Privacy Policy

Sparkon Consulting

Last updated: 6 October 2026

Sparkon Consulting ("Sparkon", "we", "us") operates an internal automation
application that connects to advertising and business accounts that Sparkon
itself owns. This policy explains what that application accesses, why, how long
it is kept, and how to have it removed.

This policy covers the Sparkon Consulting application registered with Google,
and applies to anyone who signs in to that application.

Who uses this application

This application is used only by Sparkon Consulting staff to manage Sparkon's
own marketing accounts. It is not offered to the public, it does not have
customer accounts, and it does not sell or advertise access to third parties.

What information we access

When a Sparkon administrator signs in with Google, the application requests
access to the following, and nothing else:

Google Ads account data - scope https://www.googleapis.com/auth/adwords
Why: To read campaign, keyword and spend reports for Sparkon's own
advertising account, and to make limited changes such as pausing a
campaign, adding negative keywords, or adjusting a bid.

Google Business Profile data - scope https://www.googleapis.com/auth/business.manage
Why: To read reviews and profile details for Sparkon's own business
listing, reply to reviews, and publish posts that a Sparkon
administrator has approved.

We request the narrowest scopes that allow these tasks. We do not request access
to Gmail, Google Drive, Google Photos, contacts, location history, or any other
Google service.

What we do with it

The information is used for one purpose: operating and reporting on Sparkon's
own marketing. Specifically, we use it to:

- produce advertising performance reports for Sparkon's internal review;
- enforce Sparkon's own advertising spend limits;
- pause advertising that exceeds those limits;
- read and reply to reviews of Sparkon's business;
- publish posts that a Sparkon administrator has explicitly approved.

We do not use this information for any other purpose.

What we store, and for how long

The application stores:

- an encrypted Google refresh token, so it can reconnect without asking an
administrator to sign in repeatedly;
- the identifiers of the Sparkon accounts it is permitted to act on;
- a record of actions it has taken, so those actions can be audited.

Data is stored in Microsoft Azure in the United States, encrypted at rest and
in transit. Operational records are retained for twelve months and then
deleted. Refresh tokens are deleted immediately when access is revoked.

We do not store the content of Google Ads reports beyond the time needed to
produce a report, and we do not build profiles of any individual.

What we do not do

- We do not sell, rent, or trade any information.
- We do not share Google user data with third parties, except where a
subprocessor is strictly required to operate the service (Microsoft Azure,
for hosting) or where the law requires disclosure.
- We do not use Google user data to train, retrain, or improve any generalised
artificial intelligence or machine learning model.
- We do not use Google user data for advertising, remarketing, or audience
targeting of any kind.
- We do not allow humans to read Google user data, except where it is necessary
for security, to comply with the law, or where a Sparkon administrator has
asked us to resolve a specific problem with their own account.

Limited Use disclosure

Sparkon Consulting's use and transfer of information received from Google APIs
adheres to the
Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy),
including the Limited Use requirements.

Revoking access and deleting data

A Sparkon administrator can disconnect the application at any time at
myaccount.google.com/permissions (https://myaccount.google.com/permissions).
Revoking access immediately and permanently invalidates the stored token.

To request deletion of any remaining records, email
gabriel@sparkonconsulting.com. We will confirm deletion within 30 days.

Security

Credentials are held in managed secret storage and are never written to source
code, logs, or error messages. The application can only act on a fixed list of
Sparkon-owned accounts, which is set by an administrator; it cannot be directed
at any other account, even by someone with valid access to the application.

Children

This application is not directed to children and does not knowingly collect
information from anyone under 18.

Changes to this policy

If this policy changes materially, we will update the date at the top of this
page and, where the change affects how Google user data is handled, we will
reflect it in our Google API Services verification before the change takes
effect.

Contact

Sparkon Consulting
Email: gabriel@sparkonconsulting.com
Website: https://sparkonconsulting.com