IntelligencyBeta

Privacy policy

Last updated: 10 October 2026

This notice describes how Intelligency (“Intelligency”, “we”) processes data when you use the Intelligency web app and its MCP server. Data controller: Intelligency. Contact: info@giuppi.dev.

1. Data we collect

  • Sign-in with Google (scopes openid, email, profile): Google identifier, email, profile name and picture. Used only to identify you.
  • Google Ads connection (scope https://www.googleapis.com/auth/adwords), granted with a separate consent: an OAuth refresh token and the email of the Google account that granted it. With these we access the Google Ads accounts that Google account can already manage.
  • Google Ads data: account structure and settings (accounts, campaigns, ad groups, ads, keywords, budgets, targeting) and performance metrics. We read them from Google when needed. We store only the list of accessible accounts (ID, name, currency, time zone) and, for change previews, the content of the proposed change.
  • Google Analytics and Search Console connections (read-only scopes https://www.googleapis.com/auth/analytics.readonly and https://www.googleapis.com/auth/webmasters.readonly), each granted with a separate consent: an OAuth refresh token and the email of the Google account that granted it.
  • Google Analytics and Search Console data: aggregated reports on website traffic and behaviour (sessions, users, events, revenue, channels, pages), Google Search performance (queries, pages, clicks, impressions, position), indexing status and sitemaps. We read them from Google when needed and don't store them; we store only the list of accessible properties (ID or URL, name, account). We cannot change anything in Analytics or Search Console.
  • Connected AI assistants: identifier and name of the MCP client (for example ChatGPT), access tokens issued by Intelligency (stored only as hashes), date of last use.
  • Audit log: every action performed through Intelligency (reads and changes), with operator, ad account, date and parameters.
  • Preferences: your chosen language, stored in a technical cookie and on your profile. We use no profiling or third-party cookies.

2. How we use data

  • To show you reports and metrics for the Google Ads accounts and the Google Analytics and Search Console properties you manage.
  • To answer your AI assistant's requests through the MCP server, and only for the accounts and properties of your connections.
  • To prepare change previews, have Google validate them, and apply them only after your explicit confirmation.
  • Security, abuse prevention and compliance: audit log and adherence to Google's policies.

We don't sell data. We don't use it for advertising, profiling or to train artificial intelligence models. We don't transfer it to third parties, except the infrastructure providers the service needs (hosting and database), bound by contract.

Content your AI assistant receives from Intelligency goes to the assistant provider you chose, for example OpenAI or Anthropic, and is processed under its terms.

3. Google API Services — Limited Use

Intelligency's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Ads, Google Analytics and Search Console data only to provide the features described above, which you see in our interface, and we don't allow humans to read it, except with your consent, for security purposes or to comply with the law.

4. Security

  • All communication uses HTTPS.
  • Google OAuth tokens are encrypted at rest (AES-256-GCM, keys managed separately from the database). Tokens issued by Intelligency are stored only as hashes.
  • Every operator uses their own Google credentials: credentials are never shared between operators or agencies.
  • No change to ad accounts happens without the explicit confirmation of an authenticated operator.

5. Retention and deletion

  • Disconnect Google Ads, Analytics or Search Console: from Connections → Disconnect. We revoke the authorization with Google and immediately delete tokens and synced accounts or properties. You can also revoke it from myaccount.google.com/permissions.
  • Revoke an AI assistant: from AI assistants → Revoke.
  • Delete your account: from Settings → Your data. We delete profile, connections, tokens, previews and sessions.
  • The audit log is kept after deletion, to document changes already applied to ad accounts, for no longer than contractual and legal obligations require.
  • An advertiser who is a client of an agency can ask us to dissociate their Google Ads accounts from Intelligency: we do so within 3 business days.

6. Your rights

You can request access, rectification, erasure, restriction, portability and object to processing (Articles 15-22 GDPR) by writing to the contact above. You can also lodge a complaint with your data protection authority (in Italy, the Garante per la protezione dei dati personali).