Privacy Policy

1. Who we are

MARTIS TECH LTDA (“Martis”, “we”, “us”), CNPJ 33.939.531/0001-01, is a software development and data science company. RIPGestor helps authenticated account owners operate and understand their own authorized advertising, analytics and business data through official APIs. Questions and privacy requests can be submitted through our contact form.

2. Data we process

Depending on the permissions selected, Martis may process:

• Authorized Google Ads account, campaign, ad, asset, keyword, conversion and audience data.
• Authorized Business Profile locations, reviews, replies, media and posts.
• User-requested Gmail messages, Calendar events and calendars, and Drive files.
• YouTube channel and video data, including metadata, uploads, analytics and reports.
• Places, address and route queries through Google Maps APIs; the project API key does not identify a personal account.
• OAuth tokens and granted scopes, stored encrypted while a connection remains active.
• Analyses, preferences, approvals, derived reports and minimal security and audit records.
• Consented website-conversion information; raw identifiers used for Enhanced Conversions are not retained in RIPGestor measurement records.
• Contact information voluntarily submitted.

We do not ask for platform passwords, browser cookies or session cookies.

3. Why we process data

We process data only to operate advertising, business profiles, messages, events, files, maps and video channels requested by the authenticated account owner; prepare analyses and approved changes; configure measurement; diagnose errors; and protect the service. Each identity can use only the connections and assets authorized for that user’s own account. Martis does not use one customer’s account data to serve unrelated customers.

4. Legal bases

Where Brazilian data protection law applies, processing is based on the user’s consent, performance of requested services, legitimate interests in securing and improving the service, and compliance with legal obligations. Users may withdraw platform authorization at any time.

5. Platform data, precision and reconciliation

Martis accesses platform data only through official authorization mechanisms and only for the organization or person who authorized access. We retain only the identifiers, consent records, settings and permitted metrics needed to operate and audit requested services.

To improve precision, Martis reconciles account and content identifiers, reporting periods, metric definitions, pagination, conversion diagnostics and aggregation differences. Reports and changes maintain traceability to authorized source data so discrepancies can be identified and explained.

6. AI-assisted processing

When the user requests an explanation, report or recommendation, relevant metrics and the user’s question may be processed by contracted infrastructure or AI service providers solely to deliver that analysis. We minimize the data sent and do not intentionally send platform passwords, OAuth secrets or unrelated account data to generative models.

7. Sharing and service providers

We do not sell personal information. Data may be processed by hosting, security, observability and AI infrastructure providers acting on our behalf, or disclosed when required by law or necessary to protect users and the service. Providers receive only the information needed for their function and are subject to applicable contractual safeguards.

8. Storage, retention and security

We use reasonable administrative and technical safeguards, restrict access to authorized operators, and keep developer tokens, OAuth secrets and refresh tokens out of public client-side code. Tokens are retained only while the connection is active or as needed to complete authorized operations. Measurement ingestion keys are revocable and stored as non-reversible digests. Operational records are retained only as long as needed for security, troubleshooting and legal obligations. A verified deletion request is normally completed within 30 days unless retention is legally required.

9. International processing

Infrastructure providers may process information outside Brazil. Where required, we use appropriate safeguards for international transfers and limit processing to the purposes described in this policy.

10. Your choices and rights

Users may separately revoke Google Ads, Business Profile, Workspace or YouTube in the access portal, withdraw authorization in their Google Account, and request access, correction, portability or deletion. Instructions are available on the Data Deletion page. Requests may require identity and account ownership verification.

11. Children

Martis is intended for business users and is not directed to children under 13. We do not knowingly collect personal information from children.

12. Cookies and hosting logs

This informational site does not use advertising cookies. Our hosting provider may process essential security and request logs. The contact form uses only the information a visitor chooses to submit.

13. Changes

We may update this policy when the product, law or platform rules change. The updated version will show a new “Last updated” date. Material changes will be communicated through an appropriate channel.

14. Contact

Submit privacy questions or data rights requests through the Martis contact form. Select “Privacy or data request” so the request can be prioritized.