Privacy Policy

Information you provide

• Name, email address, company, job title
• Any information you submit through forms, sign-ups, or communications

Usage data

• IP address, browser type, device information
• Pages visited, time spent, and interactions on our site

Connected data sources (if applicable)

• If you connect third-party tools (such as CRM, billing, or analytics systems), we may access data necessary to provide our services

Scopes we request and why

• Google Drive (drive.file) — read only the individual files you select yourself in the Google file picker. We cannot see any other file in your Drive.
• Google Analytics (analytics.readonly) — read-only access to list the GA4 properties you have access to and run the reports you choose. We cannot modify your Analytics configuration.
• Google Ads (adwords) — read the report data for the Google Ads accounts you select. Google publishes no read-only Ads scope, so this is the narrowest scope available; we only issue read requests.
• BigQuery (bigquery) — list the projects, datasets, and tables you have access to, and run the read-only queries you write. We do not create, modify, or delete your data. Google's narrower bigquery.readonly scope cannot run a query at all, so this is the minimum scope that works.
• Email address (userinfo.email) — identify which Google account a connection belongs to, so you can tell your connections apart and disconnect the right one.

How we use Google user data

• We fetch only the data you request, at the time you request it, to produce the spreadsheets, reports, and presentations you ask for
• Imported data lands only in your own Coreworks workspace and is visible only to you and the people you share that workspace with
• We use it for no other purpose — no cross-user analysis, no aggregation, no enrichment

How we store Google user data

• OAuth tokens are held encrypted by our authentication provider and are used only to make the API calls described above
• Imported data is stored encrypted in your workspace and is retained until you delete it or close your account
• Deleting an imported file, or disconnecting the source, removes the corresponding data from your workspace

What we never do

• We never sell Google user data
• We never use Google user data for advertising, or transfer it to advertising platforms, data brokers, or information resellers
• We never use Google user data to train, retrain, or improve generalized or shared AI/ML models
• We never allow humans to read Google user data, except with your explicit consent for a specific support request, where required by law, or where necessary for security or to comply with applicable law

Limited Use

Coreworks' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

You can disconnect a Google source at any time from the connections area of the Coreworks app, which deletes the stored token. You can also revoke Coreworks' access directly from your Google account at myaccount.google.com/permissions. To have imported data deleted, contact us at privacy@coreworks.ai.