Last updated: 12 August 2026. This policy covers MGWW Connect
(connect.mgww.digital), the advertising-data reporting connector operated by MediaGroup
Worldwide ("MGWW"). It describes what data the application accesses, how that data is
protected, and the rights of account owners.
What data we access
Advertising and analytics performance data (read-only): campaign names and settings, impressions, clicks, cost, conversions and comparable daily statistics from platforms such as Google Ads, Google Analytics 4, Google Search Console, Display & Video 360, Meta, Microsoft Advertising and Pinterest - only for accounts whose authorized manager has explicitly granted consent through an MGWW Connect link.
OAuth tokens issued by the platform after consent. We never see or store passwords.
We do not access message content, contacts, files or any data beyond the reporting scopes
listed on the consent screen, and we apply a least-privilege model: each connection requests
only the read-only scopes needed for reporting.
How we use the data
Exclusively to build performance reporting dashboards for the account owner and the agency team that serves them.
We do not sell data, do not share it with third parties, do not use it for advertising or profiling of our own, and do not use it to develop, improve or train generalized AI and/or ML models.
MGWW Connect's use of data received from Google APIs complies with the Limited Use policy.
Specifically, MGWW Connect does not:
use Google user data for serving targeted, personalized, retargeted or interest-based advertising;
sell, rent or transfer Google user data to data brokers, information resellers or any other party for resale;
use Google user data to determine credit-worthiness or for lending purposes;
use, transfer or disclose Google user data to develop, improve or train generalized or non-personalized AI and/or ML models. MGWW Connect does not use Google Workspace APIs and does not use any Google user data for AI/ML model development.
Google user data is used solely to provide and improve the reporting features described
above, and human access to it is limited to what is strictly necessary to operate and support
those features (for example, to resolve a support request or as required by law).
How we protect the data (data protection mechanisms)
Encryption in transit: all data transfers - between your browser and MGWW Connect, and between MGWW's servers and platform APIs - use TLS 1.2+ (HTTPS).
Encryption and access control at rest: OAuth tokens are stored on MGWW's own servers in the European Union with strict file-system permissions (owner-only, 0600), outside any public web root. Reporting data is stored in an access-controlled PostgreSQL warehouse on MGWW-managed infrastructure in the EU; it is not hosted with third-party SaaS processors.
Encrypted backups: database backups are encrypted (public-key encryption) before being written, and retained on a fixed schedule.
Least-privilege access: only authorized MGWW engineering personnel have access to the systems holding tokens and data, via key-based authentication; no shared accounts.
Scope minimisation: we request read-only scopes only, and only the scopes required for the reporting feature in use.
Monitoring and incident response: systems are monitored and errors are centrally logged. In the event of a security incident affecting personal data, we notify affected account owners and, where required, supervisory authorities without undue delay and in line with GDPR breach-notification requirements.
Retention and deletion
Data is retained only for as long as the reporting relationship with the account owner exists.
Access can be revoked at any time from the connected account's own security settings (e.g. Google Account > Security > Third-party access); revocation immediately invalidates our tokens.
On request (e-mail below), MGWW deletes stored tokens and imported data for a connection, normally within 30 days.
Your rights and contact
MediaGroup Worldwide acts as a processor of this data on behalf of the account owner.
Account owners may request access, correction, export or deletion of their connection data at
any time via bart@mediagroupww.com. General
company privacy information: mediagroupww.com/privacy-policy.