Privacy Policy

This Privacy Policy explains how ESPLB ("we", "our", or "us") collects, uses, stores, and protects information when you use our web application, platform, and Google Data Manager API integration services (collectively, the "Service").

1. Information We Collect

When you authenticate and use the ESPLB Service, we collect and process only the minimum data necessary to operate our integration:

• Google Account & OAuth Information: When you connect your Google account via OAuth 2.0, we collect your basic profile information (such as your name and email address) and OAuth access/refresh tokens required to authenticate API calls on your behalf.
• First-Party Data for API Transmission: Through your use of our Google Data Manager API integration, you may configure the Service to transmit first-party conversion events, hashed customer identifiers (e.g., SHA-256 hashed email addresses or phone numbers), and audience segment data to your authorized Google destination accounts.
• System & Diagnostic Logs: We automatically record standard technical metadata, such as IP addresses, browser types, API request timestamps, and error status codes to ensure platform reliability and security.

2. How We Use Your Information

ESPLB uses the collected data strictly for the following operational purposes:

• Authenticating your identity and maintaining your authorized session with Google APIs.
• Executing automated data ingestion and synchronization tasks via the Google Data Manager API as explicitly configured and instructed by you.
• Monitoring API transmission status, troubleshooting delivery errors, and providing technical support via info@esplb.com.
• Maintaining the security and integrity of our web infrastructure.

3. Data Sharing and Third-Party Disclosure

We do not sell, rent, or trade your personal data or Google user data to any third parties. Data is shared only under the following circumstances:

• Google APIs: Data is transmitted directly to Google endpoints (specifically the Google Data Manager API) solely at your direction based on your configured workflows.
• Cloud Infrastructure Providers: We utilize secure cloud hosting and edge computing providers (such as Cloudflare) to host our application and process API requests under strict data protection obligations.
• Legal Compliance: If required to do so by applicable law, subpoena, or valid legal process.

4. Google API Services User Data Policy & Limited Use Compliance

Specifically, ESPLB guarantees that:

• We only use access to Google user data to provide or improve user-facing data management features that are prominent in the Service's user interface.
• We do not transfer Google user data to third parties except as necessary to provide or improve our user-facing features, comply with applicable laws, or as part of a merger, acquisition, or sale of assets with explicit user consent.
• We do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising on behalf of third parties.
• We do not allow humans to read your Google user data unless we have obtained your affirmative agreement for specific messages, doing so is necessary for security purposes (such as investigating a bug or abuse), or is required to comply with applicable law.

5. Data Security

We implement strict technical and organizational security controls to protect your information and OAuth credentials:

• All data transmitted between your browser, ESPLB servers, and Google API endpoints is encrypted in transit using TLS 1.2/1.3 (HTTPS).
• OAuth tokens and sensitive configuration secrets are stored using industry-standard encryption at rest.
• First-party customer records processed for the Google Data Manager API are hashed using SHA-256 prior to API ingestion.

6. Data Retention, Revocation, and Deletion

• Revoking Google OAuth Access: You may revoke ESPLB's access to your Google account at any time directly via your Google Account Security Permissions page. Upon revocation, we immediately lose access to your Google APIs.
• Data Deletion Requests: You have the right to request complete deletion of your ESPLB account, stored OAuth tokens, and associated logs at any time. To request deletion, please email info@esplb.com with the subject line "Data Deletion Request". We will permanently purge your data within 14 business days.

7. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our technical practices or regulatory requirements. Any updates will be published on this URL with a revised "Last Updated" date.

8. Contact Us

If you have any questions about this Privacy Policy, our data handling practices, or our Google API integration, please contact us:

• Company / Entity: ESPLB
• Email: info@esplb.com