Privacy and Google data

Updated 9 September 2026. This notice covers the Commerce Insights Google Ads connection service operated by ViralMESH. Contact info@viralmesh.co.uk for privacy questions, access or deletion requests.

What the service accesses

When you choose to connect Google Ads, Google asks you to authorise its Ads scope. Google provides a broad Ads scope; our service implements only account discovery and reporting. We access advertising account identifiers, names, manager relationships, currency, timezone and aggregate impressions, clicks, cost, conversions and conversion value for your selected account and report dates.

The connection service does not receive your store orders, customer lists, payment-card details, report recipients or completed OpenCart reports. It does not change campaigns, bids, budgets, conversion settings or website tracking.

How information is used and shared

We use Google data only to provide the reporting features you request. Reports are returned to the OpenCart store associated with your activation key. Store administrators control report viewers and email recipients. Google Ads conversion value is separate from store revenue.

We do not sell Google data, use it for advertising, or use it to train general-purpose AI models. Commerce Insights’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Hosting and infrastructure providers process service traffic to operate and secure the service.

Storage and security

Google refresh tokens are encrypted on the server. Activation credentials are stored as hashes by the connection service. The service stores the selected account and connection state; it does not retain report metrics. Tenant-scoped audit records are retained for up to 90 days and cleaned during service use. A necessary secure browser cookie binds sign-in to your browser and expires after ten minutes. This service does not use advertising or analytics cookies.

Your store keeps daily report snapshots under the retention setting chosen by its administrator, normally 90 days and configurable from 7 to 365 days. Reports, recipients and email delivery records are managed by that store. Contact the store operator about copies or reports they have exported or emailed.

Disconnecting and deletion

Use Disconnect Google Ads in Commerce Insights to revoke Google access and clear the connection token. You can also remove the app’s access in your Google Account. Revocation can affect other stores connected through the same Google identity. Contact ViralMESH to request deletion of your service connection record or ask about retained backups. Restricted recovery copies may persist until their hosting retention period ends; they are not used for active reporting.

Your choices

Connecting Google Ads is optional. You can use store reporting without it. Only connect accounts you are authorised to access, and review the store’s report permissions before connecting. You may request access, correction or deletion of personal information by contacting ViralMESH. If you have an unresolved UK data-protection concern, you can contact the Information Commissioner’s Office.