Legal
Privacy Policy
Last updated: September 2, 2026
This Privacy Policy explains how ConversionHealth collects, uses, stores, and shares information when you visit our website, create an account, connect a supported Google account, or use a ConversionHealth scan.
Information we collect
- Account and contact information: your email address, authentication records, and, if you choose Google sign-in, basic profile information such as your name and profile image. We also collect information you submit through forms, support, or feedback.
- Google Analytics data: account and property identifiers, data-stream configuration, key-event configuration, Google Ads link metadata, and aggregated event metrics needed to run a diagnostic scan.
- Google Ads data: customer-account metadata, conversion-action configuration, and aggregated performance information needed to run a diagnostic scan.
- Diagnostic information: scan status, scores, findings, recommendations, reports, and related workspace records.
- Technical information: security logs, device and browser information, IP address, and optional website-analytics information when you allow analytics cookies.
Google API access and use
Google sign-in is used only to authenticate your ConversionHealth account. It does not connect Google Analytics or Google Ads. Those data connections are separate actions that require their own authorization.
ConversionHealth requests the Google Analytics read-only scope analytics.readonly to inspect Analytics configuration and aggregated reporting data. For a Google Ads connection, Google provides the adwords scope; ConversionHealth uses it only for read-only queries and does not create, edit, or delete campaigns, ads, conversions, budgets, or other account settings.
We use Google user data only to connect the account you authorize, retrieve the information required for the scan, display diagnostic results, maintain the connection, and provide support you request. We do not sell Google user data, use it for advertising, or use it to train artificial-intelligence models.
Optional AI reasoning: Conversion Medic can provide an AI explanation only when you turn on Use AI reasoning. For that answer, ConversionHealth sends OpenAI the current client's limited scan evidence, your question, and up to six recent chat messages. We do not send Google OAuth tokens, account passwords, or Google sign-in credentials. OpenAI processes this information as our service provider only to return the explanation you requested. OpenAI does not use API data to train its models by default. We tell the API not to store the response as application state, but OpenAI may retain API content in abuse-monitoring logs for up to 30 days unless enhanced retention controls apply.
Conversion Medic has no tools to change Google Ads or Google Analytics and cannot act on a connected account. You can turn AI reasoning off at any time and continue using ConversionHealth's built-in guidance. See OpenAI's API data controls for more information.
ConversionHealth's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How we use information
- Authenticate users and protect accounts and connections.
- Run requested scans and produce findings, reports, and recommended next steps.
- When you turn it on, provide an optional AI explanation of the scan evidence and your question.
- Operate, troubleshoot, secure, and improve ConversionHealth.
- Respond to support, deletion, and privacy requests.
- Comply with legal obligations and enforce our terms.
How we share information
We share information only as needed with service providers that help us operate ConversionHealth, such as hosting, database, authentication, email, payment, and optional website-analytics providers. They may use the information only to provide services to us. Support or feedback records may also be handled by Corriston Consulting when it provides operational or implementation support.
When you enable AI reasoning, OpenAI receives the limited information described above and processes it as a service provider to produce the requested explanation. We do not allow OpenAI to use connected Google data for advertising or model training.
We may also share information when you direct us to, when required by law, to protect rights or safety, or as part of a business transaction subject to appropriate safeguards. We do not sell personal information.
Storage, security, and retention
Connection tokens are encrypted. We use access controls, encrypted network connections, workspace isolation, and other reasonable safeguards designed to protect information. No security method is guaranteed to prevent every incident.
We retain information while your account or connection is active and as needed to provide the service. You may request deletion at any time. We may keep limited records where reasonably necessary for legal, security, fraud-prevention, billing, dispute-resolution, or compliance purposes.
If you enable AI reasoning, OpenAI may retain API content in abuse-monitoring logs for up to 30 days as described above. ConversionHealth does not use that content to train AI models.
Your choices and rights
- Disconnect Google access from within the service or through your Google Account connections page.
- Request access, correction, or deletion of your information, subject to applicable law.
- Choose whether to allow optional analytics cookies and change that choice at any time.
- Turn optional AI reasoning on or off at any time; it is off by default.
- Unsubscribe from non-essential email where an unsubscribe option is provided.
See our Data Deletion Instructions and Cookie Policy for details.
Children and policy changes
ConversionHealth is a business service and is not directed to children under 13. We may update this policy as the service or legal requirements change. The updated date above shows when the latest version took effect.
Contact
For privacy questions or requests, email hello@conversionhealth.io.