Privacy policy
Last updated: 2 November 2026
Who we are
Ruler Reports is a reporting tool operated by Ruler SMPC (“we”). Our team uses it to build marketing reports and dashboards for our clients from data in their advertising, analytics and social accounts. Ruler SMPC is the data controller for the personal data described here. Questions and requests: ptheodorogiannis@ruler.agency.
What we collect
- Workspace accounts. The name, email address, role and a hashed password of each person with access to a workspace.
- Connected accounts. When someone connects a Google or Meta account, the access granted for it (an OAuth refresh or access token) and the identifiers and names of the accounts, properties, sites, channels, locations, Pages and ad accounts they choose to connect.
- Report data. The performance figures read from those accounts when a report or dashboard is built. Reports keep a copy of their figures so a sent report does not change afterwards.
- Cookies. A sign-in session cookie, a short-lived cookie that holds a connection while you pick accounts (15 minutes), and a cookie that remembers a client link you unlocked with its password. No advertising or analytics cookies.
Google user data
When you choose Connect with Google, you sign in on Google’s own page and grant access. Ruler Reports only reads, and only what is needed to show the data in reports:
| Google product | What we read and why |
|---|---|
| Google Ads | Campaign, ad group and ad performance (impressions, clicks, cost, conversions) and the list of accounts you can access, to show them in reports. Nothing is created, changed or paused. |
| Google Analytics | The properties you can access and their report data (sessions, users, key events, revenue, channels, pages, products). |
| Google Search Console | The sites you can access and their search performance (clicks, impressions, click-through rate, position by query, page, country and device). |
| YouTube | The channels you manage and their public details (title, subscriber count, videos). |
| YouTube Analytics | Channel and video analytics (views, watch time, subscribers gained, audience age and gender). |
| Google Business Profile | The locations you manage and their performance (searches, map views, calls, direction requests) and reviews. Nothing is posted, replied to or edited. |
Google’s consent screen describes the Google Ads and Business Profile permissions as seeing, editing, creating and deleting, because those products offer no read-only permission. Ruler Reports never uses them to change anything.
We also receive your email address from Google, to show which Google account a connection belongs to.
Ruler Reports' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We use Google user data only to provide and improve the reports and dashboards you see in Ruler Reports.
- We do not sell it, use it for advertising, or use it to build user profiles for any other purpose.
- We do not use it to develop, improve or train generalised artificial intelligence or machine-learning models.
- We do not transfer it to others except as described under “Who sees the data”, to comply with the law, or with your consent.
YouTube
Ruler Reports uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google’s handling of the data is described in the Google Privacy Policy.
Meta data
When you choose Connect with Meta, you sign in with Facebook and grant access to read insights: ad account performance (Marketing API), Facebook Page insights and posts, and Instagram business account insights and media, including those you manage through a Business Portfolio. Ruler Reports does not post, comment, message or change any campaign.
Who sees the data
- The people with access to the workspace the account was connected to.
- The people the workspace chooses to share a report or dashboard with, by link or by email.
- Service providers that run Ruler Reports for us under contract: hosting and database providers, the email provider that sends scheduled reports and, only where AI analysis is switched on, Anthropic, which receives the report’s figures and labels to write commentary and, where the workspace lets a client ask questions on a shared link, the question, so it can answer it from those figures. Those questions and answers are stored with the report. They receive no account passwords or Google or Meta tokens.
Storage and security
The tokens a connection grants are encrypted (AES-256-GCM) before they are stored and are used only by the server to fetch report data. Data travels over HTTPS. Access inside a workspace is limited by role, and each workspace sees only its own data.
How long we keep it and how to remove it
- Removing a connected account in Ruler Reports deletes its stored token straight away.
- Reports keep their figures until the report is deleted. Workspace accounts are kept until they are removed.
- You can withdraw access at any time: for Google at myaccount.google.com/permissions, for Meta in Facebook settings under Business integrations.
- To have your data deleted, email ptheodorogiannis@ruler.agency. We do it within 30 days.
Your rights
You can ask to access, correct, delete or export your personal data, or object to or restrict how it is used, by emailing ptheodorogiannis@ruler.agency. You can also complain to the Hellenic Data Protection Authority.
Changes
We will update this page when what we collect or how we use it changes, and change the date at the top.