Privacy Policy
1. What this policy covers
This policy explains what information LittleBrd collects when you visit littlebrd.com or use the LittleBrd service, how we use it, and the choices you have. It also explains how we handle data from Google and other accounts you choose to connect.
2. Information we collect
- Account information — your username, email address and a hashed password, and the workspace (organization) you create.
- Brand information you provide — brand and company names, website or app-store links, markets, answers to setup questions, and documents you upload (for example a marketing brief).
- Public information we collect for you — content of public web pages and app-store listings you point us to, a sample of public search results for your brand and category, Google Trends relative-interest data, and public posts from public social profiles. We store these with their source and date.
- Data from accounts you connect — described in section 4.
- Technical information — session and security cookies required to keep you signed in and to protect forms, and standard server logs (such as IP address, browser type and request time) used for security and troubleshooting. We do not use advertising cookies on littlebrd.com.
3. How we use information
- To provide the service: build your brand intelligence view, generate the marketing guide and channel recommendations, and prepare workstreams you approve.
- To keep the service secure, prevent abuse and fix problems.
- To communicate with you about your account and the service.
We do not sell personal information, and we do not use your data to target advertising to you.
4. Google user data and other connected accounts
LittleBrd can connect to your Google Ads account (and, where offered in the product, other Google services such as Google Analytics read-only access) using Google OAuth. Meta Ads can be connected in the same way. For data obtained through Google APIs:
- Access only when you connect. LittleBrd accesses your Google Ads data only after you explicitly connect your Google Ads account and grant permission on Google's consent screen. We do not access any Google account you have not connected.
- What we use it for. We use your Google Ads account, campaign, ad, keyword and performance data — and, once available for your account, keyword planning data — only to provide LittleBrd features to you: your Brand Intelligence view, marketing recommendations and channel plans, and the ad-operation actions you request.
- Changes require your approval. LittleBrd does not change your Google Ads account on its own. A proposed change (for example a budget change) is applied only after you approve it in LittleBrd, or automatically within the limits of an autopilot policy that an administrator of your workspace has explicitly turned on and can turn off at any time.
- Secure storage. OAuth access and refresh tokens are encrypted at rest and are used only by LittleBrd's servers to call Google APIs on your behalf. Access to them is limited to what is needed to run the service.
- No sale, no advertising use. We never sell your Google data. We do not use it for advertising, and we do not use it to build or improve generalized AI or machine-learning models.
- No human reading of your Google data, except with your explicit consent, when necessary for security purposes (such as investigating abuse), to comply with applicable law, or when the data has been aggregated and anonymized for internal operations.
- No transfer of your Google data to others, except as necessary to provide or improve user-facing features of LittleBrd, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you.
- Revoking access. You can disconnect at any time by removing LittleBrd's access in your Google Account at myaccount.google.com/permissions, or by asking us at seoho.lee.0213@gmail.com to disconnect the account and delete the stored tokens. After access is revoked, LittleBrd can no longer read new data from that account.
LittleBrd's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. Service providers
We use a small number of service providers to run LittleBrd, only for the purposes above:
- Google Cloud — hosting, database and secret storage.
- OpenAI — AI processing used to analyse public evidence and the brand information you provide, and to draft guides and recommendations.
- SerpApi — retrieval of public Google search results, Google Trends data and public Instagram posts.
Data you obtain from connected Google accounts is shared with these providers only as needed to provide the features you use, consistent with section 4.
6. Retention and deletion
We keep your information for as long as your account is active. You can ask us to delete your account and associated data at any time by emailing seoho.lee.0213@gmail.com; we will delete it, including stored OAuth tokens, unless we must keep certain records to comply with law or resolve disputes. Backups are overwritten on a rolling basis.
7. Security
We use encryption in transit (HTTPS), encryption at rest for credentials and tokens, per-workspace access controls, and audit logs for sensitive actions. No system is perfectly secure, but we work to protect your information.
8. Your choices and rights
You can access and update your brand information in the product, disconnect connected accounts as described above, and ask us for a copy of your data, its correction or its deletion. Depending on where you live you may have additional rights under local law; contact us to exercise them.
9. Children
LittleBrd is a business service and is not directed to children under 16. We do not knowingly collect their personal information.
10. Changes
If we change this policy we will update the effective date above, and for material changes we will notify account holders.
11. Contact
Questions or requests: seoho.lee.0213@gmail.com.