Privacy Policy

For the account you hold with us, Eurocar AS (930302791) is the data controller. When we process data from your connected store or advertising accounts in order to provide the service to you, we act as your data processor and process that data on your instructions.

Account data: your name, email address, organisation details and authentication information.

Connected-system data: information we read from the systems you connect, such as orders, products, catalogue and pricing data, aggregate sales figures, and advertising performance metrics. We read only what is needed to provide the features you use.

Usage data: technical logs about how the service is used, used to operate, secure and improve it.

Where your store's data includes information about your own customers, we access it only to compute the analytics and features you have enabled. We do not sell it, and we do not use it to build any cross-merchant profile. Wherever possible we work with aggregated figures rather than storing individual customers' personal details.

To perform our contract with you (providing the service you signed up for); to pursue our legitimate interests in operating, securing and improving the service in a way that does not override your rights; and to comply with legal obligations. Where required, we rely on consent, which you can withdraw at any time.

We use a small number of carefully selected infrastructure providers to run the service — for example a cloud hosting provider and a managed database provider — and AI model providers to generate analysis and content. These providers process data only on our instructions and under contractual data-protection commitments. We do not sell personal data to anyone.

Where data is processed outside your region, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect it.

We keep personal data for as long as your account is active and as needed to provide the service, then delete or anonymise it within a reasonable period, unless a longer period is required by law. You can request deletion as described below.

Subject to applicable law, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. To exercise these rights, contact us at support@promoosh.com. You also have the right to lodge a complaint with your local data protection authority.

We protect data with encryption in transit, access controls, and tenant isolation so that one organisation can never access another's data. See our separate Data Security page for more detail.

When you connect a Google account, we use Google's OAuth service to request access to the Google Ads API and, optionally, the Google Search Console API. For Google Ads we request the 'adwords' scope — the only scope that API exposes. For Search Console we request the read-only 'webmasters.readonly' scope. We do not request access to Gmail, Drive, Photos or any other Google Workspace data.

Google Ads data we access: campaign, ad group, ad and search-term performance metrics such as impressions, clicks, cost, conversions and conversion value, together with account, campaign and ad settings. We read this data to populate our performance dashboards, profitability analysis and recommendations.

How we use it: to provide and improve the user-facing features you have enabled, including analytics, reporting and AI-generated recommendations. We do not use Google data for our own targeted advertising, and we do not sell it or transfer it to data brokers or advertising networks.

AI processing: aggregated Google Ads performance data may be sent to our AI model provider to generate analysis and recommendations. This is done under our instructions and contractual data-protection commitments, and the provider does not use your data to train its general models.

Retention and deletion: Google access tokens are stored encrypted and used only to provide the service. You can disconnect your Google account at any time, after which the tokens are deleted. Analytics and report data is kept as described in the retention section above and deleted or anonymised on account deletion.

For any privacy question or request, contact support@promoosh.com.