Privacy Policy
Last updated:
MVP Demonstration Notice
This is a demonstration version (MVP) of Elite Budget Tracker. Some features use mock data for demonstration purposes. In production, all data would be securely synchronized from actual ad platforms.
Google User Data Disclosure
This section specifically describes how Elite Budget Tracker handles data accessed through Google APIs, in compliance with the Google API Services User Data Policy.
Data We Access from Google Ads
When you connect your Google Ads account, we access:
- Google Ads account name and ID
- Campaign names and IDs
- Campaign budget amounts and daily spend data
- Campaign status (active, paused, etc.)
We do NOT access: Ad creative content, targeting settings, audience data, conversion tracking, keywords, or any personal information about people who view or click your ads.
How We Use Google Ads Data
We use your Google Ads data exclusively to:
- Display your campaign budgets and spend in our dashboard
- Calculate budget pacing and generate spend forecasts
- Send you alerts when campaigns approach budget thresholds you set
- Generate reports showing spend trends over time
We do NOT use Google Ads data to train AI or machine learning models, serve advertising, or for any purpose other than providing our budget tracking service to you.
Data Sharing
We do NOT sell, share, or transfer your Google Ads data to any third parties except as necessary to provide our service (e.g., encrypted storage on our cloud infrastructure). Your Google Ads data is never shared with advertisers, data brokers, or any other third parties.
Data Storage and Protection
Your Google Ads data is protected by:
- Encryption in transit (TLS/SSL) and at rest (AES-256)
- OAuth 2.0 tokens stored encrypted and never shared
- Access restricted to authenticated users of your account only
- Regular security audits and monitoring
Data Retention and Deletion
Google Ads data is retained while your account is active to provide historical reporting. You can delete your Google Ads data at any time by:
- Disconnecting your Google Ads account from our platform (removes synced data within 24 hours)
- Deleting specific campaigns or clients from your dashboard
- Closing your account (all data deleted within 30 days)
- Contacting us at Nate@upstreamdigitalmarketing.co to request immediate deletion
Revoking Access
You can revoke our access to your Google Ads data at any time by visiting your Google Account permissions page and removing Elite Budget Tracker. Upon revocation, we will no longer be able to access new data, and you can request deletion of previously synced data.
Table of Contents
1. Introduction
Welcome to Elite Budget Tracker. This Privacy Policy explains how Upstream Digital Marketing ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you use our ad spend tracking and budget management platform.
By using Elite Budget Tracker, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.
2. Information We Collect
2.1 Account Information
When you create an account with Elite Budget Tracker, we collect:
- Name and email address: Used for account creation and communication
- Password: Encrypted and securely stored using industry-standard bcrypt hashing
- Company or organization name: Optional, to help you organize your workspace
- Account preferences: Settings for notifications, alerts, and display options
2.2 Client and Campaign Data
To provide our budget tracking services, we store:
- Client information: Names, budget allocations, and billing periods
- Campaign data: Campaign names, budgets, spend amounts, and performance metrics
- Budget tracking data: Pacing calculations, forecasts, and historical spend patterns
- Alert configurations: Custom thresholds and notification preferences you set
- Notes and annotations: Any comments or notes you add to campaigns or clients
Note: In this MVP version, some campaign data may be mock data for demonstration purposes.
2.3 Ad Platform Connections
When you connect Meta Ads, Google Ads, Microsoft Advertising, we collect:
- OAuth access tokens: Securely encrypted and stored to access your ad platform data
- Campaign names and IDs: To track which campaigns belong to which clients
- Budget and spend data: Daily spend amounts, budget limits, and pacing information
- Account metadata: Account names, IDs, and connection status
What we DO NOT access: We do NOT access ad creative content, targeting settings, audience data, conversion tracking pixels, or any other data beyond campaign names, budgets, and spend amounts. We only request read-only permissions from ad platforms.
2.4 Usage Data
We automatically collect certain information when you use our service:
- Log data: IP address, browser type, device information, and operating system
- Usage patterns: Pages visited, features used, and time spent in the application
- Performance data: Load times, errors, and technical diagnostics
- Session information: Login/logout times and session duration
3. How We Use Your Information
We use the collected information for the following purposes:
3.1 Provide the Service
- Synchronize and track ad spend from connected platforms
- Calculate budget pacing and generate forecasts
- Display campaign performance metrics and trends
- Organize client budgets and campaigns
3.2 Alerts and Notifications
- Send email alerts when budgets reach specified thresholds
- Notify you of overspend situations or pacing issues
- Provide daily or weekly summary reports
- Alert you to connection issues with ad platforms
3.3 Improve and Optimize
- Analyze usage patterns to improve the user interface
- Identify and fix bugs or technical issues
- Develop new features based on user needs
- Optimize forecast algorithms for better accuracy
3.4 Communication
- Send important service updates and security notices
- Respond to your support requests and questions
- Provide product updates and feature announcements
- Send marketing communications (with your consent)
3.5 Legal and Security
- Comply with legal obligations and regulations
- Protect against fraud, abuse, and security threats
- Enforce our Terms of Service
- Protect the rights and safety of our users
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following circumstances:
4.1 With Ad Platforms
We access data from Meta Ads, Google Ads, Microsoft Advertising using OAuth tokens you authorize. This data is used solely to provide our service and is not shared back with the platforms or with third parties.
4.2 With Service Providers
We may share information with trusted third-party service providers who help us operate our business:
- Cloud hosting: To store and process your data securely
- Email services: To send alerts and notifications
- Analytics: To understand usage patterns (anonymized data only)
- Customer support: To respond to your inquiries
All service providers are contractually obligated to protect your data and use it only for the purposes we specify.
4.3 Legal Requirements
We may disclose your information if required by law or in good faith belief that such action is necessary to:
- Comply with legal obligations or court orders
- Protect and defend our rights or property
- Prevent fraud or investigate potential violations
- Protect the safety of users or the public
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have.
5. Data Security
We implement industry-standard security measures to protect your information:
5.1 Encryption
- Data in transit: All data transmitted between your browser and our servers is encrypted using TLS/SSL
- Data at rest: Sensitive data, including OAuth tokens and passwords, is encrypted in our database
- Password security: Passwords are hashed using bcrypt with salt
5.2 Access Controls
- Multi-factor authentication for administrative access
- Role-based access control (RBAC) for internal team members
- Regular security audits and penetration testing
- Automated monitoring for suspicious activity
5.3 Infrastructure Security
- Secure cloud hosting with reputable providers
- Regular security patches and updates
- Firewall protection and intrusion detection
- Automated backups with encryption
Note: While we implement strong security measures, no system is completely secure. We encourage you to use strong passwords and keep your login credentials confidential.
6. Your Rights and Choices
You have the following rights regarding your personal information:
6.1 Access and Export
- View your data: Access all personal information stored in your account
- Export your data: Download your client lists, campaigns, and budget data in CSV format
- Request a copy: Contact us for a complete copy of all data we hold about you
6.2 Correction and Updates
- Update your account information at any time through account settings
- Correct inaccurate client or campaign data
- Update notification preferences and alert thresholds
6.3 Deletion and Account Closure
- Delete specific data: Remove individual clients, campaigns, or connections
- Close your account: Request complete account deletion through settings or by contacting support
- Data retention: After account deletion, we retain minimal data for legal and accounting purposes (see Data Retention section)
6.4 Opt-Out Rights
- Marketing emails: Unsubscribe from promotional communications at any time
- Alert notifications: Customize or disable specific alert types
- Analytics: Request exclusion from anonymized usage analytics
6.5 GDPR Rights (EU Users)
If you are in the European Economic Area, you have additional rights under GDPR:
- Right to be forgotten
- Right to data portability
- Right to restrict processing
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
To exercise any of these rights, please contact us at Nate@upstreamdigitalmarketing.co. We will respond within 30 days.
8. Data Retention
We retain your information for as long as necessary to provide the service and comply with legal obligations:
8.1 Active Accounts
- Account data: Retained while your account is active
- Campaign data: Retained for historical reporting and analysis
- Usage logs: Typically retained for 90 days
8.2 Closed Accounts
- Personal information: Deleted within 30 days of account closure
- Financial records: Retained for 7 years for tax and accounting purposes (when applicable)
- Aggregated data: Anonymized data may be retained indefinitely for analytics
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your jurisdiction.
We ensure appropriate safeguards are in place for international transfers, including:
- Standard Contractual Clauses (SCCs) for EU data transfers
- Adequacy decisions by regulatory authorities
- Data Processing Agreements with service providers
10. Children's Privacy
Elite Budget Tracker is not intended for use by children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.
When we make changes:
- We will update the "Last updated" date at the top of this policy
- We will notify you via email for material changes
- We may display a prominent notice in the application
- Your continued use of the service constitutes acceptance of the updated policy
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Upstream Digital Marketing
99 E Main St, Franklin, TN 37064, United States
We will respond to your inquiry within 30 business days.