Privacy Policy

1. Information we handle

• Account and access information used to authenticate authorized NailsSys users and enforce role-based access.
• Google Ads account identifiers and configuration data, including customer accounts, campaigns, ad groups, budgets, status, keywords, and related settings.
• Google Ads performance data such as impressions, clicks, cost, search-term performance, conversion metrics, and other reporting fields requested by an authorized user.
• First-party salon operational data, including online booking, appointments, customer check-in, POS tickets, payments, refunds, and related business records.
• Technical and security information such as timestamps, request status, error details, and audit records needed to operate and protect the service.

2. Google Account and Google Ads data

When an authorized user connects Google Ads, NailsSys may request the OAuth scope https://www.googleapis.com/auth/adwords. The scope is used only to provide Google Ads functionality that the authorized user initiates or approves.

• Display Google Ads account, campaign, ad group, keyword, search-term, cost, and performance information.
• Support management of eligible Search campaign settings, budgets, status, ad groups, and keyword-related configuration when enabled and approved by an authorized manager.
• Provide keyword planning and advertising optimization workflows.
• Compare Google Ads spend and attributed interactions with first-party online booking and verified captured service revenue.

3. How we use information

• Operate, secure, troubleshoot, and improve NailsSys.
• Provide advertising reporting, campaign-management, keyword-planning, and attribution features.
• Measure cost per booked or paying customer and advertising return using first-party salon outcomes.
• Maintain auditability for material campaign-management actions.
• Comply with legal, regulatory, security, and contractual obligations.

4. Sharing and disclosure

We do not sell Google user data or Google Ads API data.

• We may use infrastructure and service providers that process information on our behalf to host, secure, store, or operate NailsSys.
• We may disclose information when required by law, legal process, or to protect the security and integrity of the service.
• We do not provide third parties with programmatic access to Google Ads using our developer token.

5. Data storage, security, and credentials

• Google Ads developer tokens, OAuth client secrets, refresh tokens, and access tokens are treated as confidential credentials and are stored server-side.
• Sensitive Google credentials are not intentionally exposed in browser-delivered application code.
• Access to Google Ads management and business-wide financial reporting is restricted to authorized management roles.
• NailsSys uses tenant and business scoping plus database access controls to separate salon data.
• Logs and diagnostics are limited to information reasonably necessary to operate and secure the service and should not contain secret credential values.

6. Retention, disconnection, and deletion

NailsSys retains Google Ads reporting snapshots, audit records, and related business records only for as long as reasonably necessary for the purposes described here, legal obligations, security, accounting, and operational continuity.

When Google Ads access is disconnected, NailsSys should stop using that authorization for new Google Ads API requests. Stored OAuth credentials associated with the connection should be revoked or deleted as part of the disconnect process. Historical reporting or audit records may be retained when reasonably necessary for legitimate business, accounting, security, or legal purposes.

7. Verified advertising-revenue boundary

Verified Google Ads booking-revenue reporting currently covers online bookings that can be deterministically linked to an attributed ad interaction, an actual salon check-in, the corresponding POS ticket, and a captured service payment. Walk-in customers are not currently included in verified Google Ads booking-revenue attribution.

8. Your choices

• Authorized users may choose whether to connect a Google Ads account.
• Authorized users may revoke Google access through their Google Account permissions and may request that NailsSys disconnect the integration.

9. Changes to this policy

We may update this Privacy Policy as NailsSys features, legal requirements, or Google API requirements change. The effective date shown above will be updated when material changes are published.

10. Contact

NailsSys / Nail Lounge West
Website: nailssys.com
Email: hello@nailssys.com

Questions or requests about Google Ads data handling may be sent to the email above.