Privacy policy

Effective 14 October 2026

Who we are

Dataden is run by PT Zharkwave Global Group.

You can reach us at achilles@zharkwave.com.

What we collect

• Your name, your email and your password. The password is stored hashed.
• When you sign in with Google, we receive your name, email and Google account ID, and nothing else.
• Your clients and your team.
• Reports from the platforms you connect.
• Files you upload.
• Platform sign-in tokens, stored encrypted.

What we read from each platform

Dataden only reads. Google Ads and Meta offer no read-only permission, so we ask for the narrowest one there is and use it only to read your reports. Dataden never changes your ads.

Google Ads (https://www.googleapis.com/auth/adwords). We list the Google Ads accounts you can reach and read their reports, such as spend, clicks and conversions. We use them to show your reports and to run the ones you schedule.

Google Analytics 4 (https://www.googleapis.com/auth/analytics.readonly). We list the properties you can reach and read their reports, such as sessions and conversions. We use them to show your reports and to run the ones you schedule.

Google Search Console (https://www.googleapis.com/auth/webmasters.readonly). We list the Search Console sites you can see and read their search reports, such as clicks, impressions and position. We use them to show your reports and run the ones you schedule.

Meta (ads_read and business_management). We use them to list the ad accounts you manage and to read their reports. We use those reports to show them to you and to run the ones you schedule.

TikTok. The Ads Management (advertiser info) and Reporting permissions you approve in TikTok's consent screen. We use them to list your advertiser accounts and read their reports.

ChatGPT Ads. We read the files you upload, and nothing else.

Google API data

Dataden's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

No person at Dataden reads your Google user data, with four exceptions:

• You agreed to it, for specific data.
• Security, such as investigating a bug or abuse.
• To comply with the law.
• The data is aggregated and anonymised, and used for internal operations.

Beyond that:

• We do not transfer it to anyone, except to provide the service, for security, to comply with the law, or in a merger or sale, after we tell you.
• We never use it for advertising, never sell it and never use it to train AI models.

Google Sheets add-on

The add-on asks Google for four permissions.

This spreadsheet only (https://www.googleapis.com/auth/spreadsheets.currentonly). It writes your reports into the spreadsheet where you opened it, and nothing else in your Drive.

Sidebar and menu (https://www.googleapis.com/auth/script.container.ui). It shows the Dataden menu and sidebar inside the spreadsheet.

Connect to dataden.app (https://www.googleapis.com/auth/script.external_request). It sends your requests to Dataden and brings the figures back.

Run your schedule (https://www.googleapis.com/auth/script.scriptapp). When you turn on a schedule, it sets one hourly timer that checks whether a scheduled report is due.

What the add-on keeps, in Google's add-on storage:

• In your Google account: your Dataden sign-in, user id and role, your theme, the addresses of Dataden's styles, and short-lived items such as a sign-in in progress or a message waiting for you.
• In the spreadsheet: for each report, its name, where it writes (tab, cell and size), a short note, and the Dataden user id of the person who made it.
• No cell values.

What Dataden receives from the add-on:

• The spreadsheet's id, and the tab and start cell you choose for each report.
• Each report's settings, and whether a run worked and how many rows it wrote.
• The add-on never reads the other cells in your spreadsheet. It reads the names and sizes of your tabs to check for room, and the address of the cell you have selected. Your list of tabs and your current selection stay in the add-on unless you pick them for a report.

To remove it, open Extensions, then Add-ons, then Manage add-ons, and choose Remove. Your data in Dataden stays until you delete it, as described on the data deletion page.

What we never do

• Change your ads.
• Sell your data.
• Use your data for advertising.
• Train AI with your data.

Who else handles it

DigitalOcean hosts Dataden on servers in Singapore. No one else handles the data in your workspace. If we start using an email provider, we add it here.

Our pages load fonts from Google Fonts, which receives your IP address.

On the public site, Google, Meta and TikTok receive your visit only if you allow performance or advertising cookies. They never receive the data in your workspace.

How long we keep it

• We keep your data while your workspace exists.
• Backups are kept for 14 days.
• When you delete a connection, its sign-in token is deleted at once.

Deleting your data

You can delete a connection or your whole workspace yourself. The steps are on the data deletion page.

Reports already read stay until you delete the workspace or ask us to delete them.

Security

• HTTPS everywhere.
• Platform tokens are encrypted.
• Passwords are hashed.
• Each workspace is kept apart from the others.

Cookies

These cookies keep you signed in and remember your choice. They are always set.

These are set only if you allow them. Only scripts on our public pages set them, and the app never reads them.

If you turn a category off, its tags stop loading from the next page view. Cookies they already set stay until they expire. You can change your choice under Cookie settings at the bottom of each page.

Your rights

You can see, correct or delete your data. Email achilles@zharkwave.com and we will help.

Changes and contact

If we change this policy, we change the date at the top. Questions go to achilles@zharkwave.com.