Legal Information
Privacy Policy and Terms of Service
Effective date: July 30, 2026 · Last updated: July 30, 2026
Privacy Policy
Provines Consulting (“Provines Consulting,” “we,” “us,” or “our”) is a California sole proprietorship operating under a registered fictitious business name (DBA), run by Connor Provines. We provide marketing services, including an automated marketing-reporting service known as “Golden Kit.” This Privacy Policy explains what information we collect, how we use it, how we store and protect it, who we share it with, and the rights and choices available to you. It applies to our website, provinesconsulting.com, and to the Golden Kit reporting service.
If you have any questions, contact us at connor@provinesconsulting.com.
1. Who we are and what Golden Kit does
Golden Kit is an automated marketing-reporting service operated by Provines Consulting. Each of our clients grants us permission (“OAuth authorization”) to read the marketing performance data in their own connected accounts. We use that data solely to build automated reporting dashboards for that client. We access data on a read-only basis. We do not create, modify, publish, or delete content, campaigns, or settings in a client’s connected accounts.
2. Information we collect
Information you provide directly. When you contact us, request a growth audit, or become a client, we collect information such as your name, email address, company name, billing details, and any information you choose to share about your business.
Marketing platform data accessed with your authorization. When a client connects an account to Golden Kit, we access marketing performance data from that client’s own accounts through the platform’s official APIs. This may include:
- Google — Google Ads (campaign, ad group, keyword, spend, and conversion metrics), Google Analytics / GA4 (traffic, engagement, and conversion metrics), Google Search Console (search impressions, clicks, queries, and position data), and Google Business Profile (listing insights and performance metrics).
- Meta — Facebook and Instagram Page and account insights, and advertising performance data from Meta Ads (reach, impressions, spend, results, and related metrics) for the client’s own ad accounts, Pages, and Instagram accounts.
We access this data through each platform’s official API and only for accounts the client has explicitly connected and authorized. We request read-only scopes.
Automatically collected information. When you visit our website, we (and our hosting/analytics providers) may collect standard technical information such as IP address, browser type, device information, and pages viewed.
3. How we use information
We use the information described above solely to provide the Golden Kit reporting service to the client who authorized the connection; to build, generate, and maintain automated reporting dashboards for that client; to respond to inquiries, provide requested services, and communicate about projects; and to operate, secure, and improve the reporting service.
We do not sell or rent your information or platform data to anyone; use platform data for advertising, ad targeting, or to build advertising or marketing profiles; use platform data to make credit, lending, insurance, or eligibility decisions; transfer platform data to data brokers or information-resale services; or use platform data for any purpose other than providing the reporting service to the client who authorized it.
4. Google API Limited Use disclosure
Golden Kit’s access, use, storage, and sharing of data obtained through Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We limit our use of data received from Google APIs to providing and improving the user-facing reporting features that the connecting client requested;
- We do not transfer Google user data except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger or acquisition (with continued adherence to this policy);
- We do not use or transfer Google user data for serving advertisements, and we do not sell Google user data; and
- We do not allow humans to read Google user data unless (i) we have the client’s affirmative consent for specific messages, (ii) it is necessary for security purposes or to comply with applicable law, or (iii) our use is limited to internal operations and the data has been aggregated and anonymized.
5. Meta Platform Data disclosure
Our access to and use of data from Meta’s platforms (Facebook, Instagram, and Meta Ads) complies with the Meta Platform Terms and Developer Policies. We process Meta Platform Data only to provide the reporting service to the client who authorized the connection, we do not sell it, and we do not use it for any purpose other than the client’s own reporting. Clients may revoke Golden Kit’s access at any time (see Section 9).
6. How we share information — third parties and subprocessors
We do not sell your information. We share information only with service providers (“subprocessors”) that help us operate the reporting service, and only to the extent necessary. Current categories of subprocessors include:
- Hosting / infrastructure — Vercel (website and application hosting).
- Cloud storage / database — the encrypted data store used to hold generated report data and connection tokens.
- Platform APIs — Google and Meta, from which authorized data is retrieved.
We may also disclose information if required by law, to protect our legal rights, or in connection with a business transfer, in each case consistent with this policy and with the Google and Meta requirements above.
7. Data storage and security
Data is stored encrypted, both in transit (TLS) and at rest. Access to client data and to OAuth tokens is restricted to authorized personnel and to the automated systems that generate reports. We implement administrative, technical, and organizational safeguards appropriate to the sensitivity of the data.
8. Data retention
We retain client marketing data only for as long as necessary to provide the reporting service to that client, or as required by law. When a client ends their engagement, revokes access, or requests deletion, we delete the associated platform data and OAuth tokens without undue delay, except where retention is required for a legitimate legal or accounting purpose.
9. Your rights, revoking access, and data deletion
You are always in control of your connected accounts and your data.
Revoking access. You can revoke Golden Kit’s access to any connected account at any time directly in that platform’s settings:
- Google: visit Google Account permissions and remove Provines Consulting / Golden Kit.
- Meta: in Facebook, go to Settings & Privacy → Settings → Business Integrations (or Apps and Websites) and remove Provines Consulting / Golden Kit.
Revoking access immediately stops any further data collection from that account.
Requesting deletion. To request deletion of data we hold, email connor@provinesconsulting.com with the subject line “Data Deletion Request.” We will delete the associated platform data and stored tokens without undue delay and confirm when complete. You may also request access to, or correction of, the personal information we hold about you at the same address.
10. California privacy rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the right to:
- Know what personal information we collect, use, and disclose;
- Request access to and a copy of that information;
- Request correction of inaccurate personal information;
- Request deletion of your personal information; and
- Not be discriminated against for exercising these rights.
We do not sell or “share” (as defined under the CPRA) personal information, and we do not process it for cross-context behavioral advertising. To exercise any of these rights, contact connor@provinesconsulting.com.
11. Children’s privacy
Golden Kit is a business-to-business service and is not directed to children. We do not knowingly collect personal information from anyone under 16.
12. Changes to this policy
If we change how we use data obtained through Google or Meta APIs, we will update this policy and, where required, notify affected clients and obtain renewed consent before using data in a new way. The “Last updated” date at the top reflects the latest revision.
Terms of Service
These Terms of Service (“Terms”) govern your access to and use of the marketing reporting service known as “Golden Kit” and the website provinesconsulting.com (together, the “Service”), operated by Provines Consulting, a California sole proprietorship operating under a registered fictitious business name (DBA). By using the Service or authorizing Golden Kit to connect to your accounts, you agree to these Terms.
If you have questions, contact us at connor@provinesconsulting.com.
1. The Service
Golden Kit is an automated marketing-reporting service. With your authorization, we connect to marketing platforms you use — including Google (Google Ads, Google Analytics / GA4, Google Search Console, and Google Business Profile) and Meta (Facebook, Instagram, and Meta Ads) — and read your marketing performance data to build automated reporting dashboards for you. Our access is read-only. We do not create, change, publish, or delete campaigns, content, or settings in your connected accounts.
2. Authorization and your accounts
To use Golden Kit you must connect one or more marketing platform accounts and grant the requested read-only permissions through the platform’s official OAuth flow. You represent that you own or are authorized to connect each account and to grant us access to its data. You are responsible for maintaining the security of your own platform accounts and credentials. You may revoke Golden Kit’s access at any time through the relevant platform’s settings, as described in our Privacy Policy above. Revoking access will stop further data collection and may end your ability to receive reports.
3. Acceptable use
You agree not to use the Service to violate any law or any third-party platform’s terms (including Google’s and Meta’s), to infringe others’ rights, or to attempt to gain unauthorized access to the Service or its data. We may suspend or terminate access for conduct that we reasonably believe violates these Terms or applicable platform policies.
4. Fees and payment
Fees, billing frequency, and scope are set out in the individual agreement, statement of work, or subscription plan applicable to you. Typical arrangements are project-based or monthly retainer. Fees are due as stated in that agreement.
5. Data and privacy
Our collection, use, storage, sharing, retention, and deletion of data — including data obtained through the Google and Meta APIs — are described in our Privacy Policy above, which is incorporated into these Terms by reference. In particular, our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and our handling of Meta Platform Data complies with the Meta Platform Terms and Developer Policies.
6. Intellectual property
The Service, including its software, dashboards, and design, is owned by Provines Consulting. The underlying marketing data belongs to you (the client). We grant you a non-exclusive right to use the reports and dashboards we generate for you for your own business purposes. We may use anonymized, aggregated results as case studies unless your agreement provides otherwise.
7. Confidentiality
We treat your business information, strategies, and connected-account data as strictly confidential and use it only to provide the Service. A non-disclosure agreement is available on request.
8. Service availability and third-party platforms
The Service depends on third-party platforms (including Google and Meta) and their APIs. We are not responsible for changes, outages, rate limits, or discontinuations of those platforms, or for data those platforms make available or withhold. We may modify or discontinue features of the Service with reasonable notice.
9. Disclaimers
The Service is provided “as is” and “as available.” To the fullest extent permitted by law, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. Reports are provided for informational purposes; you are responsible for your own business decisions.
10. Limitation of liability
To the fullest extent permitted by law, Provines Consulting will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for lost profits or data, arising out of or related to the Service. Our total liability for any claim arising out of these Terms will not exceed the amounts you paid to us for the Service in the three (3) months preceding the event giving rise to the claim.
11. Termination
Either party may terminate the engagement as provided in the applicable agreement, or you may stop using the Service and revoke access at any time. On termination, we will delete your connected-account data and OAuth tokens as described in our Privacy Policy, except where retention is required by law.
12. Governing law
These Terms are governed by the laws of the State of California, without regard to its conflict-of-laws rules. The exclusive venue for any dispute will be the state or federal courts located in California.
13. Changes to these Terms
We may update these Terms from time to time. Material changes will be reflected in the “Last updated” date, and where required we will notify affected clients. Continued use of the Service after changes take effect constitutes acceptance of the updated Terms.
Contact
For questions about these terms or our privacy practices, please contact:
Provines Consulting
Connor Provines
Email: connor@provinesconsulting.com
California, USA
Effective date: July 30, 2026 · Last updated: July 30, 2026