Privacy Policy

Elliead, operated by Growmeo Marketing · Effective October 20, 2026

This policy explains how Elliead ("we", "us"), a product of Growmeo Marketing, accesses, uses, stores, protects, shares, retains and deletes information, including Google user data we receive from the Google Ads API when an agency connects its Google Ads account.

Current status

Elliead is in early development. Today it is used only by Growmeo Marketing on Google Ads accounts Growmeo manages. Features marked (planned) are not yet available. We will update this policy, and notify users, before any of them is turned on.

Who uses Elliead

Elliead is a business tool for advertising agencies that manage Google Ads accounts for their clients. It is not intended for consumers.

1. Google user data we access

When an agency signs in with Google and grants access, Elliead requests these permissions:

• Google Ads (https://www.googleapis.com/auth/adwords): access to the Google Ads accounts the agency's manager account can reach, including account settings, campaigns, ad groups, keywords, ads, assets, targeting, budgets, bidding and conversion settings, performance metrics (such as impressions, clicks, cost and conversions), change history, and Google's recommendations.
• Basic profile (openid, email, profile): the signed-in person's name and email address, used to identify who connected the account.

We also receive an OAuth refresh token so Elliead can call the Google Ads API on the agency's behalf. We never ask for or store Google passwords. We do not seek to collect personal information about the end customers of the advertisers whose accounts are connected.

2. How we use Google user data

We use Google user data only to provide and improve Elliead's user-facing features for the agency that connected the account:

• evaluating Google Ads accounts for issues and opportunities;
• showing alerts, insights and recommendations to that agency's users;
• applying changes in Google Ads that the agency's users approve, or that follow automation rules the agency has set;
• measuring the results of those changes and reporting them to the agency.

We do not:

• sell Google user data, or transfer it to data brokers or information resellers;
• use or transfer it for targeted, personalized, retargeted or interest-based advertising;
• use or transfer it to determine creditworthiness or for lending purposes;
• use it to build databases or profiles unrelated to Elliead's features for the connecting agency;
• use or transfer it to develop, improve or train generalized or non-personalized artificial intelligence or machine learning models.

Elliead's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Our staff do not read Google user data except with the agency's permission (for example, to provide support), when needed for security purposes, or to comply with law.

3. AI processing (planned)

Elliead will offer AI features that analyze an agency's account data to explain performance and draft recommendations for that agency. These features will be off by default and run only after an agency administrator turns them on, with a notice describing what data the feature sends and to which AI provider.

• Only the data a feature needs is sent, and only for the agency that requested it.
• We will only use AI providers whose terms do not allow them to train models on the data we send. We will name each provider on this page before it receives any Google user data.
• AI output is shown as a recommendation. It does not change a Google Ads account without the approval or automation rules described above.

4. How we share Google user data

We share Google user data only in these cases:

• Infrastructure providers that host and run Elliead on our behalf: Railway (hosting and database) and Sentry (error monitoring). Error reports are designed to carry identifiers (agency, Google Ads account and campaign IDs) and technical details, not account performance data. These providers process data only to run the service for us.
• Tools an agency turns on. Integrations are off until an agency administrator connects them.
  • ClickUp: tasks describing an issue, which can include the account name and ID, campaign names, budgets and spend figures, and a recommended fix.
  • Slack: alerts with similar issue summaries (planned). Today Slack is used only for internal operational alerts that contain no Google Ads data.
• AI providers, only as described in section 3, once an agency turns AI features on (planned).
• When required by law, or to protect the security of Elliead and its users.

We do not share, transfer or disclose Google user data for any other purpose. Each agency's data is kept separate from every other agency's data.

5. How we store and protect Google user data

• Google user data is stored in databases hosted by our cloud provider in the United States.
• Data sent between your browser and Elliead, and between Elliead and Google, is encrypted in transit using HTTPS/TLS.
• OAuth refresh tokens and other integration secrets are encrypted at rest with AES-256-GCM and are never shown in the app.
• Data is separated by agency, and every request is limited to the requesting agency's own data.
• Access to production systems is limited to Growmeo Marketing staff who need it to operate and support Elliead.

6. Retention and deletion

• While connected: we keep Google user data while the agency keeps its Google Ads account connected to Elliead, so we can show trends and measure results over time.
• Disconnecting: an agency can revoke Elliead's access at any time at myaccount.google.com/permissions (an in-app disconnect is planned). We then stop accessing Google Ads data for that connection immediately.
• Deletion: within 30 days after an agency disconnects, closes its Elliead account, or asks us to delete its data, we delete its Google user data and OAuth tokens from Elliead's systems and confirm by email. Copies in routine database backups are overwritten as those backups expire.
• How to request deletion: email nick@growmeo.com from the agency's account email.
• Tasks already created in an agency's own ClickUp workspace belong to the agency and are not deleted by us.

7. Other information we collect

• Account information: name, work email and agency name for people who sign in to Elliead.
• Usage information: actions taken in Elliead (for example, approving a recommendation), kept as an audit log for the same retention period as the agency's data.

8. Your choices

Users can ask to access, correct or delete their personal information by emailing us. Agencies control which Google Ads accounts are connected and can revoke access at any time.

9. Changes to this policy

We will post changes on this page and update the effective date. If we change how Elliead uses Google user data, we will notify agency account owners by email before the change takes effect.

10. Contact

Elliead, operated by Growmeo Marketing — nick@growmeo.com