DataCooker Brand Logo DataCooker
Get Started
GOVERNANCE & TRUST Version 2.4.0

Privacy Policy & Data Protection

DataCooker operates under the strict principle of absolute data integrity and a zero-data-retention architecture. We provide a clean, transparent data pipeline between your marketing channels and spreadsheet systems.

calendar_today
Effective Date
January 1, 2025
verified_user
Regulatory Compliance
Decree 13/2023/ND-CP & GDPR
lock_reset
Token Security
Server-side Secure Storage • Ephemeral Pipeline
01

Least-Privilege API Data Collection

The DataCooker pipeline architecture requests only the minimum required permission scopes necessary to fetch aggregated performance metrics and export data into Google Sheets as configured by you.

Platform / API Requested Scopes Never Accessed
Meta Graph API
Marketing API v20.0
check_circle ads_read
check_circle read_insights

Retrieves campaign metrics, ad set statistics, and spend performance reports.
block Strictly Not Accessed:
  • Direct messages, Messenger, Fanpage inboxes
  • Personal timeline posts or user profiles
  • Payment methods, banking, or credit card details
TikTok Login Kit & Display API
TikTok API Integration
check_circle user.info.basic
check_circle video.list

DataCooker enables authorized social-media reporting. TikTok account connection and public video reporting use TikTok Login Kit and Display API, subject to TikTok approval. Only authorized profile details and public video metrics are fetched.
block Strictly Not Accessed:
  • Private direct messages (TikTok Direct Messages)
  • Bank accounts or financial transactions
  • Account passwords or 2FA authentication codes
Google Sheets API
Spreadsheets v4
check_circle spreadsheets

Exclusively used to write or append aggregated performance rows directly into your explicitly specified Google Spreadsheet.
block Strictly Not Accessed:
  • Personal Google Drive files or unrelated documents
  • Never reads or modifies sheets outside your target file
  • Personal Gmail messages or Google Contacts
info
Core Principle: DataCooker acts purely as a compute pipe. We do not store ad creative assets, custom audience files, or Personally Identifiable Information (PII) of end consumers.
02

Google API Compliance & Limited Use Requirements

DataCooker seamlessly integrates with Google Workspace APIs (specifically the Google Sheets API) solely to automate report generation into user-authorized spreadsheets. We strictly adhere to Google’s API Services User Data Policy.

verified_user

Google API Services User Data Policy — Limited Use

policy

DataCooker's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

shield

"The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements."

smart_toy

We do not use Google user data to train artificial intelligence or machine learning models, and we do not transfer Google user data to third-party AI services.

Additional Limited Use Specifications:

  • check_circleData is only used to provide customer-facing reporting features prominent in DataCooker’s interface.
  • check_circleNo human reads your spreadsheet contents or marketing data unless explicitly authorized for debugging.
  • check_circleData received from Google APIs is never transferred or sold to third parties, data brokers, or advertising platforms.
  • check_circleWorkspace API data is never used to serve advertisements or train generalized artificial intelligence (AI) models.
03

Purpose of Processing

DataCooker is strictly engineered to measure cross-platform advertising efficiency in real-time. Every data pipeline event serves an explicit, bounded purpose:

query_stats Aggregating Ad Metrics

Standardizing fragmented ad reporting tables into clean structured datasets: Ad Spend, ROAS, CPA, CPC, CPM, Video View Retention Rate, and order conversions.

sync_alt Automated Sync to Google Sheets

Pushing synchronized records directly to the user’s designated Google Spreadsheet based on configured schedules (hourly, daily, or via manual triggers).

gavel Zero-Exploitation Policy (Absolute Guarantees)

cancel NEVER sell or rent customer data under any circumstances.
cancel NEVER share or transfer data to unauthorized third parties.
cancel NEVER train commercial or general AI models on customer data.
04

Security & Storage Architecture

DataCooker’s technical infrastructure implements robust encryption standards to ensure the confidentiality and integrity of all pipeline operations.

encrypted

Secure Server-Side Token Storage

Server-side Protected Storage

Access tokens are stored server-side and are not exposed in the browser or Google Sheets. All data transmission between our infrastructure and external APIs is fully encrypted via TLS 1.3 in-transit and AES-256 at rest.

timer

Automatic Temporary Cache Purge

Temporary Cache Purge ≤ 24 Hours

Intermediate calculation records exist strictly in ephemeral memory during execution and are permanently hard-purged within 24 hours following task completion.

Zero-Retention Pipeline Lifecycle
1. Ingest API Metrics
2. Calculate & Format
3. Write to Google Sheets
4. Permanent Cache Purge
05

User Rights & Data Deletion (Right to Erasure)

In compliance with Articles 14–17 of Vietnam Decree 13/2023/ND-CP and Article 17 of GDPR, DataCooker empowers you with full sovereignty to revoke access and request the permanent deletion of your data traces at any time.

delete_forever AUTOMATED REVOCATION & ON-DEMAND ERASURE

1-Click Disconnection & Data Deletion Request

Revoke connections and trigger deletion directly in your Account Settings, or request complete removal anytime by emailing [email protected]. All tokens and credentials will be destroyed within 60 seconds of revocation.

delete Revoke & Request Data Wipe Automated wipe execution: < 60 seconds
STEP 1

Submit Revocation

Click 'Revoke Access' in Settings or contact [email protected].

STEP 2

Revoke OAuth Tokens

Access tokens and pipeline configurations are purged permanently from DataCooker databases.

STEP 3

Verification Receipt

A cryptographic confirmation of complete deletion is dispatched to your registered email.

06

Contact & Data Protection Officer (DPO)

If you have questions regarding privacy, how your data is handled, or would like to exercise any of your statutory rights, please contact our dedicated data governance team:

admin_panel_settings

Data Protection Officer Inquiry Desk

Compliance team for international regulations (GDPR, CCPA) and Vietnam Decree 13/2023/ND-CP

mail[email protected] | scheduleResponse window: 24 – 48 business hours
send Contact Support