Privacy policy

Controller

CENTRO PUBLICIDAD ELECTRÓNICA ESPAÑA, S.L., Spanish tax ID B53449120, C/ PAIS VALENCIÀ, 3, 03610 PETRER, ALICANTE, SPAIN. Contact: privacy@digitalpublic.com.

Data processed

• Identity, contact, account, team, plan, billing, and support data.
• Projects, campaigns, content, leads, communications, reports, and connected-provider data.
• OAuth and API credentials, encrypted or protected according to their nature.
• IP, device, security, audit, consent, and service activity.

Purposes and legal bases

We process data to provide the portal, API, and MCP; start the live trial and subscriptions; connect providers; execute authorized instructions; bill through Stripe; provide support; secure and audit the service; and meet obligations. Bases include contract and pre-contractual steps, legal obligation, legitimate interest in security and improvement, and consent where appropriate.

Recipients

We do not sell personal data. We use necessary providers listed at /en/subprocessors and services the customer connects through OAuth or credentials. Data may be disclosed to authorities when legally required.

Trial and authorized agents

The trial lasts 14 days and lets an authorized agent read and prepare or perform changes through compatible providers the user explicitly connects. Write access is supervised: sensitive actions require a human decision on the exact proposal. The agent cannot consent, connect providers, subscribe, or expand permissions on the user's behalf. We record the authorization, client, agent runtime, result, and technical evidence, but not prompts or conversations.

Retention and rights

When the trial ends we suspend credentials and revoke tokens. The project and connections remain encrypted for 30 days to support an upgrade; they are then deleted or revoked unless law requires otherwise. The user may disconnect providers or request immediate deletion. You may exercise access, correction, deletion, objection, restriction, and portability at privacy@digitalpublic.com and complain to the Spanish Data Protection Agency.

Data from Google connections

When you connect Google, the permissions you accept determine DigitalPublic's access. Available features may retrieve accounts and properties, Google Ads and Analytics metrics, Search Console performance, Tag Manager configuration, Merchant Center products, business profiles, and YouTube channels. Write features perform the operations you authorize on the selected assets. Gmail is used to send messages you authorize and identify the sender address; sending does not require reading or deleting your inbox.

We use this data to display project information, prepare reports, and provide the features you request. Google permissions operate alongside DigitalPublic project permissions and approval controls.

Google data, agents, and AI

If you authorize an external agent to query your project through API or MCP, responses may contain data from your Google connections. The agent and the service where you use it receive that data according to the access you grant. Review the service and permissions before authorizing it. Internal AI features may transmit the data needed to fulfill your request to the configured provider; DigitalPublic's providers are identified at /en/subprocessors.

We do not use private data obtained from Google, or data derived from it, to train general-purpose AI models. The permission to use our public website content does not extend to this private data.

Limited Use of Google data

DigitalPublic's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy . We do not sell this data or use it for purposes unrelated to visible, user-authorized features. Google Ads operations are also subject to that API's policies.

Disconnecting and deleting Google data

We protect connection credentials with encryption and access controls. You can disconnect a provider in DigitalPublic and revoke the application's access at https://myaccount.google.com/connections . Disconnecting does not automatically delete previously generated reports or copies you transferred to other services. You can request deletion at privacy@digitalpublic.com. The retention periods stated for the trial are not a general retention period for active-account data.

AI and training

Public digitalpublic.com content permits search, AI input, and training with use=reference. This permission does not cover private account, project, lead, campaign, credential, or audit data.