Privacy Policy
Effective 6 November 2026
DaysDrop ("DaysDrop", "we") is operator tooling for online stores. This policy explains what data DaysDrop
handles when a store operator uses it, including data received from Google APIs, and how that data is used,
stored, shared and deleted. Questions: lafumae@gmail.com.
Who uses DaysDrop
DaysDrop is used by store operators to run their own stores. It is not a consumer product. Shoppers of an
operator's store are covered by that store's own privacy policy; DaysDrop processes their order data only on the
operator's behalf, as described below.
Data we handle
- Operator account: name and email address from the sign-in provider, used to sign the operator in and
keep their workspace separate from others.
- Connected store and supplier data: product, price, inventory and order data from the stores and
suppliers the operator connects, and the access credentials for those connections (stored encrypted).
- Google Ads data (only if the operator connects a Google Ads account, see below).
- Ad click attribution: when a shopper arrives at the operator's store from an ad, the store can send
DaysDrop the ad click identifier (for example a Google click ID), campaign tags (UTM parameters), the landing
page and a one-way hash of the IP address. This is used only to attribute the operator's own orders to the
operator's own campaigns.
Google user data
When an operator chooses to connect a Google Ads account, DaysDrop asks for the Google Ads API scope
(https://www.googleapis.com/auth/adwords) through Google's OAuth consent screen. With that permission
DaysDrop accesses, for the Google Ads accounts the operator authorizes:
- account identifiers, names, currency and time zone;
- campaigns, campaign budgets, ad groups and product groups, and their settings and status;
- performance reports (impressions, clicks, cost, conversions, conversion value), including per-product
shopping performance;
- conversion actions.
How it is used. Only to provide the operator's own features in DaysDrop:
- showing campaign performance and comparing ad spend with the store's real order profit;
- uploading purchase conversions from the operator's store to the operator's own Google Ads account (order ID,
ad click identifier, order value and time);
- creating, pausing, resuming and adjusting campaigns and budgets in the operator's account — only when the
operator requests it or within automation limits the operator has explicitly configured.
What we do not do. DaysDrop does not sell Google user data; does not use or transfer it for advertising,
retargeting or personalized ads; does not use it to determine creditworthiness or for lending; does not use it to
train generalized AI or machine-learning models; and does not transfer it to third parties except as necessary to
provide the features above, to comply with law, or as part of a merger or acquisition with notice to the operator.
No person at DaysDrop reads Google user data unless the operator asks us to (for example for support), it is
needed for security purposes, or it is required by law.
Limited Use. DaysDrop's use and transfer to any other app of information received from Google APIs will
adhere to the Google API Services
User Data Policy, including the Limited Use requirements.
Storage and security
- OAuth refresh tokens and store access credentials are encrypted at rest and are never shown back in the
interface.
- Data is accessible only to the operator's own workspace; requests are authenticated and scoped to the
operator's stores.
- Connections to Google and to store platforms use HTTPS.
Retention and deletion
- Google Ads data is kept while the Google Ads account stays connected, so reports can cover past periods.
- When the operator disconnects the Google Ads account in DaysDrop, the stored refresh token is deleted
immediately and revoked with Google. Synced Google Ads reporting data is deleted on request or when the
operator deletes their workspace.
- The operator can also remove DaysDrop's access at any time from their Google Account at
myaccount.google.com/permissions.
- To request deletion of any data, email lafumae@gmail.com.
Changes
If this policy changes, the new version will be posted on this page with a new effective date. Material changes
to how Google user data is used will be made only with the operator's renewed consent.
Contact
lafumae@gmail.com