Privacy

Last updated November 4, 2026

This notice covers information you send through this website and our team-operated Google Ads planning tools. Saved Google connections and retained planning reports require your separate consent.

Audit and agency proposal requests

When you request an audit or agency proposal, we collect your name, email, business name, website and the challenge you describe. You may also choose to provide a phone number and an area of interest. We use this information to review fit, discuss scope and contact you about the request. A proposal request from an audit can also include its reference, version and the section where you chose to act, so our team can review the same material with your priorities. This reference does not verify identity or grant account access.

Requests are saved in a private inquiry inbox hosted through OpenAI Sites and Cloudflare. Authorized Foundation operators can review them through our protected founder portal and approved tools. When the CRM connection is activated, the inquiry and its permitted source evidence are forwarded to our private Foundation CRM for assignment, qualification, appointments, conversations and reporting. Provider failures do not remove a saved website request. A dedicated Foundation Google Workspace mailbox and calendar may process requested correspondence and appointments after their separate activation. Mailbox data is not used for advertising exports or shared model training. Request details are not published on this website. A saved request is not an account, subscription or purchase, and this form does not connect any Google or other provider account.

We retain inquiry details while reviewing or discussing potential work and for related business records. To ask about access, correction or removal of a request, email us and include your request reference if available. Our team handles those requests; there is no automated public lookup or deletion page.

For abuse prevention, the server checks request size and format and may use a hashed connection identifier and time-limited counters. Those counters are separate from the inquiry and are cleaned up during later submissions. Hosting providers process request information needed to operate and protect the service.

Google planning: what we access and why

With your Google authorization, Foundation OS Ads Planning can confirm the authorized agency account and its currency. With your consent, our operators can request aggregate historical search volumes, seasonal patterns, advertising competition and bid estimates for a specified keyword list, geography, language, network and period. We use these to prepare and review Google advertising opportunities and relevant landing-page improvements.

Selected estimates can appear in a private business audit alongside separately sourced website observations. They do not establish unique people, organic traffic share, SEO difficulty or promised advertising results. We do not read a client’s Ads account through this agency connection; connecting a client account requires its own authorization.

Google’s Ads permission also permits account management. This planning tool only reads permitted account metadata and estimates. It does not create or change campaigns, ads, plans, bids, budgets or billing. It provides no public programmatic access, automatic refresh or ongoing research agent.

Saved connection and retained reports

If you approve a saved connection, we keep its refresh credential in macOS Keychain on the authorized operator’s Mac. This lets an operator reconnect without repeating consent for every approved read. Access tokens stay in memory. Tokens are not included in audit reports, source code or AI prompts.

With your separate approval, we retain selected numeric planning results and their keywords, city targets, language, network, currency, historical period and collection date in private audit records. We also retain limited setup and troubleshooting records, such as the authorized account identifier, request status and Google request ID. We do not save a raw list of all accessible accounts or unrelated account data.

Reports and their review history remain until removal is requested and administered. The saved credential remains until disconnected or revoked. Earlier checks performed without a saved connection discard their tokens and numeric metric values when the check ends.

Access and sharing

Authorized Foundation OS founders and operators, their approved AI-assisted tools, and our hosting providers may process the selected planning records to prepare and review the requested advertising recommendations. Credentials remain in the operator’s Keychain. The shared audit is access controlled; presenting or exporting it for a client requires separate review. We do not sell Google user data or use it for ad targeting.

Our use of Google data follows the Google API Services User Data Policy, including its Limited Use requirements where applicable.

This website and email

The public marketing site includes the audit-request form described above. It has no third-party analytics tag or advertising pixel. If you allow optional source measurement, we store first-observed and current-visit landing paths, referring domains, campaign parameters and advertising click identifiers in your browser, then attach them to your inquiry. First-visit storage lasts up to 30 days; a current visit lasts up to 30 minutes. We do not retain complete page queries or use browser fingerprinting. You can decline or change this choice using Acquisition privacy preferences. Declining does not prevent a request. Saved inquiry source evidence is historical; it does not grant permission for later marketing or advertising-platform sharing. Form success confirms a saved request; it does not confirm an email acknowledgment. We may send our designated operator a notification containing the request reference and a link to the protected founder inbox. Notification emails do not contain your message or contact details. Opening a request in the founder inbox marks it read for the team; operators can mark it unread again. Email links open your email app, and hosting and email providers process information needed to deliver their services. The separate founder and client portals have their own sign-in flows.

Your controls

You can revoke app access through your Google Account connections. An operator can disconnect the saved local credential. Revoking or disconnecting stops future authorized reads; it does not erase reports already created.

To request disconnection, review or removal of retained Google-derived records, email us. We will address the relevant private files and hosted report copies, rather than treating removal from one device as deletion everywhere.

We will update this notice and obtain any required consent before using Google data for a new purpose.