Privacy policy

Who operates this app

Tiletoria Dashboard is a private business intelligence workspace managed by Ja Nice Media for Tiletoria. This policy describes data handled by the dashboard at tiletoriadashboard.janicemedia.co.za, including its Google integrations. For privacy questions or requests, contact josh@ja-nice.co.za.

Information we collect

• Workspace access: your sign-in email, account identifier, assigned role, authentication records and essential session cookies. Password authentication is handled by the workspace’s authentication service.
• Google Search Console: the property you select, search queries, page URLs, reporting dates, clicks, impressions, click-through rates and average positions.
• Google Business Profile: the location identifier you select and daily performance metrics, including Search and Maps impressions, call clicks, website clicks and direction requests. The current connector does not download individual customer messages or review text.
• Google Ads: the customer identifier you select, an optional manager identifier, campaign names, dates, currency, spend, impressions, clicks, conversions and conversion value. The current connector does not download customer contact lists or payment-card details.
• Connection and operational records: OAuth access and refresh credentials, granted scopes, synchronization dates, processing status and diagnostic records. OAuth credentials allow approved background synchronization; the app does not receive your Google password.
• Other configured sources: social-channel metrics, website performance, public competitor research and generated reports, when those features are used.

Why we use this information

We use connected data to display performance charts and trends, compare reporting periods, produce reports and enabled analyst summaries, and identify issues with data synchronization. Account and operational information supports sign-in, permissions, troubleshooting and security. Access to one connector does not authorize another: an administrator must separately connect the relevant Google account or property.

Google permissions and your control

Search Console requests the read-only webmasters.readonly scope. Business Profile requests business.manage and Ads requests adwords; Google describes these permissions broadly, but the dashboard’s current integrations only retrieve performance reports and do not change campaigns, budgets or business listings. You can decline access or revoke it at any time through your Google Account connections. Revocation prevents future authorized retrieval once credentials cease to be valid; it does not automatically erase previously stored reports.

Sharing and AI-assisted reporting

Data is available to authorized Tiletoria and Ja Nice Media workspace users according to their roles. Hosting, database, authentication and email services process information needed to operate the app. Google receives requests for the accounts you authorize.

When an administrator enables AI analyst features, the app sends selected reporting data to the configured provider: Anthropic, or OpenRouter and the model provider selected through it. This can include search queries and page URLs, campaign names and metrics, Business Profile metrics and other dashboard context. The purpose is to generate your workspace’s briefings, commentary and reports. OAuth credentials and account passwords are not part of the reporting snapshots. Administrators can disable AI features in the workspace’s AI settings. Provider processing may take place outside South Africa.

We do not sell Google user data, use it for advertising targeting, or use it to develop or train our own general-purpose AI models. Google-derived data is used for the reporting features described here. Tiletoria Dashboard’s use and transfer of information received from Google APIs is subject to the Google API Services User Data Policy, including its Limited Use requirements.

Storage and security

Workspace records and reports are stored in the dashboard’s hosted database and file storage. Google refresh credentials are stored in the server-side secret vault and are not returned as dashboard fields. HTTPS protects browser and API connections; sign-in, role checks and database access controls restrict access. Authorized operators may access information when necessary for support, security or maintenance. No storage or transmission method eliminates all risk.

Retention and deletion

Imported metrics and generated reports are retained for workspace reporting history until deleted through an administrative process; they do not automatically expire when you disconnect Google. Connection credentials are retained to support synchronization until removed or replaced. To request removal of stored Google credentials, imported data, derived reports or your workspace account, email josh@ja-nice.co.za and identify the workspace and relevant account or property. Do not include passwords or access tokens.

We verify the requester’s authority before acting on a deletion, access or correction request. We will explain the scope and any applicable legal retention requirement. Backup copies may persist until the applicable backup rotation removes them; copies exported by workspace users must also be addressed with those users. You can revoke Google access immediately while a deletion request is being handled.

Cookies and policy updates

The app uses cookies for authentication and OAuth request security, and stores display preferences such as theme. This policy may change as the app’s features or data handling change; the updated date appears above. Contact Ja Nice Media at josh@ja-nice.co.za with questions before connecting an account.