Security, privacy, and how it all works

Google user data: access, use, sharing, storage, and retention

When you choose to connect your Google account to DataNests, our application accesses Google user data only as described in this section. This disclosure is provided to meet the Google API Services User Data Policy and related requirements for applications that use Google APIs.

1. Data accessed (types of Google user data)

DataNests requests the OAuth scope analytics.readonly. Under that scope, depending on the Google Analytics resources you connect, our application may access, retrieve, or interact with the following categories of Google user data:

• Account and authorization data: Information needed to complete sign-in and maintain the connection, such as OAuth access tokens and refresh tokens issued by Google for your account, and identifiers that associate the connection with your DataNests account.
• Google Analytics 4 (GA4) property data: Property and configuration information for the GA4 properties you select (for example, property identifiers and settings needed to query reporting).
• Analytics reporting data: Metrics and dimensions exposed through Google Analytics reporting interfaces and APIs for the connected properties—for example aggregated or statistical data such as users, sessions, page views, events, conversions, funnels, and traffic sources, as available for your properties.

We do not access your Google account password. We do not access Gmail, Google Drive, Contacts, Calendar, or other Google products except as made available through the specific OAuth scopes you approve during the consent screen. If we do not request a scope, we do not access the data that scope would cover.

2. Data usage (how we use and process Google user data)

We use Google user data accessed through this integration only to provide and operate the user-facing analytics and reporting features you request inside DataNests. Processing is limited to what is necessary for those features, including:

• Retrieving GA4 reporting data from Google on your behalf and displaying it in dashboards, charts, widgets, and reports in your account.
• Computing and presenting KPIs, trends, comparisons across properties you connect, and similar insights derived from your connected analytics data.
• Maintaining the technical connection to Google (for example, refreshing tokens when required) so the service continues to work until you disconnect or revoke access.
• Storing or caching copies of retrieved analytics data on our systems as described under “Storage and protection” and “Retention and deletion” below, solely to deliver a reliable product experience.

We do not sell Google user data. We do not use Google user data accessed through this integration to serve ads to you or to third parties, or for advertising or marketing on behalf of unrelated clients. We do not use that data to train generalized machine learning or artificial intelligence models for unrelated products; use is limited to operating DataNests features for your account as described above.

3. Data sharing (third parties)

Google user data obtained via this integration is processed to provide the DataNests service to you. We do not sell Google user data. We do not share identifiable Google Analytics content from your connected properties with other DataNests customers.

We may engage service providers and subprocessors (for example, cloud hosting, infrastructure, monitoring, or security vendors) who process data on our behalf under contractual obligations that require appropriate confidentiality and security measures. Those providers may access or store data only as needed to perform services for us and in line with this policy, not for their own independent use.

We may disclose information where required by law, regulation, legal process, or governmental request, or where necessary to protect the rights, safety, and security of DataNests, our users, or the public, consistent with applicable law.

4. Storage and protection of Google user data

Google user data handled by DataNests is stored on systems we control or that our subprocessors operate under contract. We use industry-standard safeguards designed to protect data, including encryption of data in transit (such as TLS) and protection of data at rest using appropriate technical and organizational measures. OAuth access tokens and refresh tokens are stored securely and used only to obtain the Google Analytics data needed to power your account.

Access to production systems and customer data is restricted to authorized personnel who need it to operate and secure the service, subject to confidentiality and least-privilege practices.

5. Retention and deletion

We retain Google-derived analytics data and OAuth tokens for as long as your DataNests account remains active and the Google connection is in use, and for a limited period afterward where needed for backups, dispute resolution, security, or legal compliance. Exact retention may vary by data type and operational need; we do not keep Google user data longer than necessary for these purposes unless a longer period is required by law.

How to request deletion: You may request deletion of your account and associated data—including stored Google Analytics data and connection tokens tied to your account—by emailing support@datanests.io. Please include the email address on your DataNests account and a clear request to delete Google-connected data or your full account. After we verify your identity, we will delete or anonymize applicable stored data within a reasonable timeframe, except where we must retain certain information to meet legal, regulatory, or legitimate security obligations.

Revoking our access in Google stops new data collection from Google; it does not by itself delete data we already stored. Use the contact above if you also want stored copies removed.

6. Revoking DataNests' access to your Google account

You can revoke DataNests' access to your Google account at any time:

• Open your Google Account permissions page: https://myaccount.google.com/permissions.
• Find DataNests in the list of apps with account access.
• Remove or disconnect access for DataNests.

After revocation, DataNests cannot retrieve new Google Analytics data for that connection. To delete data we may already hold, contact support@datanests.io as described above.