Privacy Policy

1. Who We Are

Gryphon Hub is operated by TRIAD s.r.o., Brigádnická 27, 841 10 Bratislava, Slovakia (IČO: 35931141). We act as the data controller for information collected through this service. Contact us at support@triad.sk.

2. What Data We Collect

We collect the following categories of data:

• Account data: name, email address and profile picture from your Google account (via OAuth)
• Ad platform tokens: OAuth access and refresh tokens for Facebook Ads and Google Ads — stored encrypted in our database
• Ad account identifiers: account IDs and account names from connected ad platforms
• Advertising performance data: metrics such as spend, impressions, clicks and conversions — fetched on demand for Looker Studio reports
• Usage data: basic server logs (IP address, browser, timestamps) for security and debugging

3. How We Use Your Data

We use your data exclusively to:

• Authenticate you and manage your account
• Connect to your ad platforms on your behalf and fetch advertising data
• Generate API endpoints for use in your Looker Studio reports
• Maintain the security and integrity of the service

We do not sell, rent or share your personal data with third parties for marketing purposes.

4. Google API Limited Use Policy

Gryphon Hub’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements:

• We only request Google OAuth scopes strictly necessary to provide the service
• We do not use Google user data for advertising or to train AI/ML models
• We do not share Google user data with third parties except as necessary to operate the service
• Humans at TRIAD do not read your Google data unless you explicitly request support

5. Facebook / Meta Data

When you connect a Facebook Ads account, we store your OAuth access token and use it solely to query the Facebook Marketing API for advertising performance data on your behalf. We never access your personal Facebook profile data beyond what is required for account identification.

6. Data Retention

We retain your account data and connected platform tokens for as long as your account is active. Advertising performance data is not cached — it is fetched live from ad platforms when your Looker Studio report requests it and is not stored in our database.

If you delete your account or disconnect a platform, the associated tokens are permanently deleted from our database within 30 days.

7. Requesting Deletion of Your Data

You can delete your connections directly in the Gryphon Hub dashboard. To permanently delete your account and all associated data, email us at support@triad.sk. We will process your request within 30 days.

8. Data Security

All data is transmitted over HTTPS. OAuth tokens are stored in an encrypted PostgreSQL database hosted on Neon (EU region). We apply industry-standard security practices including access controls and regular security reviews.

9. Cookies

We use only strictly necessary session cookies for authentication. We do not use advertising cookies or tracking pixels. For more details see our Cookie Policy.

10. Third-Party Services

We use the following sub-processors:

11. Your Rights (GDPR)

As a resident of the EU/EEA, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Lodge a complaint with the Slovak Data Protection Authority (dataprotection.gov.sk)

To exercise any of these rights, contact us at support@triad.sk.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by updating the “Last updated” date. Continued use of the service constitutes acceptance of the updated policy.

13. Contact