Privacy Policy

Last updated: 13 September 2026

This Privacy Policy explains how Robust Digital Kft. ("we", "us", "our") handles information in connection with the LTV & ROAS Analytics Dashboard (the "Dashboard"), an internal business-analytics application we operate for our own subscription products, IQInternational and PersonalityLabs.

The Dashboard is a private, access-controlled internal tool. It is not a consumer service, it is not open to public sign-up, and it does not process data on behalf of third parties.

1. Who we are

Robust Digital Kft., registered at Levente utca 14/a, 2161 Csomad, Hungary, company number 13-09-199360, is the data controller for the information described in this policy.

Questions, or any request about your data, go to daniel1@robust.digital.

2. Google user data we access

We access the following data from Google, using the Google Ads API and Google OAuth, only for Google Ads accounts that we ourselves own or manage:

• Google Account identity of the authorising user — the email address, name, and account identifier of the person on our team who authorises the connection. This is used only to establish and maintain the authorisation.
• Google Ads advertising performance data — campaign, ad group and geographic-targeting identifiers and names; advertising cost and spend; impressions, clicks and conversion counts; currency and date.

This data concerns our own advertising activity. It does not include the personal data of anyone who saw or clicked our advertisements, and we do not request or receive Google user data belonging to any other Google account holder.

We request the narrowest scopes that let the Dashboard read advertising performance data. We do not request write access to your Google Ads accounts for any purpose other than the ones described here.

3. How we use Google user data

Google Ads cost data is joined to our own subscription and payment records to calculate internal marketing metrics — customer acquisition cost (CAC), return on ad spend (ROAS), and customer lifetime value (LTV) — broken down by country and by signup cohort. These figures are displayed to authorised members of our team in the Dashboard and used to decide how we allocate our own advertising budget.

That is the only purpose. Specifically, and in line with the Google API Services User Data Policy including its Limited Use requirements, we do not:

• sell Google user data, or transfer it to data brokers or information resellers;
• use Google user data for targeted advertising, retargeting, personalised advertising, or interest-based advertising;
• use Google user data to determine creditworthiness or for lending purposes;
• use Google user data to train, fine-tune, or otherwise develop generalised artificial-intelligence or machine-learning models;
• allow humans to read Google user data, except where you have given explicit consent for specific data, where it is necessary for security purposes or to comply with applicable law, or where the data has been aggregated and anonymised for internal operations.

4. Other information we process

Separately from Google, the Dashboard processes transaction records from our payment processor, Solidgate, for our own subscription customers. These include subscription and order identifiers, subscription status and dates, transaction amounts and currency, billing country, card country and the customer's email address.

This information is used to measure conversion, retention and revenue for our own products. It is not obtained from Google and is not combined with Google user data at the level of any individual person — Google Ads data is joined only in aggregate, by country and by date.

5. Who we share data with

We do not sell data, and we do not share Google user data with third parties for their own purposes.

Data is processed on our behalf by the infrastructure providers that host the Dashboard and its data store. These providers act as our processors under contract, may only act on our instructions, and have no right to use the data for their own purposes. We also disclose information where we are legally required to do so, or where it is necessary to establish, exercise or defend legal claims.

6. How we protect data

• All data in transit is encrypted using industry-standard TLS (HTTPS).
• API credentials and OAuth tokens are held in encrypted secret storage, never in source code, and are not exposed in the application interface.
• The Dashboard is protected by authentication and is accessible only to authorised members of our team; it is not publicly reachable.
• Access to the underlying data store is limited to the personnel who need it for the purposes described in this policy.
• We review access periodically and revoke it when it is no longer needed.

No system is perfectly secure, but we take these measures seriously and keep them under review.

7. How long we keep data, and how it is deleted

• Google Ads performance data is retained for as long as it is useful for historical marketing analysis, and for no longer than 24 months from the date it relates to, after which it is deleted or irreversibly aggregated.
• OAuth tokens are retained only while the connection is active. If authorisation is revoked, the token is deleted and the connection stops.
• Subscription and transaction records are retained for as long as needed for the analysis described above and to meet our legal, accounting and tax obligations, after which they are deleted or anonymised.

You can revoke our access to your Google data at any time from the Google Account permissions page. Revoking access stops any further data being accessed.

To request deletion of data we hold, email daniel1@robust.digital. We will delete it within 30 days unless we are legally required to keep it, and we will tell you if that is the case.

8. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, to receive it in a portable format, and to withdraw consent. If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority.

To exercise any of these rights, email daniel1@robust.digital. We do not charge for this and we will respond within the period required by applicable law.

9. International transfers

We and our providers may process data in countries other than the one you live in. Where data is transferred out of the European Economic Area or the United Kingdom, we rely on an adequacy decision or on Standard Contractual Clauses, together with additional safeguards where these are needed.

10. Changes to this policy

If we change this policy we will update the "Last updated" date above and publish the revised version at this address. Material changes affecting how we use Google user data will be reflected here before the change takes effect.

11. Contact

Robust Digital Kft. Levente utca 14/a, 2161 Csomad, Hungary daniel1@robust.digital