Last updated: 9 September 2026
This policy explains what data the HADE Insights application collects, how it uses that data, where it is stored, how long it is kept, who it is shared with, and how access can be withdrawn. It covers data accessed through Google APIs as well as data collected directly by the application.
HADE Insights is an internal application operated by HADE AI Agency, a company established in Romania that builds and operates websites, conversational agents and search visibility programmes for small and medium businesses. HADE AI Agency is the data controller for the purposes of the EU General Data Protection Regulation.
For any question about the data described here, or to exercise any right described in section 9, contact contact@hadeai.agency. Our public website is www.hadeai.agency.
HADE Insights connects through OAuth 2.0 to Google accounts that HADE AI Agency owns, or that a client has explicitly delegated to HADE AI Agency for the purpose of managing and reporting on their online presence. We request read only scopes. We do not request, and the application cannot perform, any write operation on those accounts.
Scope: https://www.googleapis.com/auth/webmasters.readonly
We read aggregated search performance data for the web properties we manage: the number of impressions and clicks, average ranking position, click through rate, the search queries that produced those impressions, the pages that received them, and the country and device breakdown. This data is aggregated by Google before we receive it. It does not identify individual people and we do not attempt to re-identify anyone from it.
Scope: https://www.googleapis.com/auth/adwords
We read performance data for the advertising accounts we manage: campaign, ad group, keyword and ad performance, the search terms report, impressions, clicks, cost, conversion counts and cost per conversion, and the geographic and device breakdown of that performance. We may also upload conversion events that the client's own website recorded, so that Google's bidding can optimise towards real enquiries rather than page views. We do not read or store payment instruments, invoices or billing account details.
HADE Insights does not request access to Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos, YouTube or any other Google service. It does not create Google Ads accounts, does not manage user access to any account, and does not use Google's account creation, user management or billing services.
We use it for exactly one purpose: to produce performance reports for the client who owns the account it came from, and to make internal optimisation decisions for that same client. Concretely, the data is aggregated into daily totals, compared against previous periods, rendered into a monthly written report, and emailed to the agency for review before it reaches the client.
We do not use it for advertising or retargeting. We do not use it to build profiles of individuals. We do not use it to train machine learning models. We do not combine one client's data with another client's for any commercial purpose, and no client can see another client's data.
HttpOnly, Secure and SameSite=Strict, and they expire after twelve hours.We do not sell, rent or trade any of this data, and we do not transfer it to anyone for advertising purposes. The following processors handle data strictly in order to operate the service, under their own contractual obligations:
We disclose data to a public authority only where a legal obligation requires it.
Separately from the Google APIs, HADE Insights receives a visit beacon from the client websites registered with it. The beacon reports the hostname, the page path and the referring URL, so that arrivals from AI assistants can be counted. It sets no cookies and does not track anyone across sites. The visitor's IP address is not stored: it is passed through a one way hash together with the date, and the original address cannot be recovered from the result. Requests from domains that are not in the registry are rejected.
The application also summarises conversations handled by the chatbots the agency operates for its clients. Those conversations are read only in aggregate for reporting, and message content is never sent to any third party other than the processors listed in section 5.
HADE Insights' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google APIs is used only to provide and improve the reporting features described in this policy, is not transferred to others except as necessary to provide those features or to comply with applicable law, is not used for serving advertisements, and is not read by any human except a HADE AI Agency operator investigating a specific reporting fault, with the account owner's knowledge, or where required by law.
Where the data constitutes personal data under the GDPR, we rely on the legitimate interest of the client in receiving accurate reporting on their own online presence, and on the contract between HADE AI Agency and that client. Where consent is the appropriate basis, it is given by the account owner at the moment they authorise the application through Google's consent screen.
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with the Romanian supervisory authority, ANSPDCP.
The owner of a connected Google account can revoke this application's access at any time, without contacting us, at myaccount.google.com/permissions. Once access is revoked, or on written request to contact@hadeai.agency, we delete the data associated with that account within 30 days.
Any change to this policy is published on this page, with the revision date shown at the top. Material changes affecting how Google user data is handled are communicated to the affected account owners by email.
Ultima actualizare: 9 septembrie 2026
HADE Insights este o aplicație internă operată de HADE AI Agency, societate din România. Agenția este operator de date în sensul GDPR. Contact: contact@hadeai.agency.
Aplicația se conectează prin OAuth 2.0 la conturi Google pe care HADE AI Agency le deține sau pe care un client i le-a delegat explicit. Solicităm exclusiv permisiuni de numai citire:
webmasters.readonly): interogări agregate, afișări, clicuri, poziție medie, pagini, țări și dispozitive pentru proprietățile administrate.adwords): performanța campaniilor, grupurilor de anunțuri și cuvintelor cheie, raportul de termeni de căutare, costurile și conversiile conturilor administrate.Nu solicităm acces la Gmail, Drive, Calendar, Contacts sau la alt serviciu Google. Nu creăm conturi, nu administrăm utilizatori și nu accesăm date de facturare.
Exclusiv pentru a produce rapoartele de performanță livrate clientului care deține contul respectiv și pentru deciziile interne de optimizare aferente aceluiași client. Datele nu sunt folosite pentru publicitate, pentru profilarea persoanelor sau pentru antrenarea de modele de învățare automată, și nu sunt combinate între clienți în scopuri comerciale.
HttpOnly, Secure, SameSite=Strict, cu expirare la 12 ore.Cu nimeni în scop comercial. Nu vindem și nu închiriem date. Subîmputerniciți, strict pentru funcționarea serviciului: Cloudflare (găzduire, calcul, bază de date), Anthropic (textul narativ al rapoartelor, doar metrici agregate) și Resend (livrarea rapoartelor pe email către agenție).
În afara API-urilor Google, aplicația primește un beacon de vizită de la site-urile înregistrate. Acesta transmite numele gazdei, calea paginii și referrer-ul, pentru a număra sosirile din asistenți AI. Nu folosește cookie-uri, nu urmărește utilizatorii între site-uri și nu stochează adresa IP: aceasta este transformată ireversibil printr-o funcție hash împreună cu data zilei.
Utilizarea de către HADE Insights a informațiilor primite prin API-urile Google respectă Google API Services User Data Policy, inclusiv cerințele privind utilizarea limitată.
Conform GDPR aveți dreptul de acces, rectificare, ștergere, restricționare, portabilitate și opoziție, precum și dreptul de a depune plângere la ANSPDCP. Titularul unui cont Google conectat poate revoca oricând accesul din myaccount.google.com/permissions. La revocare, sau la cerere scrisă la contact@hadeai.agency, ștergem datele asociate în cel mult 30 de zile.