Google API Services Disclosure
Our Limited Use compliance statement and the Google permissions the Service requests.
Last updated: August 5, 2026
Offloda Labs Inc. (“Offloda”, “we”, “us”, or “our”) integrates with Google API Services so marketing agencies can view and manage the Google accounts their clients have authorized them to work with. This page states our compliance commitments and lists every Google permission the Service requests, together with the user-facing feature it powers.
1. Limited Use compliance statement
Offloda’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
2. AI and machine learning
Some Offloda features use artificial intelligence (provided by Anthropic Claude) to generate user-facing output — for example, a written insight summarizing your analytics, or a drafted reply to a customer review. Where such a feature processes data received from Google APIs, that data is used solely to produce the output you requested, inside the Service, at your instruction. We affirm that:
- We do not use raw, aggregated, anonymized, or derived Google user data to create, train, or improve any machine-learning or artificial-intelligence models — foundational, generalized, or otherwise.
- We do not transfer or sell Google user data to third parties for model training or any other purpose. Our AI provider processes API-submitted content under commercial terms that prohibit using it to train models.
- AI-generated output is always presented to the user for review; write actions derived from it (for example, publishing a review reply) require explicit user confirmation.
3. Permissions we request and why
Offloda is an integration platform: each Google product is a separate connector, and permissions are requested under least privilege — a permission is only requested when it is required for the feature the user is connecting. The Service requests the following OAuth scopes:
- Google Ads (adwords) — campaign performance reporting and the campaign management features agencies use on client accounts (all changes are previewed and explicitly confirmed before they are applied).
- Google Analytics, read (analytics.readonly) — GA4 dashboards, reports, and analyses.
- Google Analytics, edit (analytics.edit) — managing GA4 key events and reporting annotations when the user requests it (previewed and explicitly confirmed).
- Search Console (webmasters) — search performance reporting, URL inspection, and sitemap submission/removal.
- Business Profile (business.manage) — requested only when connecting Google Business Profile: location performance, reviews and replies, posts, and listing management.
- Merchant Center (content) — requested only when connecting Google Merchant Center: read-only product feed health and issue diagnostics.
- Basic profile (userinfo.email, userinfo.profile) — identifying which Google account was connected so it can be shown in the connections list.
Notably, reading Google Sheets requires no permission at all: the spreadsheet feature works with link-shared sheets (“Anyone with the link — Viewer”) through Google’s public export endpoints, so the Service never requests spreadsheet access — and it requests no Google Drive access of any kind: finished reports are delivered inside the Service itself.
4. How Google user data is handled
- Data retrieved from Google APIs is used only to provide the dashboards, reports, and management features the user requests. We never sell it, and we never use or transfer it for serving advertisements.
- OAuth tokens are stored encrypted at rest, isolated per tenant by database row-level security, and are revoked when a connection is removed. You can disconnect any Google account at any time from the Connections screen, and you can revoke Offloda’s access from your Google Account permissions page.
- Humans do not read Google user data except with your explicit permission, where necessary for security or abuse investigations, or to comply with applicable law.
- Deletion follows our Data Deletion Instructions; disconnecting a platform deletes its stored tokens.
5. Contact
Questions about this disclosure or our Privacy Policy:
Offloda Labs Inc.
834 Kananaskis Dr., Kingston, Ontario, K7P 0B1, Canada