Privacy Policy
Last updated: June 11, 2026
Data Controller
PaidSync.ai is a product operated by Advanced Technology Labs LLC, a company registered in the State of Wyoming, United States (“PaidSync”, “we”, “us”). For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, Advanced Technology Labs LLC is the data controller of personal data processed through the PaidSync.ai service. You can reach us at support@paidsync.ai for any privacy-related inquiry.
1. Information We Collect
When you create an account, we collect your name, email address, and profile information provided by Google Authentication. We also collect usage data such as pages visited, features used, and ad campaign data you choose to connect. We may collect device information, browser type, and IP address for security and analytics purposes.
2. How We Use Your Information
We use your information to provide and maintain the PaidSync.ai service, process your transactions, send you service-related communications, and improve the platform. We may use aggregated, anonymized data for analytics and to develop new features. We will never sell your personal information to third parties.
3. Data Storage
Your data is stored securely using industry-standard encryption. We use Firebase and Google Cloud infrastructure to host and process your data.
When you delete your account, your personal data and connected account records are permanently removed after a 30-day recovery window (see “Your Rights” below). Two categories of records are kept after deletion on a legal-obligation basis. First, pseudonymized billing and usage records: your user identifier is stripped and replaced with an internal reference; these records, with direct identifiers removed, are retained for 7 years to meet tax reporting requirements, including UAE VAT record-keeping obligations. Second, a deletion audit log recording that an account deletion was requested and completed, retained for 7 years for accountability. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, or destruction.
4. Third-Party Services
PaidSync.ai integrates with third-party services to provide core functionality. We use Firebase for authentication, database, and hosting services. Google Authentication is used for secure sign-in. These services have their own privacy policies, and we encourage you to review them. We only share the minimum data necessary for these services to function.
We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products and services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products and services and online activity. Additionally, we use this information for site optimization, fraud and security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.
We use Google Analytics 4 and Google Tag Manager to analyze site traffic and understand how visitors interact with our website. This data helps us improve the user experience. You can manage your cookie preferences using the cookie settings on our site.
5. Google User Data and Limited Use
When you connect your Google account to PaidSync, we request OAuth access to specific Google API scopes that power the in-app features you ask us to perform. The scopes we request, and the user-facing feature each one enables, are:
- openid, email, profile — identify and label each connected Google identity in your dashboard so you can tell connected accounts apart.
- Google Ads (
https://www.googleapis.com/auth/adwords) — list, read, and manage Google Ads campaigns, ad groups, keywords, and budgets on your explicit instruction. - Google Analytics 4 (
analytics.readonly,analytics.edit) — read GA4 reports and create or update conversion (key) events on your explicit instruction. - Google Tag Manager (
tagmanager.readonly,tagmanager.edit.containers,tagmanager.edit.containerversions,tagmanager.publish) — audit your container, create or update tags and triggers, snapshot a version, and publish on your explicit instruction. - Google Search Console (
webmasters.readonly) — read Search Console performance data (clicks, impressions, queries, pages). Read-only. - Google Merchant Center (
https://www.googleapis.com/auth/content) — read Merchant Center account status, product feed, and disapproval data. PaidSync does not insert, update, or delete products.
Limited Use: PaidSync's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
No AI or ML model training on Google user data. We do not use Google user data obtained through these APIs to develop, improve, or train generalized or non-personalized AI or machine learning models. Google user data is processed solely to fulfill the user's explicit, in-session request inside paidsync.ai. The user's instruction is processed by a large-language-model provider (Anthropic, OpenAI, or Google) strictly to interpret the request and return the result; the provider operates under contractual terms that prohibit using PaidSync customer data for training their foundation models.
No sale, no advertising use, no human reading. We do not sell Google user data, do not use it to serve advertisements, and PaidSync staff do not read it except where strictly necessary to provide user-requested support, comply with applicable law, or investigate a security incident.
Revocation. You can disconnect any Google account from inside the PaidSync dashboard at any time, or revoke PaidSync's access directly at https://myaccount.google.com/permissions. On disconnect, the associated OAuth tokens are deleted from our systems.
6. Your Rights
You have the right to access, correct, or delete your personal data at any time. You can request a copy of all data we hold about you by emailing hello@paidsync.ai. If you are located in the EU, you have additional rights under GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.
You can delete your account directly from Settings > Profile > Delete Account. Type DELETE to confirm. Your account is suspended and signed out immediately, and you are removed from all marketing communications that same day. You have 30 days to change your mind. Signing back in during that window cancels the deletion. After 30 days, the deletion becomes permanent and cannot be undone: all account data, connected ad-platform OAuth tokens, and your authentication record are hard-deleted, and your Stripe subscription is cancelled. No refund is issued for any unused portion of a paid billing period.
If you own a team workspace with active members, you must transfer ownership or remove those members before you can delete your account.
To request a copy of your data before deleting, email hello@paidsync.ai. Self-serve data export is coming in a future update.
7. Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@paidsync.ai. We will respond to all privacy-related inquiries within 30 days.