This policy explains how Global Fact Hub ("we", "us") collects, uses, stores, shares and deletes your information when you use our website, client portal and services. We collect only what is necessary to deliver the services you request, and we do not use data entrusted to us for unrelated purposes.

1. Information we collect

1.1 Information you provide

• Account information: email address and password (stored as an irreversible hash; we cannot read your original password).
• Order and delivery information: services purchased, amount, currency, brand name, website URL, target country, industry, product and monitoring keywords you submit.
• Business facts: brand facts you provide (company details, product specifications, certifications, case studies, target markets) and their source links. These are used only to generate content that you confirm.
• Communications: messages you send us by email, forms or WhatsApp.

1.2 Information generated while using the services

• Access logs: IP address, user agent, timestamp and path, used for security, rate limiting and troubleshooting.
• Monitoring data: we send queries to third-party AI search services on your instruction and record the answers and cited sources to produce visibility reports.
• Website lead-tracking data (only if you deploy our snippet): a snippet we provide for your website records page visits, button clicks and form submissions, together with the referring page, UTM parameters, landing page and timestamp, so you can judge where enquiries come from. This data belongs to you and is visible only in your portal.

1.3 Payment information

Payments are processed by third parties (PayPal or payment QR codes). We never receive or store your card number, CVV or full payment credentials — only the transaction reference, amount, currency and payment status.

2. Data received from Google (Google Business Profile)

2.2 Google data we access

Only the business information in the Google Business Profile(s) that you own and are authorized to manage: business name, address, phone number, website, categories, business description, and the permission required to update those fields on your behalf.

2.3 How we use it

• To list the business locations under the account you authorize, so you can confirm which business is connected;
• To update that business's title, description and labels using the positioning and selling points you have confirmed, and only after you click "Apply".

We never create or verify business listings, never change content you have not confirmed, never fabricate addresses, ratings or reviews, and never read your personal Google account profile.

2.4 Storage and sharing

• Storage: OAuth access and refresh tokens are stored on our server, readable only by the service process and not exposed to the public internet (the relevant path is blocked from external access). We never store your Google password.
• No sharing: we do not share, sell or transfer data obtained from Google APIs to any third party.
• Not for advertising or model training: not used for advertising or retargeting, not sold to data brokers, not used to train or improve generalized AI/ML models, and not used for credit-worthiness or lending purposes.
• Business Profile data is read on demand to fulfil the purposes above; we do not maintain a separate long-term copy.

2.5 Google API Services User Data Policy — Limited Use disclosure

Global Fact Hub's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2.6 Retention and deletion

• You can revoke access at any time at myaccount.google.com/permissions — find this app and remove access. We then lose access to your Google data immediately.
• When we detect that an authorization is no longer valid (expired or revoked), we automatically delete the stored token.
• You may also email business@globalfacthub.com to request deletion of the stored token; we will delete it and confirm within 7 business days.

3. How we use information

• To provide, maintain and deliver the services you purchase;
• To generate monitoring reports, content plans and deliverables;
• For account security (login verification, anomaly detection, brute-force protection);
• To communicate with you about orders, deliveries and service changes;
• To comply with legal obligations and resolve disputes.

We do not sell your data to third parties and do not use it for unrelated marketing.

4. Third-party services

• Cloud hosting and database (server hosting and data storage);
• Payment providers (e.g. PayPal) to process payments;
• Email delivery (order confirmations and report notifications);
• AI search and language model services (to run visibility queries and draft content). We do not transmit your Google authorization data to these services.

Monitoring queries contain only public brand names and query questions — no personal information.

5. Data security

• HTTPS encryption in transit across the site;
• Passwords stored as irreversible hashes;
• Per-account data isolation: each account can only access its own projects, reports and lead data;
• Login attempts are rate-limited and logged for audit;
• Sensitive paths (token files, client reports) are blocked from public access; deliverables are served only through authenticated endpoints.

6. Data retention

• Account and order data: for the service period and as long as required to meet legal obligations;
• Reports and deliverables: until you request deletion;
• Google authorization tokens: while the authorization is valid; deleted immediately once it expires, is revoked, or you request deletion;
• Access logs: no longer than 12 months.

7. Your rights

You may request access to, correction of, export of, or deletion of your personal information, revoke Google authorization, or close your account at any time by emailing business@globalfacthub.com. We respond within 7 business days.

8. Children

Our services are intended for businesses and commercial users. They are not directed to children under 16 and we do not knowingly collect their personal information.

9. Changes

If this policy changes we will update the "Last updated" date above; for material changes we will notify you by email or an in-portal notice.

10. Contact

Global Fact Hub · Email: business@globalfacthub.com · Website: globalfacthub.com