ByteZero Privacy Policy: How We Protect Your Data

Effective Date: May 19, 2026 Last Updated: May 19, 2026

ByteZero Inc. (“ByteZero,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information of our clients, website visitors, and the end users of the marketing platforms we manage on our clients’ behalf. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding that information.

By using our website (https://bytezeroinc.com) or engaging ByteZero for digital marketing services, you agree to the practices described in this Privacy Policy.

1. About ByteZero

ByteZero Inc. is a digital marketing agency headquartered in Ontario, Canada. We provide paid search, paid social, SEO, and analytics services to clients across home services, hospitality, e-commerce, and B2B verticals.

• Legal entity: ByteZero Inc.
• Mailing address: 13 Alice Springs Crescent, Brampton, Ontario, Canada L6X 0R7
• Contact: contact@bytezeroinc.com

2. Information We Collect

We collect information in three contexts: from website visitors, from clients who engage our services, and from the advertising platforms we manage on our clients’ behalf.

a. Website visitors

• Contact form submissions (name, email, company, message).
• Standard web analytics: IP address, browser type, device, pages visited, referrer, timestamps.
• Cookies and similar technologies for analytics and site functionality (see Section 8).

b. Clients

• Business contact information (name, title, email, phone, company).
• Billing information for service invoicing.
• Account credentials, access tokens, or delegated access to marketing platforms (Google Ads, Meta Ads, Google Analytics, Microsoft Ads, etc.) that you authorize us to manage on your behalf.

c. Data accessed via marketing platforms on behalf of clients

• Campaign performance data, keyword data, audience data, conversion data, and other reporting data made available by the platform under the access you have granted us.
• Where you upload your own first-party customer data to platforms (for example, Customer Match audiences), we handle that data strictly within the platform’s requirements (hashed PII per the platform spec).
  
  

3. How We Use Information

We use the information we collect to:

• Provide, manage, and optimize the digital marketing services our clients have engaged us to perform.
• Generate performance reports and recommendations for our clients.
• Respond to inquiries received through our website.
• Send service-related communications (invoices, updates, scheduled reviews).
• Maintain audit logs of operational activity for security, compliance, and quality control.
• Improve our website and internal operations.

We do not sell personal information. We do not use client data, advertising platform data, or any data accessed under delegated authority to train artificial intelligence or machine learning models.

4. Google Ads API & Google User Data

ByteZero uses the Google Ads API to manage Google Ads accounts on behalf of clients who have authorized us to do so under signed agreements. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we access: Through the Google Ads API, we access campaign, ad group, keyword, search-term, audience, asset, conversion, and billing data within client Google Ads accounts that have been linked to our Google Ads Manager Account (MCC) with the client’s explicit authorization.

How we use it: We use this data exclusively to perform the campaign management and reporting services our clients have engaged us for — including reporting, optimization recommendations, bid adjustments, keyword management, negative keyword management, conversion tracking, and audience management.

How we store it: Google Ads API data is processed in-memory during agency operations. Aggregated reporting data may be cached in our internal database (hosted in Google Cloud, US region) for up to 24 months to support historical client reporting. Refresh tokens and developer tokens are stored in Google Secret Manager and are never exposed to clients or third parties.

Who can access it: Only authorized ByteZero employees with a documented operational need can access Google Ads API data. Access is granted through Google Workspace SSO and is revoked at offboarding.

How we share it: We do not share Google Ads data with any third party. We do not sell it. We do not use it to train AI/ML models. We do not use it for any purpose other than performing the services the client engaged us for.

Deletion: Clients may request deletion of all data ByteZero holds relating to their Google Ads accounts at any time by emailing contact@bytezeroinc.com. We will purge cached data within 30 days of a verified request. Upon termination of services, we revoke our access to the client’s Google Ads account and delete all cached data within 30 days.

Internal tool: ByteZero operates an internal-use Google Ads management tool built on the Model Context Protocol (MCP). This tool is used solely by ByteZero employees, is never resold or offered as a service to third parties, and includes a human-in-the-loop approval gateway for all write operations.

5. How We Share Information

We share information only as needed to provide our services, comply with legal obligations, or with your consent:

• Service providers / sub-processors: Hosting (Google Cloud), email (Google Workspace), payment processing, error monitoring, and analytics tools we use to run our business. Each is bound by contractual confidentiality and data-protection obligations.
• Advertising platforms: When you authorize us to manage your accounts, we operate within those platforms (Google Ads, Meta Ads, Microsoft Ads, etc.) on your behalf. Data handled within those platforms is also subject to each platform’s own policies.
• Legal compliance: Where required by law, court order, or to protect our rights, property, or safety, or that of our clients or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to confidentiality.

We do not sell personal information to third parties.

6. Data Retention

• Website inquiry data: Retained for up to 24 months unless you request earlier deletion.
• Client business records: Retained for the duration of the engagement plus 7 years for accounting and legal-compliance purposes.
• Cached advertising platform data: Up to 24 months, or shorter if the client requests deletion.
• Audit logs: Retained for 24 months for security and compliance review.
• Account credentials / refresh tokens: Deleted within 30 days of engagement termination.

7. Your Rights

Depending on your jurisdiction (including Canada under PIPEDA, the European Economic Area under GDPR, and California under CCPA), you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your personal information.
• Object to or restrict certain processing.
• Withdraw consent at any time (where processing is based on consent).
• Data portability.
• Lodge a complaint with a data protection authority.

To exercise any of these rights, email contact@bytezeroinc.com. We will respond within 30 days.

8. Cookies & Tracking Technologies

Our website uses cookies and similar technologies for:

• Site functionality (session, preferences).
• Analytics (Google Analytics or equivalent) to understand site usage.
• Performance monitoring.

You can control cookies through your browser settings. Disabling cookies may affect site functionality.

9. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information, including:

• TLS encryption in transit.
• Encryption at rest for cached client data.
• Secrets management for credentials and tokens (Google Secret Manager).
• Role-based access control via SSO.
• Audit logging of operational activity.
• Periodic access reviews.

No security measure is perfect; however, we work continuously to maintain industry-standard protections.

10. International Data Transfers

ByteZero is based in Canada. Some of our service providers (e.g., Google Cloud) may process data in the United States or other jurisdictions. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

11. Children’s Privacy

Our services are directed to businesses, not children. We do not knowingly collect personal information from individuals under 16. If you believe we have collected such information, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this page indicates when changes were last made. Material changes will be communicated to active clients via email.

13. Contact Us

For privacy questions, requests, or complaints:

ByteZero Inc. 13 Alice Springs Crescent Brampton, Ontario, Canada L6X 0R7 Email: contact@bytezeroinc.com

ByteZero Inc. 13 Alice Springs Crescent Brampton, Ontario, Canada L6X 0R7 Email: contact@bytezeroinc.com Web: https://bytezeroinc.com