How DataLight use Google User Data
1. App Purpose
DataLight helps growth, product, and operations teams monitor key metrics and catch anomalies in real time. With your consent, we connect securely to your Google accounts to read metrics and metadata. We then analyze these signals and send you alerts or display dashboards - so you can act quickly when unusual changes occur.
2. Google OAuth Scopes We Request
We request the minimum necessary read-only permissions.
Google User Info
https://www.googleapis.com/auth/userinfo.email
https://www.googleapis.com/auth/userinfo.profile
What we access: Your email address, name, and profile picture
Why: To identify your account, show it in the app, and associate metrics with the correct user
Write access: None
Google Analytics
https://www.googleapis.com/auth/analytics.readonly
https://www.googleapis.com/auth/userinfo.profile
What we access: Analytics metrics, dimensions, and event data
Why: To detect anomalies in traffic and user behavior, and power dashboards
Write access: None
Google Ads
https://www.googleapis.com/auth/adwords
What we access: Campaign performance, spend, conversion metrics, etc.
Technical capability: This scope allows write-level access by design—but we only use it for reporting
Why: To generate alerts and analytics on spend/performance trends
Write access by us: Not used — we do not create, modify, or delete campaigns, budgets, ads, keywords, or settings
Compliance: Use is limited to reporting only, per Google Ads API permissible use policy
3. Data Handling & Security
Read-only: We never modify, delete, or create data in your Google accounts.
Retention: We store only the aggregated metrics needed for anomaly detection and dashboards, and we purge detailed Google data after 90 days. You can request full deletion at any time by emailing us.
No sharing: We do not sell, share, or transfer Google user data to third parties.
No offline use: Google data is not used for unrelated marketing or advertising.
4. Your Control
Granting access: You decide whether to connect your Google accounts during onboarding.
Revoking access: You can disconnect at any time via your Google Account permissions page.
Retention: We store the minimum necessary aggregated data for anomaly detection and dashboards. You can request deletion at any time.
Deletion requests: Email us at support@datalight.app to request immediate deletion of any stored data.
5. Compliance
We comply with the Google API Services User Data Policy, including the Limited Use requirements:
Google user data is used only to provide or improve app features.
Data is never sold or used for advertising.
Access is limited to the minimum necessary scopes.
See also our full Privacy Policy.