Effective 16 October 2026
Goliath Marketing operates internal Google audit tools, including Goliath MCP Access Google, to help our team analyze authorized marketing data and prepare audits and recommendations. This section explains how those tools access, use, process, share and retain Google information.
These tools are for our internal audit workflow, not public customer signup. “Internal” describes how we use the tools; it does not mean that information stays on one computer or that external processing services are not involved.
This section governs Google API information and audit content derived from it. It takes precedence over general website provisions concerning advertising, remarketing, public statistics or publication of support requests. Those website provisions do not authorize us to publish Google audit data, use it for advertising audiences or disclose it for unrelated purposes.
Access depends on the connected account, the permissions granted and the particular audit query. A Google permission can allow access to more information than an individual report retrieves. We limit audit requests to information needed for the authorized work.
The configured Analytics tools can retrieve account summaries, property details, links to Google Ads accounts, and definitions of custom dimensions and metrics. They can run standard, funnel and real-time reports.
Depending on the requested dimensions, metrics, date ranges and filters, reports may contain traffic, engagement, event and conversion measurements and associated reporting dimensions. These tools use read endpoints. The configured Analytics tools do not change properties or settings.
The configured Ads tools can retrieve identifiers for accessible customer accounts and information about advertising resources selected in a query. Depending on the selected fields, this may include account and campaign information, campaign settings, impressions, clicks, advertising costs and conversion measurements.
Keyword-planning tools can retrieve keyword ideas, historical keyword metrics and forecasts. The configured tools return information and estimates; they do not save advertising plans or change budgets or campaigns. This describes the configured tools' behavior, not the full capabilities of Google's Ads authorization scope.
Where an authorized Search Console connection is used for an audit, information may include property identifiers, search queries, page URLs, clicks, impressions, click-through rates and average position. The information retrieved depends on the connection and requested report.
The Ads sign-in configuration requests basic Google identity permissions, including an account identifier, email address and profile information. The information returned depends on the sign-in flow and granted permissions.
OAuth connections also use authorization information, such as access tokens and, where issued, refresh tokens. These enable permitted API access. They are credentials, not audit-report content. They must not be included in audit reports, AI prompts, shared documents or ordinary application logs.
We use Google information to assess website and advertising performance, investigate issues, compare results over selected periods, generate relevant keyword insights and prepare marketing audits and recommendations. We may consider information from multiple authorized services together when the audit requires it.
Our restrictions apply to retrieved information and to reports, summaries or other content derived from it. We do not sell Google API information, supply it to data brokers or information resellers, use it to build advertising audiences or for website remarketing, or use it for credit or lending decisions. We do not use or transfer it to develop, improve or train generalized artificial intelligence or machine-learning models.
Use is limited to the authorized audit functionality and necessary supporting operations. A change to the tools does not itself authorize a new use of client information or access to a new account.
Team members may review Google information and resulting findings to carry out the authorized audit. Our operating rules restrict access to people and systems needed for that work and require the account holder's or client's authorization for access and human review. Findings may be provided to the client or other recipients authorized for that audit.
We may disclose information to processing services needed for the described workflow. We do not authorize those services to use Google audit data for the prohibited purposes above. Any disclosure required by law or necessary to investigate security incidents must be limited to the relevant purpose and information. Requests to publish or share audit content outside the authorized workflow require separate review and authorization.
The workflow uses Codex and ChatGPT, provided by OpenAI. Google information used in an audit may be transmitted to OpenAI for analysis and assistance with preparing findings. Local execution does not mean that model processing is entirely local.
Content may appear in prompts, responses, uploaded attachments, separately saved files, project materials and cloud working environments. A local export, a conversation and a separately saved attachment are distinct copies and may require separate deletion actions.
OpenAI's handling depends on the product, workspace, account settings and applicable terms. Before processing Google audit information, our team must use an approved configuration that excludes that information from generalized-model training. This includes disabling applicable training or environment-sharing settings where required and avoiding optional feedback or data-sharing actions that would conflict with this policy. If an appropriate configuration cannot be established, the information must not be sent through that configuration.
These operating requirements are not a claim that all OpenAI products have identical settings, zero retention or immediate deletion. Service-side retention and deletion remain subject to the applicable service arrangements and legal or security exceptions.
Working information may be stored on computers used for audits, in Goliath-controlled cloud working directories and in the OpenAI services used for the workflow. The responsible audit operator must identify the locations used, including any additional approved storage or processing service, so that access and deletion can be managed.
Our operating procedures require encrypted network connections to Google and processing services, restricted account and file access, and separate protection of authentication credentials. Only authorized people and systems may access audit data. Credentials must be excluded from source repositories, ordinary logs, prompts and reports. Routine technical logs must not contain raw client-data payloads.
Before a storage location is used, the operator must check its access controls and available protection, including storage encryption where applicable. This policy does not assert that every local disk, external service or backup uses identical encryption or retention arrangements. An unsuitable location must not be used until its protections meet the needs of the information being processed.
We retain working information for the authorized audit and manage removal through the procedures below. Retention is assessed separately for raw exports, temporary analysis, reports, logs, conversations, attachments, credentials and backups.
For new files explicitly enrolled in our designated cloud cleanup system, raw exports and temporary files become eligible for recoverable cleanup 30 days after audit completion and are processed at the next monthly cleanup check. Enrolled technical logs become eligible after 30 days and are processed at the next monthly check. Completed reports are flagged for review at the monthly check after 12 months.
Recoverable cleanup is not permanent erasure. Eligibility does not mean removal on the exact anniversary. The cleanup system does not automatically remove existing unenrolled files, account authorizations, ChatGPT conversations, separately saved attachments or copies held by service providers.
Our monthly manual review must also identify unenrolled audit copies and decide whether they remain necessary. Files no longer needed must be removed through the relevant deletion process. Reports retained after review must have a documented ongoing client or legal need and a further review date within three months. Recoverable trash, backups and service-side copies must be tracked separately; they must not be described as permanently deleted while still retained.
Send privacy questions or deletion requests to michael@goliathmarketing.io. Identify the relevant account, property or audit, but do not send passwords or authentication secrets. We may request information necessary to verify your authority to make the request.
We acknowledge requests within seven calendar days. Our operating target is to complete deletion of information under our control within 30 calendar days after receiving a sufficiently identifiable request. If verification, a legal obligation or a provider's processing timeline prevents completion, we explain the specific issue, what has been removed and the expected next step or review date. This is not an indefinite exception to deletion.
A deletion review covers relevant working files, reports, conversations, separately saved attachments, cloud working copies and credentials where disconnection is requested. We use the available provider deletion controls and distinguish submitting a deletion request from the provider completing deletion. Backup copies subject to a separate expiry cycle are recorded and removed or allowed to expire under that cycle, with the remaining limitation explained where relevant.
You can review or remove the app's access through your Google Account's linked-app settings. Removing access prevents further access through that connection and may stop dependent features. It does not itself delete information previously retrieved.
You may also request disconnection through our privacy contact. The responsible operator must identify the relevant connection, revoke its authorization using the applicable controls and remove stored credentials under our control. Because credentials can be shared by more than one configured workflow, this is a supervised process to avoid disrupting unrelated authorized connections. We retain authorization only while it is needed for the authorized connection and review that need during access and cleanup reviews.
Our use of Google API information is governed by the Google API Services User Data Policy, including applicable Limited Use requirements. These requirements apply alongside the operational restrictions above; this statement does not imply Google has approved or verified the app.
Before introducing a new category of information, recipient or materially different use, we update this policy and provide the notices and consent required for the change. Website use or continued access alone does not replace any consent Google requires for a new data use.
Goliath Marketing
Privacy and deletion requests: michael@goliathmarketing.io
-- Your privacy is critically important to us.
Goliath Marketing is located at:
Goliath Marketing
408 A Avenue
Kaslo, British Columbia, Canada
This Privacy Policy, together with the Terms and conditions posted on our Website, set forth the general rules and policies governing your use of our Website. Depending on your activities when visiting our Website, you may be required to agree to additional terms and conditions.
- Website Visitors
Like most website operators, Goliath Marketing collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. Goliath Marketing's purpose in collecting non-personally identifying information is to better understand how Goliath Marketing's visitors use its website. From time to time, Goliath Marketing may release non-personally-identifying information in the aggregate, e.g., by publishing a report on trends in the usage of its website.
Goliath Marketing also collects potentially personally-identifying information like Internet Protocol (IP) addresses for logged in users and for users leaving comments on https://www.goliathmarketing.io blog posts. Goliath Marketing only discloses logged in user and commenter IP addresses under the same circumstances that it uses and discloses personally-identifying information as described below.
- Gathering of Personally-Identifying Information
Certain visitors to Goliath Marketing's websites choose to interact with Goliath Marketing in ways that require Goliath Marketing to gather personally-identifying information. The amount and type of information that Goliath Marketing gathers depends on the nature of the interaction. For example, we ask visitors who sign up for a blog at https://www.goliathmarketing.io to provide a username and email address.
- Security
The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.
- Advertisements
Ads appearing on our website may be delivered to users by advertising partners, who may set cookies. These cookies allow the ad server to recognize your computer each time they send you an online advertisement to compile information about you or others who use your computer. This information allows ad networks to, among other things, deliver targeted advertisements that they believe will be of most interest to you. This Privacy Policy covers the use of cookies by Goliath Marketing and does not cover the use of cookies by any advertisers.
- Links To External Sites
Our Service may contain links to external sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy and terms and conditions of every site you visit.
We have no control over, and assume no responsibility for the content, privacy policies or practices of any third party sites, products or services.
- Https://www.goliathmarketing.io uses Google AdWords for remarketing
Https://www.goliathmarketing.io uses the remarketing services to advertise on third party websites (including Google) to previous visitors to our site. It could mean that we advertise to previous visitors who haven't completed a task on our site, for example using the contact form to make an enquiry. This could be in the form of an advertisement on the Google search results page, or a site in the Google Display Network. Third-party vendors, including Google, use cookies to serve ads based on someone's past visits. Of course, any data collected will be used in accordance with our own privacy policy and Google's privacy policy.
You can set preferences for how Google advertises to you using the Google Ad Preferences page, and if you want to you can opt out of interest-based advertising entirely by cookie settings or permanently using a browser plugin.
- Protection of Certain Personally-Identifying Information
Goliath Marketing discloses potentially personally-identifying and personally-identifying information only to those of its employees, contractors and affiliated organizations that (i) need to know that information in order to process it on Goliath Marketing's behalf or to provide services available at Goliath Marketing's website, and (ii) that have agreed not to disclose it to others. Some of those employees, contractors and affiliated organizations may be located outside of your home country; by using Goliath Marketing's website, you consent to the transfer of such information to them. Goliath Marketing will not rent or sell potentially personally-identifying and personally-identifying information to anyone. Other than to its employees, contractors and affiliated organizations, as described above, Goliath Marketing discloses potentially personally-identifying and personally-identifying information only in response to a subpoena, court order or other governmental request, or when Goliath Marketing believes in good faith that disclosure is reasonably necessary to protect the property or rights of Goliath Marketing, third parties or the public at large.
If you are a registered user of https://www.goliathmarketing.io and have supplied your email address, Goliath Marketing may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what's going on with Goliath Marketing and our products. We primarily use our blog to communicate this type of information, so we expect to keep this type of email to a minimum. If you send us a request (for example via a support email or via one of our feedback mechanisms), we reserve the right to publish it in order to help us clarify or respond to your request or to help us support other users. Goliath Marketing takes all measures reasonably necessary to protect against the unauthorized access, use, alteration or destruction of potentially personally-identifying and personally-identifying information.
- Aggregated Statistics
Goliath Marketing may collect statistics about the behavior of visitors to its website. Goliath Marketing may display this information publicly or provide it to others. However, Goliath Marketing does not disclose your personally-identifying information.
- Cookies
To enrich and perfect your online experience, Goliath Marketing uses "Cookies", similar technologies and services provided by others to display personalized content, appropriate advertising and store your preferences on your computer.
A cookie is a string of information that a website stores on a visitor's computer, and that the visitor's browser provides to the website each time the visitor returns. Goliath Marketing uses cookies to help Goliath Marketing identify and track visitors, their usage of https://www.goliathmarketing.io, and their website access preferences. Goliath Marketing visitors who do not wish to have cookies placed on their computers should set their browsers to refuse cookies before using Goliath Marketing's websites, with the drawback that certain features of Goliath Marketing's websites may not function properly without the aid of cookies.
By continuing to navigate our website without changing your cookie settings, you hereby acknowledge and agree to Goliath Marketing's use of cookies.
Privacy Policy Changes
Although most changes are likely to be minor, Goliath Marketing may change its Privacy Policy from time to time, and in Goliath Marketing's sole discretion. Goliath Marketing encourages visitors to frequently check this page for any changes to its Privacy Policy. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.
-
- Credit & Contact Information
This privacy policy was created at https://termsandconditionstemplate.com/privacy-policy-generator/. If you have any questions about this Privacy Policy, please contact michael@goliathmarketing.io.
