Privacy Policy

This policy explains how Xantus ("we", "us") collects, uses and protects information when you use the Xantus website and the Xantus internal applications that sign in with a Google account (the "Services").

Who can use the Services

The Services are internal tools for members of the Xantus organization. They are not offered to the general public.

Information we collect

• Google account information. When you sign in with Google we receive your name, email address and profile picture to identify you and control access.
• Google user data you authorize. Depending on the permissions you grant, we read reporting data from Google services such as Google Ads, Google Analytics and AdMob (for example campaign, cost, conversion, revenue and audience metrics) for the accounts you have access to.
• Technical data. Standard server logs (IP address, browser type, time of request) kept for security and troubleshooting.

How we use information

• To sign you in and check that you are a member of the Xantus organization.
• To display, aggregate and analyze advertising and analytics reports for the apps and accounts operated by Xantus.
• To keep the Services secure and working.

We do not sell personal information, we do not use Google user data for advertising, and we do not use it to train generalized AI or machine learning models.

Google API Services User Data Policy

Xantus's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Sharing

We do not share Google user data with third parties, except with infrastructure providers that host the Services on our behalf under confidentiality obligations, when required by law, or to protect our rights and users.

Storage and security

Data is transmitted over HTTPS and stored on access-controlled servers. OAuth tokens are stored encrypted and used only to fetch the data you authorized. Access is limited to authorized Xantus staff.

Retention and deletion

We keep report data only as long as needed for internal analysis. You can revoke the Services' access at any time from your Google account at myaccount.google.com/permissions, and you can ask us to delete data associated with your account by emailing us. We act on deletion requests within 30 days.

Changes

We may update this policy. The date at the top shows the latest revision.

Contact

Questions or requests: [email protected].