1. Who to contact
SpendDesk is a privately operated reporting application for connected stores and advertising accounts. The operator of this installation is responsible for its stored information. For privacy questions, access requests, or deletion requests, email contact-us@unicornkart.us.
2. Information we access and store
- Google account information: the email address of the Google account you authorize, used to identify the connection and associate the right advertising accounts.
- Google Ads reporting: account identifiers, currency and time zone, campaign names and status, spending, purchase conversions, budget settings, policy alerts, and available campaign and budget change history.
- Shopify reporting: connected store identifiers, aggregate order and sales reports, product catalog details, and product-to-campaign mappings. SpendDesk’s reporting queries use aggregate order counts rather than individual customer names, shipping addresses, or payment details.
- Connection and authentication information: OAuth authorization tokens, API credentials you supply, a hashed dashboard password, and temporary authorization and session records. Google refresh tokens and stored Shopify credentials are encrypted by the application.
- Technical information: request timestamps, errors, and connection health information. Hosting infrastructure may record IP addresses, browser information, and request logs for operation and security.
We do not ask for your Google or Shopify account password. Google authorization takes place on Google’s own consent screen.
3. How information is used
We use this information to connect the accounts you authorize; retrieve, save, and refresh source reports; show order comparisons and budget history; generate requested exports; diagnose connection problems; and secure the workspace. SpendDesk reads reporting data and does not modify Google Ads campaigns, bids, or budgets, or Shopify orders.
4. Google user data and limited use
SpendDesk handles information received from Google APIs according to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is used to provide the reporting features you authorize.
We do not sell Google user data, use it for advertising targeting, or use it to train or improve general-purpose artificial intelligence or machine-learning models. Human access is limited to authorized use of the workspace and circumstances permitted by Google’s policy, such as assistance you request, security investigations, or legal obligations.
5. Sharing and service providers
SpendDesk communicates with Google and Shopify to obtain the reports you request. The application and database are hosted on Railway, which processes stored information and technical logs as part of providing the hosting service. Authorized operators may access information needed to administer and support the installation. We may also disclose information when required by law or necessary to address abuse or security threats.
If you explicitly connect an external reporting assistant such as ChatGPT, that service can receive the saved account and reporting information exposed by the permissions you approve. A separate refresh permission allows it to request report updates. The reporting tools do not return your stored Google or Shopify credentials. You control whether to enable this connection; review the external service’s terms, privacy policy, and data settings before doing so.
We do not sell or rent your connected reporting information.
6. Storage, retention, and security
Reports, store mappings, product information, and budget histories are retained to support reporting and comparisons until the operator deletes them or removes the installation. Intraday observations are periodically pruned as reports sync. Authorization and session records have expiration periods. Technical logs and backups may remain according to hosting retention settings and applicable security or legal requirements.
We use password-protected access, signed session cookies, encrypted stored connection credentials, and HTTPS on the deployed service. No online system can guarantee complete security. Revoking a provider connection stops future authorized access but does not automatically delete previously saved reports.
7. Your controls and deletion requests
You can revoke Google access through your Google Account connections, revoke Shopify app or API access through Shopify, and disconnect optional reporting assistants through their connection settings.
To request access to, correction of, or deletion of data held by this installation, email contact-us@unicornkart.us. Describe the connected account or store and the information concerned. We may verify your authority before acting. Do not send passwords, access tokens, or client secrets by email. Revoking permissions and requesting deletion are separate actions.
8. Cookies
SpendDesk uses essential cookies to maintain dashboard sessions and protect Google authorization. The application does not use advertising cookies. Blocking essential cookies may prevent sign-in or account connection.
9. Updates to this policy
Changes will be published on this page with a revised update date. Our terms of service describe the conditions for using SpendDesk. Contact contact-us@unicornkart.us with questions about either document.