Privacy Policy of GOM Tools Business Manager

|
Privacy Policy of GOM Tools Business Manager

GOM Tools Business Manager · GOM Network · Last updated: October 23, 2026

GOM Tools Business Manager (the “Platform”) is a web application by GOM Network to manage the digital marketing of businesses and their clients: SEO, paid advertising (SEM), landing pages, email marketing and reports. This policy explains what data we process, why, who we share it with and how you can exercise your rights. The Platform is available at https://app.gomnetwork.com.

1. Controller and contact

The data controller is GOM Network. For any privacy question or to exercise your rights, email info@gomnetwork.com.

2. Data we process

  • Account data: name, email address and password (stored as a hash) of users, and their membership in organizations and projects.
  • Business data of each project: what users upload or create (pages, keywords, landing pages, email contacts and campaigns, reports, files).
  • Data from connected services: when a user connects a third-party service to a project (Google, HubSpot, Meta, LinkedIn, Calendly, WordPress, email server), we process the data from that service needed for the features described below.
  • Technical data: the session cookie needed to sign in and for CSRF protection, and server logs (IP address, date and requested path) for security and diagnostics. We do not use advertising or tracking cookies.

3. Data we receive from Google

With “Connect with Google”, a user authorizes the Platform to access their Google account with these scopes:

  • https://www.googleapis.com/auth/adwords (Google Ads): we read the ad accounts selected for the project, their campaigns, budgets and metrics (impressions, clicks, cost and conversions). Only when an authorized project user requests it (or approves it, under the permissions their organization defines) do we apply changes to campaigns, ad groups, ads, keywords or budgets. We never create, cancel or delete accounts, nor change their users or access.
  • https://www.googleapis.com/auth/analytics.readonly (Google Analytics 4, read-only): we read reports of the selected property (sessions, conversions and channels) to compare them with campaigns.
  • https://www.googleapis.com/auth/webmasters.readonly (Search Console, read-only): we read search queries, clicks, impressions and positions of the selected site for the SEO module.
  • openid and email: only to show which Google account is connected.

Each scope is requested only when the feature that uses it is connected. We store the Google refresh token encrypted and tied to the project; it is never shown in the interface.

GOM Tools Business Manager’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, Google user data is: (a) used only to provide the users of the same project with the features they see in the Platform: their reports, metrics and analysis, the campaign changes they request or approve and, only if an authorized project user connects an AI agent through MCP and grants it that permission, that agent’s answers to what the user asks; (b) never sold or used for advertising, user profiling or resale; (c) not shared with third parties except as described in section 5, to comply with the law or to protect security; (d) not used to develop, improve or train generalized artificial intelligence or machine learning models; and (e) not read by anyone at GOM Network unless you consent, for security, to comply with the law, or when aggregated and anonymized to operate the service.

3b. Data we receive from Meta (Facebook / Instagram)

With “Connect with Meta” (Facebook Login for Business), a person who manages the business portfolio chooses in Meta which ad accounts to share with the Platform and grants these permissions:

  • ads_read: we read the shared ad accounts, their campaigns, ad sets and ads, budgets and metrics (reach, impressions, clicks, spend and actions/conversions).
  • ads_management (if granted): we apply changes to campaigns, ad sets or ads only when an authorized project user requests or approves them. We never delete or close ad accounts.
  • business_management (if granted): only to identify the portfolio and list the shared accounts.

Meta provides a token for the client’s portfolio that we store encrypted and tied to the project; it is never shown in the interface. Meta data is used only to show reports and metrics to the users of the same project; it is never sold, used for advertising or profiling, or used to train AI models.

Deleting your Meta data: in Project settings → Advertising (SEM) → Meta Ads click “Disconnect”: we delete the token and remove the app’s permissions at Meta. You can also remove the app from Facebook’s Business Integrations settings or from Meta Business Suite (Settings → Integrations). To also delete the campaigns and metrics already imported, delete the project or email info@gomnetwork.com naming the project; we answer within 30 days.

4. Why we use the data

  • To provide the service: show campaigns, metrics, reports and features of each project to the authorized users of that project.
  • To sync connected services automatically (usually once a day).
  • For security, abuse prevention, support and compliance with legal obligations.

The data of each project is isolated: only people with access to that project, under the permissions their organization assigns, can see it.

5. Who we share it with

  • The hosting provider of the server where the Platform runs, as data processor.
  • The services you connect (for example Google or HubSpot) receive the requests needed to read or send the data the feature requires.
  • AI agents your organization connects through MCP: only if an authorized project user sets them up, and only with the permissions that user grants.
  • Authorities, when required by law.

We do not sell personal data.

6. Retention and deletion

  • Data is kept while the account, organization or project is active.
  • When you click “Disconnect” on a service, we delete its credentials from the project and, for Google, we revoke the access at Google. You can also remove the access at any time at myaccount.google.com/permissions.
  • Deleting a project deletes its data, including data imported from Google.
  • You can request the deletion of your account and data by emailing info@gomnetwork.com.

7. Security

We use encrypted connections (HTTPS), encryption of credentials and tokens in the database, hashed passwords, access control by organization, project and permission, and backups.

8. Your rights

You can access, update, correct and delete your data, and revoke your consent, under Colombian Law 1581 of 2012 and other applicable laws. Email info@gomnetwork.com; we answer within the legal deadlines.

9. Changes

If we change this policy, we will publish the new version on this page with its update date.