may have further rights under laws such as the GDPR or California's CCPA; we will honor them.
Children
GHLData is a business tool and is not meant for anyone under 18.
Changes
If we change this policy in a way that matters, we will tell account owners by email before it takes effect.
Contact
GHL Plugins · support@ghlplugins.com