Privacy policy
This policy explains what Blue Dragon Dash collects, why, where it is kept and how to have it deleted. It covers the dashboard at this domain and the background services that supply it.
Blue Dragon Digital Marketing LTDA, a company registered in Brazil, is the controller of the data described here. Questions go to bluedragondash@gmail.com.
What we collect
Account details you give us. Your name, email address and the password hash used to sign in.
Google Ads performance data. When you connect your Google Ads account, we read reporting data for the accounts you select: campaigns, ad groups, keywords, search terms, bidding strategies, budgets, and the associated metrics such as impressions, clicks, cost and conversions. We also read the change history of those accounts so the dashboard can show what changed and when.
Authorization credentials. The OAuth refresh token Google issues when you grant access, which lets us read your reporting data on the schedule you expect.
Video and sales data, where you connect it. If you link a video hosting account or a sales platform, we read the performance figures needed to complete your funnel report.
Basic technical logs. Sign-in times and error records, kept so we can keep the service working and investigate problems.
We do not collect data about your customers as individuals, and we do not use cookies for advertising or tracking.
How we use it
Your data is used for one purpose: producing the reports and written observations you see in your own dashboard. We do not sell it, rent it, share it with other clients, or use it to train machine learning models.
To generate the written summaries that accompany your reports, aggregated figures from your account — totals and rates, not individual records — are sent to an AI provider under a commercial agreement that prohibits using that content for model training.
Google user data
Blue Dragon Dash's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We request a single permission, https://www.googleapis.com/auth/adwords, and we use it only to read reporting data from the Google Ads accounts you choose. We perform no write operations of any kind: the tool cannot create, modify, pause or remove anything in your account.
You can withdraw this permission at any time at myaccount.google.com/permissions. When you do, data collection stops and the dashboard prompts you to reconnect if you want it to resume.
Where it is stored and who can reach it
Data is held in a PostgreSQL database on servers we control. Each client's data is isolated at the database level, so one client's sign-in cannot reach another client's records. Authorization credentials are encrypted at rest and are never written to application logs.
Access within our company is limited to the people who need it to operate the service and to prepare your reports.
Our servers may be located outside Brazil. Where that is the case, the transfer is made on the basis of contractual safeguards with the hosting provider.
How long we keep it
Performance data is retained while your account is active, so that year-over-year comparisons remain possible. When you close your account, or on request, everything associated with it is deleted within 30 days. Technical logs are kept for 90 days.
Your rights
Under Brazil's Lei Geral de Proteção de Dados you may ask us to confirm what we hold about you, correct it, export it, or delete it, and you may withdraw consent at any time. Write to bluedragondash@gmail.com and we will respond within 15 days.
Export and deletion are also available directly in the dashboard, under account settings.
Changes to this policy
If we change this policy in a way that affects how your data is handled, we will email you before it takes effect and update the date at the top of this page.