Custom Candles LA Sales Funnel — App Privacy Policy

Effective date: October 29, 2026.

This policy describes the Custom Candles LA Sales Funnel app, operated for Custom Candles L.A. It covers the app’s Google sign-in and Google Ads connection. It supplements, rather than replaces, the privacy terms that apply to shopping at Custom Candles L.A.

Data the app accesses

When an authorized user connects a Google account, the app receives the Google account’s email address, verified-email status, and account identifier. It receives Google OAuth access and refresh tokens so it can maintain the connection without collecting a Google password.

For the connected Custom Candles L.A. Google Ads account, the app accesses account settings, campaign and budget information, ads and keywords, keyword research, advertising performance, and conversion-action configuration. It also processes campaign specifications, research sources, validation and tracking evidence, human approval records, and Google’s responses to approved campaign-creation requests.

The Google Ads permission covers both reading and managing advertising data. The current app limits its Google Ads operations to the designated Custom Candles L.A. account. It supports reporting and keyword research, plus creation of new Search campaigns paused after exact-build human approval and the required checks. It does not launch campaigns or edit existing campaigns through this service.

How data is used

The app uses Google account identity to restrict access to authorized users. It uses advertising data to return reports, research keyword demand, prepare and validate campaign proposals, and perform explicitly approved creation of paused campaigns. Stored approval and execution records help prevent unauthorized changes and duplicate campaign creation.

The app does not request access to Gmail messages, Google Drive files, calendars, or contacts through this Google Ads connection. Other connectors, if separately enabled by the user, have their own permissions and terms.

Where data goes and who can access it

Google processes sign-in, authorization, and Google Ads API requests. Cloudflare hosts the connection service and its authorization and campaign-build storage. Requested tool results are returned to the user’s connected ChatGPT or Codex client, where the user’s account, workspace settings, and applicable service terms govern processing and conversation retention. Authorized Custom Candles L.A. operators may access the service’s configuration and records as needed to operate, troubleshoot, and secure the connection.

Google OAuth credentials remain within the connection service and are not included in tool results or review pages. The service does not sell Google user data or disclose it for unrelated advertising. It does not use Google API data to train its own generalized AI models. These statements describe the connection service, not independent settings or practices of a user-selected AI host.

Storage and protection

The service uses HTTPS for data in transit. OAuth access and refresh credentials are stored in encrypted authorization-grant properties using the service’s OAuth provider and Cloudflare storage. Campaign proposals, approval records, execution status, and Google responses are stored in Cloudflare Durable Objects. Access controls restrict the connection to authorized users and the configured Ads account. Operational controls avoid logging OAuth credentials.

Retention and deletion

Authorization records are retained to maintain and manage the connection until they expire or are removed by an authorized operator. Campaign records are retained for approval integrity, duplicate prevention, troubleshooting, and audit. Campaign review links expire after 24 hours; expiration of a review link does not automatically delete the underlying campaign record.

Users may request deletion of the app’s stored Google identity, authorization data, and campaign records by contacting info@customcandlesla.com. An authorized operator handles these requests, subject to applicable legal, security, and recordkeeping needs. Removing service records does not delete Google Ads campaigns or copies already returned to the user’s AI host. Host conversation data and Google Ads records must be managed in those services.

Revoke access

Users can revoke the app’s Google access through their Google Account’s third-party connections settings at https://myaccount.google.com/connections and disconnect the plugin in their AI client. Revocation stops further authorized Google API access once Google applies it; it does not itself delete every stored service or chat record. Contact info@customcandlesla.com to request deletion of service-held records.

Google API data and policy changes

The app’s use and transfer of information received from Google APIs must comply with the Google API Services User Data Policy, including applicable Limited Use requirements. The app uses Google data only for the disclosed user-facing functions. Material changes to these practices will be reflected in this policy, and new consent will be sought when required before using data for a newly disclosed purpose.

Contact

For questions or deletion requests concerning Custom Candles LA Sales Funnel, contact info@customcandlesla.com.