Privacy Policy for Google User Data

This policy applies specifically to Google user data obtained when you use Google Sign-In to create or access an Ai Bee account. It discloses who requests the data, what data is requested, why it is requested, and how it is accessed, used, stored, shared, and deleted.

Broader product practices for non-Google data are also described in our general Privacy Policy. If there is any conflict about Google user data, this Google-specific policy controls.

Google user data is requested by Ai Bee, operated by MARKETING BEE. Ai Bee is not owned, operated, endorsed, or sponsored by Google LLC. We keep OAuth client credentials confidential and accurately represent our identity on the Google OAuth consent screen.

We request only the minimum Google OAuth scopes required to implement Sign-In. We do not request access to information we do not need, and we do not "future proof" by requesting unused scopes.

We do not request Gmail, Drive, Calendar, Contacts, Photos, or other sensitive/restricted Google scopes for Sign-In. If we ever need additional Google scopes for a new feature, we will update this policy, update the OAuth consent configuration, and obtain your new consent before accessing that data.

We access Google user data only through official Google OAuth 2.0 / Google Sign-In APIs:

• Authorization request initiated from Ai Bee (for example /api/auth/google)
• OAuth callback handled by our API (for example /api/auth/google/callback)
• Profile and email attributes returned by Google after you grant consent on Google's consent screen

We do not scrape Google pages, reverse engineer undocumented APIs, or access Google account data outside the official OAuth flow.

Our use of Google user data is limited to the practices disclosed in this policy. We use Google Sign-In data only to:

• Authenticate you and create or sign you into your Ai Bee account
• Display your name and profile picture in the Ai Bee interface
• Associate your settings, subscriptions, and product activity with your account
• Send essential account and security communications
• Detect, investigate, and prevent fraud, abuse, or unauthorized access
• Comply with applicable law and respond to valid legal process

We do not sell Google user data; use it for advertising, retargeting, or credit scoring; transfer it to data brokers; or use it for any undisclosed secondary purpose.

Consistent with the Google API Services User Data Policy, Google user data obtained through our OAuth client is used only to provide and improve user-facing Sign-In and account features that are prominent in Ai Bee. Transfers of Google user data are allowed only:

• To service providers acting on our behalf to operate Ai Bee, under contract, and only for the purposes in this policy
• For security purposes (for example investigating abuse)
• To comply with applicable law
• As part of a merger, acquisition, or sale of assets, only after obtaining explicit prior consent where required

Human access to Google user data is limited to what is necessary for security, support you request, legal compliance, or aggregated internal operations that do not identify individual users beyond what the law permits.

We do not sell personal data. Google-derived account data may be processed by:

• Google LLC — authentication and OAuth token exchange
• MongoDB Atlas (MongoDB, Inc.) — encrypted storage of account records
• Vercel Inc. — hosting of the web app and API
• Stripe, Inc. — subscription billing only (does not receive Google OAuth tokens for advertising)

These providers process data only on our behalf for operational purposes disclosed here. We do not allow independent use of Google user data by sub-processors for their own purposes.

We take reasonable and appropriate steps to protect Google user data against unauthorized or unlawful access, use, destruction, loss, alteration, or disclosure. Measures include HTTPS encryption in transit, access controls, encryption of secrets at rest where applicable, and limited internal access.

Retention: Google profile identifiers, email, name, and avatar URL linked to your Ai Bee account are retained while the account remains active. After account deletion or a verified deletion request, associated Google Sign-In data is deleted within 30 days, except limited records retained where required for legal, security, or fraud-prevention obligations.

• Revoke Ai Bee's access anytime at Google Account → Third-party access
• Request access, correction, or deletion of your data by contacting us
• Delete your Ai Bee account and request removal of associated Google Sign-In data

Revoking Google access stops future Sign-In with that Google connection. It may not automatically delete historical Ai Bee account records; use the deletion process below for full deletion.

To request deletion of Google user data associated with Sign-In, email hello@marketingbeebd.com with subject "Google Sign-In Data Deletion" and the Google email used to sign in. You may also follow /data-deletion. We will process verified requests as quickly as reasonably possible and within the retention period above.

Ai Bee is not directed to children under 13. We do not knowingly collect Google Account data from children. Consistent with Google's policy for child-directed apps, we do not design Ai Bee as a service primarily directed at children that requires Google Sign-In.

If we change how Ai Bee accesses, uses, stores, or shares Google user data, we will update this policy, notify users as required, and obtain consent to the updated practices before using Google user data in a new way or for a different purpose than originally disclosed.