Blended Reports

Blended Reports Privacy Policy

Last updated: 16 October 2026

1. Who we are

Blended Reports (https://blendedreports.attahdigital.com.au) is an ecommerce and advertising performance reporting platform operated by Attah Digital Pty Ltd ("Attah Digital", "we", "us", "our"), Australia.

Blended Reports is used by agencies and brands to bring store revenue and advertising performance into one reporting view for the businesses they manage. This policy explains what data Blended Reports accesses, why, how it is used, stored and shared, and the choices you have. It applies to the Blended Reports application. Our marketing website attahdigital.com.au is covered by the Attah Digital privacy policy.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2. Information we collect and access

  • Account information: when you are invited to or sign in to Blended Reports we store your name, email address, the organisations you belong to and your role, so we can authenticate you and control access.
  • Connection details: which platforms an organisation has connected, connection status, and the account IDs selected for each store.
  • Basic technical data needed to run and secure the service, such as server logs and error reports.

3. Google user data we access

An organisation admin can connect a Google Ads account to Blended Reports using Google OAuth. During this flow Google asks you to grant Blended Reports the following permission (scope):

  • https://www.googleapis.com/auth/adwords: access to the Google Ads accounts you authorise, used through the Google Ads API.

With that permission, Blended Reports accesses the following data from the Google Ads accounts you authorise:

  • OAuth tokens issued by Google (an access token and a refresh token) so we can keep syncing without asking you to sign in each time (offline access).
  • Account structure: Google Ads customer IDs, account names, currency and time zone, and manager account (MCC) to client account relationships.
  • Campaign, ad group and ad details, such as names, IDs, status and type.
  • Performance metrics, such as impressions, clicks, cost/spend, conversions and conversion value, by day.

We only request the data needed for reporting. Blended Reports does not use the Google Ads API to create, edit, pause or delete campaigns, ads, budgets or bids in your account.

4. Other connected data sources

Organisations may also connect other platforms, such as Shopify, Meta Ads, Klaviyo and Google Analytics 4. Data from these sources (mainly orders, revenue, ad spend and channel metrics) is used in the same way as described below: only to provide reporting for the organisation that connected it.

5. Why we access Google user data

We access Google Ads data only to sync your advertising performance into Blended Reports so that the authorised organisation can:

  • see Google Ads spend and results alongside store revenue and other channels in dashboards and reports;
  • calculate blended metrics such as MER, ROAS and cost per acquisition;
  • monitor performance and data health, and receive alerts; and
  • receive AI-generated performance summaries and optimisation insights inside Blended Reports.

6. How we use Google user data

  • We use Google user data only to provide and improve the user-facing reporting features of Blended Reports for the user and organisation that authorised the connection.
  • We do not sell Google user data or any personal information.
  • We do not use Google user data to serve advertising, including retargeting, personalised or interest-based advertising, to you or anyone else.
  • We do not use Google user data to determine creditworthiness or for lending purposes.
  • We do not use Google user data to develop, improve or train generalised artificial intelligence or machine learning models.

7. Google API Services: Limited Use

Blended Reports' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. In particular:

  • Use: we use Google user data only to provide or improve user-facing features of Blended Reports that are prominent in the app.
  • Transfer: we do not transfer Google user data to others except as necessary to provide or improve those features (for example to our hosting, database and AI processing providers listed below), to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to users.
  • Advertising: we do not use or transfer Google user data for serving ads.
  • Human access: Attah Digital personnel do not read Google user data unless we have your affirmative agreement for specific data (for example when you ask us for support), it is necessary for security purposes such as investigating abuse, it is needed to comply with applicable law, or the data has been aggregated and anonymised for internal operations. Access is limited to personnel who need it.

8. Who can see your data and who we share it with

Inside Blended Reports, synced Google Ads data is visible only to signed-in users who are members of the organisation that connected the account, according to their role. Only organisation admins can connect or disconnect data sources.

We use the following service providers to run Blended Reports. They process data on our behalf only to provide the service:

  • Vercel: application hosting.
  • Supabase: database and user authentication (stores account information, connection credentials including OAuth tokens, and synced metrics).
  • Anthropic: AI processing for AI summaries and the AI assistant. Relevant reporting metrics, which may include Google Ads performance data, are sent to Anthropic only when generating these features for your organisation.

Some of these providers may process data outside Australia. We may also disclose information where required by law. We do not share Google user data with any other third party.

9. Storage and security

  • Data is transmitted over HTTPS (TLS).
  • OAuth tokens and synced data are stored in our database, which is not publicly accessible. Tokens are used only by our servers to call the Google Ads API and are not displayed in the app.
  • Access within the app is restricted to signed-in users by organisation membership and role.
  • Connection changes (such as connecting or disconnecting a data source) are recorded in an audit log.

No method of transmission or storage is completely secure, but we take reasonable technical and organisational steps to protect your data.

10. Retention and deletion

  • We keep Google Ads data and OAuth tokens while the Google Ads connection and the organisation's Blended Reports account are active.
  • When an organisation admin disconnects Google Ads, Blended Reports immediately stops syncing, revokes the Google OAuth token, and clears stored tokens from our systems.
  • Synced Google Ads performance data for that connection is deleted within 30 days of disconnect, unless we must keep some of it to comply with the law.
  • To request deletion sooner, email hello@attahdigital.com.au. We will delete stored OAuth tokens and synced Google Ads data within 30 days of a verified request, unless we must keep some of it to comply with the law.
  • When an organisation closes its Blended Reports account, we delete its OAuth tokens and synced Google Ads data within 30 days.

11. Your choices and controls

  • Disconnect in Blended Reports: an organisation admin can go to Settings, then Connections, select the store and disconnect Google Ads. Disconnecting revokes Google access and clears stored tokens immediately.
  • Revoke access in Google: you can also remove Blended Reports' access at any time at https://myaccount.google.com/permissions.
  • Access, correction and deletion: you can ask to access, correct or delete personal information we hold about you by emailing hello@attahdigital.com.au.

If you have a privacy complaint, contact us first. If it is not resolved, you can contact the Office of the Australian Information Commissioner (https://www.oaic.gov.au).

12. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new "Last updated" date. If we make a material change to how we use Google user data, we will tell affected users and ask for consent where required.

13. Contact

Privacy questions or requests: hello@attahdigital.com.au

Attah Digital Pty Ltd, Australia.