This policy explains how Metrics Optimize handles information when authorised users connect Google accounts to the Single Brain marketing analytics application. It covers the Single Brain OAuth integration, connected services, reporting and related application storage. It does not imply that every listed Google API is enabled for every user.
1. Who operates Single Brain?
Metrics Optimize develops and operates Single Brain from Bangladesh. Contact zunnunreza@gmail.com for privacy questions, requests to review or delete application-held data, or assistance disconnecting an account.
2. Information we access
Only when a user authorises a connection and has permission to the selected account, Single Brain may access:
- Google account identity: email address, Google account identifier, the approved OAuth scopes and connection status used to verify the consenting user.
- Google Analytics 4: property and stream information, event counts, key events, audience and aggregated reporting data, and permitted administrative configuration.
- Google Ads: accessible customer IDs, manager-client relationships, campaign configuration and performance including impressions, clicks, spend, conversions, ads, keywords and available Performance Max reporting.
- Google Search Console: verified sites, search queries and performance, indexing-related records, and permitted sitemap information.
- Google Tag Manager: authorised accounts, containers, workspaces, tags, triggers, variables and versions.
- BigQuery and Merchant Center: datasets, reporting results, product or merchant settings where separately authorised.
- Application records: requested tasks, client/account mappings, diagnostic results, audit reports, job status and technical/error logs needed to run or secure the integration.
Single Brain does not obtain Google account passwords. OAuth access is scoped to the services the user separately connects. Some scopes permit edits, but any editing capability must also pass the application's specific permission and approval controls.
3. How Google data is used
- Verify the authorising Google identity and the accounts the user is permitted to access.
- Retrieve and analyse measurement, search, advertising and product performance when requested.
- Diagnose tracking configuration, data quality, reporting discrepancies and conversion attribution.
- Generate user-requested audit findings, comparisons, dashboards and recommendations.
- Perform separately approved changes only where the corresponding service integration offers that capability and the user has authorised the exact operation.
- Monitor integration reliability, access errors, misuse and security incidents.
Google Ads access in Single Brain is for read-only reporting. The application does not use Google API user data to create retargeting audiences, sell user information, serve personalised advertisements or train general-purpose artificial intelligence models. Access and use are limited to the user-facing tasks described on the application homepage.
4. Storage and security
Single Brain runs its application and OAuth callback on Cloudflare infrastructure. Google OAuth refresh tokens are stored in private Cloudflare storage and encrypted by the application using AES-GCM. Access tokens and refresh tokens are not intentionally returned as part of public webpage responses or ordinary ChatGPT tool results. Google account connections are separated by authorised user and Personal or Spark profile.
Requested reporting data and audit results may be held in application storage so users can retrieve them. Access is controlled through authenticated tool access, account-specific permissions and applicable client/manager account checks. No system can guarantee absolute security, and we review access and storage controls as the service evolves.
5. When data is shared with service providers
We use service providers to deliver authorised features. These can include Google for authentication and API responses, Cloudflare for application execution and storage, and OpenAI/ChatGPT when the user invokes Single Brain through the connected ChatGPT interface. In that workflow, requested account information or report results may be included in the response supplied to the chat provider for the user's analysis. The provider's separate terms and data controls apply to information processed there.
Data is not sold. We do not transfer Google user data to unrelated advertisers or use it for unrelated purposes. Any transfer is limited to user-authorised application functions, security needs, or legal obligations, consistent with applicable Google API policies. Where an agency user connects a client account, they must have authority to access and analyse that client's data.
6. Retention
- Full Google Ads exports: stored raw-report chunks are scheduled for deletion after 30 days in the private export store.
- Audit history: the application keeps a rolling recent audit history, with older entries removed as new runs replace them. Other operational records may remain until their configured expiry or deletion.
- OAuth connection records: encrypted refresh credentials and connection metadata are retained while the connection is configured, until removed or invalidated. Revoking consent at Google stops future token access but does not by itself delete previously saved reports.
- ChatGPT conversations: content shared with the chat provider is handled under that provider's separate retention and account controls.
Retention periods may differ by data type, provider, and applicable legal or security obligations. Users may contact us to request information about a specific dataset or to ask for deletion of stored Single Brain account data.
7. Your controls and deletion requests
- Review the connected Google account and its permissions at the time of consent.
- Revoke access in Google Account connections whenever you choose.
- Email zunnunreza@gmail.com to request disconnection, export, correction, or deletion of data held by Metrics Optimize. We may need to verify that you are the account owner or authorised administrator.
- Manage any chat history and saved information separately through the platform where you used Single Brain.
A revoked Google grant does not revoke a third party's independent permissions or automatically delete information previously exported to another service. We will explain any records that must be retained for security or legal reasons when responding to a request.
8. Children's data and international processing
Single Brain is designed for authorised professional and business use, not for children. Application data may be processed in locations where our authorised infrastructure and service providers operate. Do not connect accounts you are not authorised to use or transfer data that your organisation's policies prohibit.
9. Updates to this policy
We may revise this policy when permissions, connected Google services, data retention or service providers change. The effective date above will be updated and the current version will remain accessible at this URL. Material changes affecting connected users may require additional notice or consent.
Related pages: Application overview and Single Brain Terms of Service.