Last updated: September 27, 2026
1. Introduction
At FlashCrafter, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
2. Information We Collect
We collect information that you provide directly to us, including:
- Account information (name, email, password)
- Billing information (payment method details)
- Content you create using our service
- Communications with us
We also automatically collect certain information when you use our service, including:
- Log information (IP address, browser type, pages visited)
- Device information
- Usage information
- Cookies and similar technologies
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and manage your account
- Send you technical notices, updates, and support messages
- Respond to your comments and questions
- Protect against fraudulent, unauthorized, or illegal activity
- Develop new products and services
4. Information Sharing
We may share your information with:
- Service providers who perform services on our behalf
- Business partners with your consent
- In response to legal process or government request
- To protect our rights, privacy, safety, or property
- In connection with a merger, acquisition, or sale of assets
5. Your Choices
You have several choices regarding the information we collect:
- Account Information: You can update your account information in your profile settings
- Cookies: You can manage cookies through your browser settings
- Marketing Communications: You can opt out of marketing emails
6. Data Security
We implement reasonable security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.
7. Data Retention
We retain your information as long as necessary to provide our services and for legitimate business purposes, or as required by law.
8. Children's Privacy
Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected information from a child under 16, we will delete this information.
9. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
10. Google Account Data
Growth Briefs, our reporting application at briefs.flashcrafter.ai, can connect Google accounts that you control. This section describes those Growth Briefs connections. Connecting is optional, you choose which accounts, properties, and locations each connection covers, and a Growth Brief is still produced from public evidence when nothing is connected.
What we access
- Google Ads (
auth/adwords) — spend, clicks, impressions, conversions, conversion actions, and per-campaign performance for the advertiser accounts you select. With your authorization we also create and confirm the manager link that lets FlashCrafter operate those accounts for you. - Google Business Profile (
auth/business.manage) — the categories, opening hours, and reviews, including each reviewer's display name, review text, and any published owner reply, of the single location you select. With your authorization we also add FlashCrafter as a manager of that location. - Google Analytics (
auth/analytics.readonly) — the list of properties you can see, so that you can choose one, and then sessions, traffic sources, and conversion events for that property. Read-only: we never write to Analytics. - Google Search Console (
auth/webmasters.readonly) — your site list, and clicks, impressions, click-through rate, and average position by query and page for the property you select. Read-only: we never add, remove, or modify sites, sitemaps, or settings. - Your Google sign-in email (
openid,email) — used only to identify which Google account a connection uses, so that you can recognize and manage it. Signing in to FlashCrafter is handled separately from these connections.
These are the Google scopes used for the Growth Briefs connections described here, and these connections request no others.
How we use it
We use Google account data to produce and keep current the Growth Brief for the business you connected it to, to show that business's advertising, listing, traffic, and search performance to people authorized to see that Brief, and to operate the Google Ads accounts and Business Profile location you explicitly delegated to FlashCrafter. We do not use Google account data to build advertising or marketing profiles, we do not use it to target advertising outside the Google Ads accounts it came from, and we do not use it to develop or train our own machine-learning models.
How we store it
OAuth access and refresh tokens are encrypted with AES-256-GCM under a dedicated server key that is held separately from the database. Tokens are never returned to your browser and are not included in reports. Google Ads, Analytics, and Search Console figures are read when a Brief is generated and are then stored inside that saved Brief. Google Business Profile categories, hours, and reviews are synchronized and stored so that your Brief can display them.
Who else receives it
- Cloudflare, our hosting and storage provider, holds the database and report files that contain this data.
- Where the website-planning feature is enabled for your business, that Brief's evidence — which includes your connected Google Ads, Analytics, and Search Console figures, and can include your Business Profile review text — is sent to our AI model provider, OpenAI, or to OpenRouter where it is configured, so that the website plan can be produced. Website planning is off unless it is enabled for your business.
- FlashCrafter personnel who operate your account.
Apart from the recipients described in this section, your Google account data goes where you direct it — most importantly to anyone you give a Brief view link to, as described below — and where we are required to disclose it by law or legal process. We do not sell it, and we do not transfer it to data brokers or to advertising platforms other than the Google accounts it came from.
Sharing a Brief
A Brief is private to authorized signed-in users. If a view link is created for a Brief, a copy of that Brief, including the connected Google Ads, Analytics, Search Console, and Business Profile figures it contains, can be read by anyone holding that link until the link expires or is revoked. Detailed period-over-period Search Console comparisons are excluded from shared copies.
Your control
You can disconnect any Google connection at any time from the Google connections for your business in Growth Briefs. Disconnecting ends the delegated access FlashCrafter holds — the Google Ads manager link and the Business Profile manager entry — revokes FlashCrafter's OAuth grant at Google, and deletes the stored credential. You can also revoke access directly in your Google Account permissions at myaccount.google.com/permissions.
Disconnecting stops any further reading. It does not by itself delete Google-derived figures already stored in Briefs that were generated while the connection existed, or Business Profile reviews already synchronized, or a copy already published behind an active view link. Deletion of that stored data is handled manually rather than automatically; send requests to privacy@flashcrafter.ai.
Google's own rules for applications that read Google user data are published in the Google API Services User Data Policy, including its Limited Use requirements.
11. SMS Messaging Privacy
If you consent to receive text messages from FlashCrafter, we use your mobile number and messaging consent only to provide the messages described when consent was collected. Mobile information and text-messaging opt-in data and consent are not sold, rented, or shared with third parties or affiliates for their marketing or promotional purposes. We may share information with service providers solely as necessary to deliver and operate the messaging service.
Message frequency varies and message and data rates may apply. You may reply STOP to opt out or HELP for assistance. See our SMS consent process and Terms and Conditions for more information.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us at privacy@flashcrafter.ai.