Privacy policy

Your business data should feel looked after.

This policy explains what information Googly handles, why we use it and the choices available to you.

Last updated: 8 October 2026

Information we handle

Depending on how you use Googly, we may handle:

  • Account details such as your email address, business name, website and sign-in records.
  • Onboarding details you choose to provide, including your conversion goal and monthly advertising budget.
  • Subscription references and status received from Stripe so we can provide and manage your paid workspace.
  • Google Ads account identifiers and campaign information only if you authorize a Google connection and that connection is available.
  • Basic technical and security information needed to operate the service and protect accounts.

How we use information

We use information to create and secure your account, provide the Googly service, save the preferences you choose, manage billing, respond to enquiries, and meet legal or security obligations. We do not sell personal information.

Googly uses automated software to store the preferences you choose and, where available, analyse connected Google Ads information. The software also prepares the emails that explain campaign changes.

Nobody at Googly reads clients' Google Ads data as part of normal service operations. It is processed only by automated software, except with your permission (for example, when you ask us for help with your account), where human access is required for security purposes (such as investigating abuse), or to comply with applicable law.

Google APIs and advertising data

If you authorize a Google connection, Googly uses the Google API data needed to provide the features you request. You keep ownership of your Google Ads account and can revoke Googly's access at any time from your Google Account permissions or by disconnecting Google Ads from your Googly dashboard. Disconnecting asks Google to revoke access and removes Googly's saved tokens. Revoking access may limit features that depend on the connection.

Googly's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Googly is not affiliated with or endorsed by Google.

How we share Google user data

Googly does not sell Google user data, and does not share, transfer or disclose it to anyone for advertising, marketing or any purpose unrelated to providing Googly. We share Google user data (your Google Ads account identifiers, campaign and performance data, and the connection tokens that let Googly access your account) only in these limited cases:

  • Replit, which hosts Googly's application and database, stores and processes this data on our behalf so we can run the service.
  • Resend, which delivers our emails, receives the campaign details included in the change notices and reports we send you.
  • Google, when Googly sends requests to the Google Ads API to read your account or make changes you have authorised.
  • Anthropic processes a limited account summary on Googly's behalf to analyse account data and write ad suggestions for its daily review. Its commercial terms prohibit using client data to train its models.
  • When required by law, or to protect the security of the service and its users.
  • As part of a merger, acquisition or sale of our business, and only with your explicit prior consent.

Stripe processes payments and does not receive Google user data.

Googly uses Anthropic as a service provider to help analyse account data and write ad suggestions on our behalf. Under its commercial terms, Anthropic may not use client data to train its models. Google Ads data is never sold or shared for third parties' own purposes; Anthropic processes a limited account summary only on our behalf to provide Googly's daily review.

These providers may use the data only to provide and improve the Googly features you use, and only with your consent. We never transfer Google user data to data brokers, advertising platforms or information resellers, and we do not use it to train general artificial intelligence or machine learning models.

Service providers

  • Replit: hosts the application and its database infrastructure.
  • Stripe: processes subscription payments and customer-portal actions. Googly receives billing identifiers and subscription status to associate your payment with your workspace.
  • Google: provides Google APIs if you choose to connect an account.
  • Resend: delivers sign-in links and Google Ads service emails.
  • Anthropic: helps analyse account data and write ad suggestions on Googly's behalf. Under its commercial terms, it may not use client data to train its models.

Advertising measurement

With your consent, Googly loads the OpenAI / ChatGPT Ads pixel on its public website pages to measure advertising effectiveness. The pixel may use cookies and similar technologies and send visit information, such as browser, device and page information, to OpenAI. It is not loaded on sign-in, signup, onboarding, customer-dashboard or admin pages. Googly does not send Google Ads account data, account details or payment information as custom pixel events.

The pixel is not loaded before you accept advertising tracking. Rejecting advertising tracking does not affect your ability to use Googly. You can change your choice using the “Cookie preferences” button on public pages. Withdrawing consent reloads the page to stop the pixel; it does not undo information already sent. For OpenAI’s handling of personal information and your rights, see OpenAI’s privacy policy.

On the dedicated checkout-confirmation page, after Stripe verifies an eligible subscription and only with advertising consent, we send a “subscription_created” event with the category “plan_enrollment”. Test-mode checkouts do not send this conversion. The event contains no email address, payment details, Google Ads account data or checkout reference. An opaque subscription reference is kept in browser storage to prevent the same conversion being queued again on refresh; clearing that storage removes this duplicate guard.

Storage, retention and security

Googly deletes the Google Ads data and connection tokens it stores no later than 30 days after you cancel your subscription or disconnect Google Ads. Disconnecting from the dashboard also removes the saved tokens immediately and asks Google to revoke them. If you reconnect before the scheduled deletion, the retention period is reset for the active connection. We retain other account and billing records only as needed to provide the service, administer your subscription, resolve disputes and meet legal obligations. We use access controls and technical safeguards, and all data is encrypted in transit using HTTPS, but no online service can promise absolute security.

Cookies

Googly uses necessary session cookies to keep accounts signed in and a preference cookie for the interface. These are not used as advertising trackers.

We also save your advertising-cookie choice in your browser’s local storage for up to 180 days, so you do not need to answer on every visit. We ask again when that choice expires. Optional advertising cookies and similar technology are enabled only after acceptance. If your browser cannot save a choice, we do not enable advertising tracking from that choice.

Your choices and requests

You can manage or revoke Google access through your Google Account settings. To request access to, correction of or deletion of information held by Googly, contact us at googly@heygoogly.com. We may retain records where required by law or needed to resolve a dispute.

Children and policy changes

Googly is a business service and is not intended for children. If you believe a child has provided information to us, contact us so we can review it. We may update this policy and will change the date above when we do.