Privacy Policy

OneIMS account managers sign in to build reports. A client may also get a private report link or a password-protected client portal to view their own reports. Clients, or OneIMS on a client's behalf, connect the client's marketing accounts so the app can read their results.

When you connect a Google account, the app asks for these read-only permissions:

• Google Analytics (analytics.readonly): the list of GA4 properties you can access, and traffic, engagement and conversion totals for the property you choose.
• Google Search Console (webmasters.readonly): the list of your sites, and search clicks, impressions, position and top queries and pages for the site you choose.
• Google Business Profile (business.manage): the list of your business locations, and performance metrics (views, calls, direction requests, website clicks) for the location you choose. The app never edits your profile, posts or reviews.
• Google Ads (adwords): the list of Ads accounts you can access, and spend, clicks, impressions, conversions and campaign results for the account you choose. The app never changes campaigns, budgets or settings.

The app also receives your Google account's email address, only to show which account is connected. It does not read Gmail, Drive, contacts or any other Google data.

• Only to show the client's marketing results in their reports, dashboard and client portal, and to let a OneIMS account manager pick which property, site, location or Ads account belongs to which client.
• Not sold, rented or shared with anyone other than the client the data belongs to and their OneIMS team.
• Not used for advertising, retargeting, credit decisions or any purpose unrelated to the client's reports.
• Not used to develop, improve or train generalized or non-personalized AI or machine-learning models.
• Not read by people, except by the OneIMS team serving that client, with the client's agreement, to give support, to investigate security issues, or where the law requires it.

Limited Use.OneIMS Client Reports' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

If a client connects HubSpot, the app reads counts of new contacts and customers, contact sources, deals closed won and lost, form submissions and marketing email totals. Access is read-only, and the same rules apply as for Google data above. Details: HubSpot setup guide.

• Vercel hosts the app and Neon hosts its Postgres database (United States).
• When an account manager asks for a drafted report summary, the report's totals and top rows (for example "sessions up 12%") are sent to Anthropic's Claude API to draft the text, which the account manager then edits. No access tokens or personal details are sent, and Anthropic does not use API data to train its models.

• Connection tokens are stored encrypted (AES-256-GCM) and are used only by the server to fetch report data.
• Published reports store a snapshot of the totals and top rows shown in that report, so a report always shows the same numbers. They do not store individual visitors' or contacts' personal details.
• All traffic uses HTTPS. Report links are signed, and the account manager console and client portal require a login.

• Disconnect in the app: a OneIMS account manager can click Disconnect on any integration. The stored token is deleted straight away.
• Revoke in Google: remove "OneIMS Client Reports" at myaccount.google.com/permissions. The app can no longer read your data.
• Delete your data: email tools@oneims.com. We delete your stored tokens, settings and reports within 30 days and confirm by email.
• Reports are otherwise kept while the client works with OneIMS, so past months can be compared, and are deleted when the client relationship ends and the client asks.

If this policy changes, we update the date above, and tell connected clients about any material change before it takes effect. Questions: tools@oneims.com.