Privacy Policy
Last updated: September 17, 2026
FosterFlow (“we,” “our,” “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information.
1. Information We Collect
Personal Information: Such as name, email address, and payment details when you create an account or use paid services.
Usage Data: Information about how you interact with our platform.
Google API Data: When you connect FosterFlow to Google services, FosterFlow may access and process Google data that you authorize for FosterFlow features. This may include Google account connection metadata, Google OAuth access tokens and refresh tokens, Google Ads customer/account IDs, Google Ads campaign settings and performance data, records of requested campaign changes and their results, Google Analytics 4 property IDs, Google Analytics reporting data, and Google Data Manager or Customer Match audience data.
2. How We Use Your Information
To provide and improve our services.
To process payments and communicate with you.
To comply with legal obligations.
For Google API Data specifically, we use it only to:
Provide, maintain, secure, troubleshoot, and improve the FosterFlow features requested by the customer, including marketing automation, analytics, campaign reporting, authorized management of existing campaigns, audience synchronization, and customer support.
For Google Analytics 4, use read-only access to retrieve reporting metrics needed for marketing analytics, attribution, campaign diagnostics, ecommerce analysis, and reporting (including sessions, users, events, conversions, purchase revenue, product performance, landing pages, traffic source/medium, channel, geography, site search, and organic search metrics). We store normalized or derived reporting records so customers can view dashboards, reports, and marketing recommendations.
For Google Ads and Google Data Manager, when configured by you, read advertising account and performance data, and create or update Google Ads Customer Match audiences (which may include customer identifiers such as email address, phone number, postal address fields, mobile advertiser IDs, consent flags, segment IDs, and audience metadata). Where required by Google, we normalize and SHA-256 hash customer identifiers before sending them to Google.
Google Ads reporting and campaign management: For connected advertiser accounts, FosterFlow staff and authorized customer users can view reports and manage existing campaigns within the features enabled for the customer. We use account and campaign information to prepare reports, support review of proposed changes, and submit changes authorized by the customer to Google Ads. This processing may include the requested change, the relevant approval or instruction, and the result returned by Google. Access to a Google account does not authorize unrelated data use or changes outside the agreed service scope.
3. Data Sharing
We do not sell your personal information.
We may share your data with third-party service providers as necessary to facilitate our services. Google Ads reports are provided to the customer and the users the customer authorizes. When the customer authorizes a campaign change or configures an audience synchronization, the information needed to perform that action is sent to Google. We do not disclose one customer’s non-public Google Ads account data to another customer without the data owner’s authorization.
Important Google API Limitations: FosterFlow does not sell Google user data. FosterFlow does not use Google user data for unrelated advertising, data broker services, credit-worthiness, lending, or to develop, improve, or train generalized AI or machine learning models. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. Data Security
We implement security measures to protect your information from unauthorized access, alteration, or disclosure.
For Google API Data specifically, we protect it using:
HTTPS/TLS for data in transit.
Encryption at rest for stored Google API data and OAuth tokens.
Restricted role-based access and least-privilege internal permissions.
Access logging and monitoring.
Encryption key management through a cloud key-management service or equivalent-strength system.
Human access limited to authorized personnel and only where necessary to provide support requested by you, maintain security, troubleshoot the service, comply with law, or operate FosterFlow.
5. Your Rights
You may access, update, or delete your personal information by contacting us.
You may opt out of marketing communications at any time.
Manage Google access: If you connected FosterFlow through your Google account, you can review or remove the app’s access in your Google Account. If your advertiser account is connected through a manager account, an account administrator can review and remove the manager link in Google Ads. Contact support@fosterflow.ai to request help disconnecting, a copy of your data, or deletion. Revoking access stops access through that connection; it does not itself delete records already held by FosterFlow or pause campaigns in Google Ads. Existing records are handled under the retention policy below.
6. Data Retention
We retain your data for as long as necessary to fulfill the purposes outlined in this policy.
For Google API Data specifically: We retain it only for as long as needed to provide the requested services, comply with legal obligations, resolve disputes, and enforce agreements. Customers may disconnect Google integrations or request deletion by contacting support@fosterflow.ai. After disconnection or verified deletion request, we will delete or de-identify Google API data within 30 days unless retention is required by law.
7. Changes to Privacy Policy
We may update this Privacy Policy and will show the updated date on this page. Before accessing additional Google user data or using it for a new purpose beyond what was originally disclosed, we will provide an appropriate notice and obtain the required consent. Posting a policy update alone does not authorize a new use of Google user data.
8. Contact Information
If you have any questions or concerns, you may contact us via email at wusu@fosterflow.ai or support@fosterflow.ai.
Or contact us at below:
Foster Flow Limited
UNIT NO.06J7 ON 11 FLOOR WELLBORNE COMMERCIAL CENTRE NO.8 JAVA ROAD HONG KONG