Privacy Policy

Last Updated: September 16, 2026

NintyOS (“NintyOS,” “we,” “us,” or “our”) provides an AI-powered business operating system designed to help businesses connect, understand, monitor, analyze and improve their marketing, sales, ecommerce, website, customer and business performance.

This Privacy Policy describes how NintyOS collects, accesses, uses, processes, stores, protects, shares and deletes information when you use the NintyOS website, applications, software, artificial intelligence features, integrations and related services (collectively, the “Services”).

This Privacy Policy also specifically explains how NintyOS handles information received from Google APIs and other third-party services that a user chooses to connect.

By using NintyOS or authorizing a third-party integration, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

The information we collect depends on how you use NintyOS and which services you choose to connect.

Account and Profile Information

When you create or manage a NintyOS account, we may collect information such as:

name;
email address;
telephone number, if provided;
account credentials and authentication information;
organization or business name;
user role and permissions;
subscription or plan information;
billing-related information where applicable; and
account preferences and settings.

Business Information

To provide business analysis and recommendations, NintyOS may collect information that you provide directly or authorize us to access, including:

business name;
website and domains;
industry or business category;
business model;
products and services;
business locations;
pricing;
currencies and time zones;
marketing channels;
commercial objectives;
advertising budgets;
revenue;
costs;
margins;
contribution economics;
sales information;
leads and customer lifecycle information;
inventory and product information;
business constraints; and
other information necessary to configure or operate NintyOS.

Technical and Usage Information

When you access NintyOS, we may automatically collect certain technical information, such as:

IP address;
browser type;
device type;
operating system;
timestamps;
referring pages;
application activity;
login and authentication events;
feature usage;
error information;
security events;
diagnostic information; and
interactions with NintyOS dashboards, recommendations, approvals and automation features.

We use this information to operate, secure, troubleshoot and improve the Services.

2. Information From Connected Third-Party Services

NintyOS allows users to connect external business services.

Depending on the integrations made available by NintyOS and the integrations you choose to authorize, these may include services provided by:

Google;
Meta;
Microsoft;
Shopify;
WooCommerce;
CRM providers;
payment providers;
messaging providers;
ecommerce providers;
analytics providers; and
other business platforms.

NintyOS does not automatically obtain access to these accounts merely because you have a NintyOS account.

Access occurs only when you choose to connect an integration and complete the authorization process required by the applicable provider.

The type of information NintyOS receives depends on the permissions you grant and the functionality you choose to use.

3. Google API Data

NintyOS may integrate with Google services through Google APIs and Google’s OAuth authorization framework.

When you choose to connect a Google service, Google presents the permissions requested by NintyOS. NintyOS accesses Google user data only after you authorize the applicable permissions.

Depending on the Google services you connect and permissions you grant, NintyOS may access, process and store the following categories of information.

Google Ads

NintyOS may access authorized Google Ads information including:

customer and account identifiers;
manager and advertising account relationships;
campaign information;
campaign status and settings;
campaign types;
ad groups;
advertisements;
assets;
keywords;
search terms where made available by Google;
targeting information;
audiences where permitted;
bidding strategies and settings;
campaign and shared budgets;
conversion actions;
conversion goals;
impressions;
clicks;
costs;
conversions;
conversion values;
CPC;
CPA;
ROAS;
performance statistics;
Shopping and Performance Max information;
product and campaign performance information;
recommendations or account-level information made available by the API; and
other Google Ads information authorized by the user and necessary to provide NintyOS functionality.

NintyOS may use this information to provide reporting, performance analysis, measurement diagnostics, anomaly detection, root-cause analysis, campaign intelligence, search intelligence, budget and bidding analysis, scenario analysis, recommendations and other user-facing advertising features.

Where NintyOS offers action or automation functionality, Google Ads information may also be used to prepare actions for user review and, only where authorized and supported, perform actions requested or approved by the user.

Google Analytics

If you authorize Google Analytics access, NintyOS may access reporting information such as:

properties and authorized account information;
traffic and sessions;
users and engagement metrics;
events;
key events or conversions;
acquisition channels;
traffic sources;
campaign information;
landing pages;
ecommerce activity;
purchases and revenue;
device information;
geographic dimensions;
funnels;
website behavior; and
other authorized dimensions and metrics made available through Google Analytics APIs.

NintyOS may use this information for website analysis, marketing measurement, conversion analysis, funnel analysis, attribution-related analysis, anomaly detection and business-performance insights.

Google Search Console

If you authorize Google Search Console access, NintyOS may access information including:

verified properties;
search queries;
pages;
clicks;
impressions;
click-through rates;
average search position;
devices;
countries;
search appearance;
sitemap information; and
other authorized Search Console information.

NintyOS may use this information to provide SEO analysis, organic search insights, content opportunities, website diagnostics and cross-channel performance analysis.

Google Merchant Center / Merchant API

If you authorize Merchant Center access, NintyOS may access information including:

merchant account information;
product identifiers;
product titles and descriptions;
product attributes;
pricing;
availability;
inventory information;
destinations;
feed labels;
countries and languages;
product eligibility;
product issues;
disapprovals;
warnings;
promotions;
product performance information where available; and
other information authorized through the applicable Merchant APIs.

NintyOS may use this information for Shopping and Performance Max analysis, product diagnostics, feed diagnostics, eligibility analysis, product-performance analysis and related recommendations.

Google Business Profile

If supported by NintyOS and authorized by you, NintyOS may access Google Business Profile information including:

business locations;
business information;
categories;
operating information;
profile information;
reviews and responses where authorized;
local business performance information; and
other information permitted by the applicable API.

NintyOS may use this information to help users manage and understand their local business presence, reputation and performance.

PageSpeed Insights and Chrome User Experience Data

NintyOS may use Google-provided website performance services to analyze publicly available or authorized website-performance information, including performance and user-experience metrics.

This information may be used for website diagnostics, performance recommendations and conversion optimization analysis.

Other Google APIs

NintyOS may support additional Google APIs in the future.

We will only request Google permissions that are reasonably necessary for functionality made available to the user. If our use of Google user data materially changes, we will update this Privacy Policy and obtain any additional authorization or consent required by Google or applicable law.

Google requires applications to request only permissions necessary to implement their functionality rather than requesting unnecessary permissions for possible future functionality.

4. How We Use Google User Data

Google user data obtained through Google APIs is used only to provide or improve user-facing NintyOS functionality requested or authorized by the user.

Depending on the NintyOS features being used, this may include:

connecting authorized Google accounts;
retrieving authorized business and marketing information;
displaying performance information;
creating dashboards and reports;
analyzing advertising performance;
analyzing website and conversion performance;
assessing tracking and measurement quality;
reconciling information across connected sources;
identifying anomalies;
diagnosing potential causes of performance changes;
identifying marketing or business opportunities;
analyzing search queries, keywords and campaign structures;
analyzing Shopping, Merchant Center and product information;
analyzing budgets and bidding conditions;
producing scenarios and estimates;
analyzing SEO performance;
analyzing local business performance;
combining authorized Google information with business information supplied by the customer;
producing summaries, diagnostics and recommendations;
preparing proposed actions;
carrying out actions expressly authorized by the user where supported;
measuring outcomes of actions;
maintaining customer-visible history and audit records;
troubleshooting integration problems;
protecting users and NintyOS from fraud, abuse and security threats; and
improving user-facing NintyOS functionality.

NintyOS does not use Google user data for purposes unrelated to providing or improving the NintyOS functionality requested by the user.

5. Google API Services User Data Policy and Limited Use

NintyOS’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including applicable Limited Use requirements.

These protections apply, where applicable, to raw Google user data as well as data derived, aggregated or anonymized from Google user data.

NintyOS limits its use of Google user data to providing or improving user-facing functionality that is visible and relevant to the user.

Google’s Limited Use rules expressly restrict uses and transfers of API data outside the permitted user-facing functionality.

6. Artificial Intelligence and Machine Learning

NintyOS includes artificial intelligence and automated analysis features.

NintyOS may use AI systems to provide user-facing functionality such as:

classification;
summarization;
business understanding;
diagnostics;
anomaly explanations;
recommendation generation;
prioritization;
business and marketing analysis; and
proposed action plans.

Where necessary to provide these features, relevant information may be processed by contracted infrastructure or AI service providers acting on behalf of NintyOS and subject to appropriate contractual and data-protection requirements.

Google User Data and AI

NintyOS does not use Google user data obtained through Google APIs to develop, improve, or train generalized or non-personalized artificial intelligence or machine-learning models.

NintyOS does not transfer Google user data to third parties for the purpose of training generalized or non-personalized AI or machine-learning models.

Where AI processing of Google user data is necessary to provide a user-requested NintyOS feature, such processing is limited to providing or improving that user-facing functionality and is subject to applicable Google API policies and user authorization.

If NintyOS uses Google Workspace APIs in the future, the use of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

This explicit AI statement is important. Google’s current privacy-policy guidance specifically identifies training non-personalized/generalized AI or ML models as a prohibited use and calls for an affirmative statement for relevant AI/Workspace use cases.

7. What We Do Not Do With Google User Data

NintyOS does not sell Google user data.

NintyOS does not use or transfer Google user data for:

sale to data brokers;
sale to information resellers;
targeted advertising unrelated to NintyOS functionality;
personalized advertising unrelated to NintyOS functionality;
interest-based advertising;
retargeting;
determining creditworthiness;
lending decisions;
creating unrelated commercial databases; or
training generalized or non-personalized artificial intelligence or machine-learning models.

Google’s current OAuth privacy guidance specifically lists these types of uses as prohibited.

8. Sharing and Disclosure of Information

We do not sell Personal Data or Google user data.

We may disclose or permit processing of information only as described below.

Service Providers

NintyOS may use carefully selected service providers to operate and provide the Services, including providers of:

cloud infrastructure;
application hosting;
databases;
storage;
authentication;
cybersecurity;
monitoring and error reporting;
communications;
customer support;
payment processing; and
AI/model-processing infrastructure.

These providers may process information only as reasonably necessary to provide services to NintyOS and are expected to handle such information subject to contractual, confidentiality, security and data-protection obligations.

For Google user data, transfers to service providers are limited to what is necessary to provide or improve the user-facing functionality requested by the user and are subject to applicable Google requirements.

User-Directed Integrations

We may transmit information to a third-party service when a user intentionally connects that service or requests, authorizes or approves an action involving that service.

Within a Customer Organization

Information may be accessible to other authorized users of the same NintyOS organization or business according to their roles and permissions.

Security and Legal Requirements

We may disclose information where reasonably necessary to:

comply with applicable law;
comply with valid legal process;
respond to lawful government requests;
investigate fraud or abuse;
protect users;
protect NintyOS;
enforce agreements; or
maintain the security and integrity of the Services.

Business Transaction

If NintyOS is involved in a merger, acquisition, restructuring or sale of assets, information may be transferred as part of that transaction, subject to applicable law and applicable Google API requirements.

We do not transfer or disclose Google user data to third parties except as necessary to provide or improve user-requested NintyOS functionality, with user consent where required, for security purposes, to comply with applicable law, or as otherwise expressly permitted by the Google API Services User Data Policy.

Google specifically asks privacy policies to make the sharing/transfer restrictions clear.

9. Human Access to Google User Data

Access to customer data by NintyOS personnel is restricted.

NintyOS personnel will not access Google user data except where access is reasonably necessary and permitted, such as:

when the user has requested support and authorized access where required;
to investigate a security incident, fraud, abuse or technical problem;
when necessary to comply with applicable law; or
where data has been appropriately aggregated and access is permitted for legitimate internal operations under applicable requirements.

Access is limited according to role and operational need.

Google’s Limited Use policy places specific restrictions on human access to data obtained through sensitive or restricted scopes.

10. Other API and Platform Integrations

NintyOS may integrate with platforms other than Google.

Depending on the services made available and authorized by the user, NintyOS may process information from services such as Meta advertising services, Microsoft Advertising, Shopify, WooCommerce, CRM systems, WhatsApp or messaging services, payment platforms and other business systems.

Such information may include advertising performance, campaigns, products, orders, leads, customer records, sales outcomes, messages, business events, transactions or other information made available through the applicable integration.

NintyOS uses information from these integrations to provide the business-management, analysis, reporting, recommendation, workflow and automation functionality requested by the customer.

Use of information obtained through each third-party platform is also subject to the applicable platform’s terms, policies and permissions.

11. OAuth Tokens and Authorization Credentials

When you authorize a supported integration, NintyOS may receive OAuth access tokens, refresh tokens or similar authorization credentials.

These credentials may be stored securely where necessary to maintain the integration.

We use these credentials only to access the services and permissions that you have authorized.

NintyOS does not intentionally expose OAuth access tokens or refresh tokens through public-facing application interfaces.

Access to credentials is restricted and protected using appropriate technical and organizational controls.

12. Data Storage

Depending on the features you use, NintyOS may store:

account information;
organization information;
business configuration;
connected account identifiers;
authorization credentials;
integration configuration;
imported or synchronized data;
Google API data;
data from other authorized integrations;
derived metrics;
analytical results;
recommendations;
scenarios;
approval records;
action history;
audit records;
usage information; and
security and diagnostic logs.

Information may be stored for as long as necessary to provide the Services, maintain historical analysis and audit functionality, comply with legal obligations and protect the security and integrity of NintyOS.

13. Data Security

NintyOS uses reasonable technical and organizational safeguards designed to protect information against unauthorized or unlawful access, use, alteration, disclosure, loss or destruction.

Depending on the system and information involved, safeguards may include:

HTTPS/TLS encryption for information transmitted over public networks;
encryption or equivalent protection for sensitive information where appropriate;
protection of OAuth credentials and tokens;
authentication controls;
authorization controls;
role-based access controls;
organization and business-level access restrictions;
database access controls;
secure session handling;
least-privilege access practices;
logging and monitoring;
security-event monitoring;
separation of customer data;
audit records;
secure software-development practices; and
mechanisms designed to prevent unauthorized actions.

We periodically review security controls and may update them as the Services evolve.

No Internet-based service can guarantee absolute security. Users are also responsible for maintaining the confidentiality of their account credentials and controlling access to their accounts.

Google specifically expects privacy policies to describe data-protection mechanisms for sensitive Google user data.

14. Data Retention

NintyOS retains Personal Data and connected-service data only for as long as reasonably necessary to:

provide the Services;
maintain requested historical reporting and analysis;
maintain security and audit records;
comply with legal obligations;
resolve disputes;
prevent fraud or abuse; and
enforce agreements.

Different categories of information may have different retention periods based on their purpose, sensitivity and legal requirements.

When information is no longer reasonably necessary for the purposes for which it was collected, NintyOS will delete, anonymize or securely dispose of it, subject to legitimate legal, security and backup requirements.

Google explicitly requires privacy policies to disclose data-retention and deletion practices.

15. Disconnecting an Integration

Users may disconnect supported third-party integrations through NintyOS where this functionality is available.

Disconnecting an integration prevents NintyOS from making future API requests using that authorization after the disconnection has been processed.

Disconnecting an integration does not necessarily delete information that was previously imported or generated from the integration because some information may remain necessary for historical reporting, audit records, security, legal obligations or other legitimate purposes described in this Privacy Policy.

Users may separately request deletion as described below.

16. Revoking Google Access

Users may revoke NintyOS’s access to their Google Account through their Google Account’s third-party connections or security settings.

After Google authorization has been revoked, NintyOS will no longer be able to make new API requests using the revoked authorization.

Revocation of OAuth authorization does not necessarily constitute a request to delete previously stored data.

Users who also want previously stored Google user data deleted may submit a deletion request to:

support@nintyos.com

17. Account and Data Deletion

Users may request deletion of their NintyOS account, Personal Data and previously stored connected-service data by contacting:

support@nintyos.com

Use the subject:

Data Deletion Request – NintyOS

We may take reasonable steps to verify the identity and authority of the requester before processing a request.

Following a valid deletion request, NintyOS will delete or anonymize applicable information within a reasonable period, except where retention is reasonably necessary or permitted for:

legal obligations;
fraud prevention;
security;
dispute resolution;
enforcement of agreements;
audit requirements; or
temporary backup and disaster-recovery systems.

Residual copies may remain temporarily in secure backups until they are overwritten or expire through normal backup cycles.

Where technically and legally appropriate, deletion requests will also apply to stored information obtained through connected Google APIs.

18. User Rights and Choices

Depending on your location and applicable law, you may have rights concerning your Personal Data, including the right to:

request access;
request correction;
request deletion;
obtain a copy of certain information;
object to or restrict certain processing;
withdraw consent where processing is based on consent; and
lodge a complaint with an applicable data-protection authority.

Requests may be submitted to:

support@nintyos.com

We may verify your identity before completing a request.

19. Cookies and Similar Technologies

NintyOS may use cookies and similar technologies for purposes such as:

authentication;
maintaining secure sessions;
remembering user preferences;
security;
fraud prevention;
application functionality;
analytics; and
understanding how the Services are used.

Where required by applicable law, NintyOS will request appropriate consent before using non-essential cookies or similar technologies.

20. Marketing Communications

NintyOS may send users service-related communications concerning their account, security, integrations or use of the Services.

Where permitted by applicable law, NintyOS may also send information concerning NintyOS features, products or services.

Users may unsubscribe from optional marketing communications using the unsubscribe mechanism provided in the communication or by contacting us.

Unsubscribing from marketing communications does not prevent necessary transactional, security or account communications.

21. International Data Processing

NintyOS and its service providers may process information in India and other countries where NintyOS or its service providers operate.

Where applicable law requires safeguards for international transfers of Personal Data, we will use appropriate legal and contractual mechanisms.

22. Children’s Privacy

NintyOS is a business-oriented service and is not intended for use by children.

NintyOS does not knowingly collect Personal Data from children in violation of applicable law.

If you believe that a child has provided Personal Data to NintyOS improperly, contact us at support@nintyos.com, and we will take appropriate steps.

23. Third-Party Services and Links

NintyOS may contain integrations or links to third-party websites, applications and services.

Those third parties operate under their own privacy policies and terms. This Privacy Policy does not govern independent processing performed by a third party outside NintyOS’s control.

Users should review the privacy policies and terms of third-party services they choose to use.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

changes to NintyOS;
new integrations or functionality;
changes in our data practices;
changes to applicable law; or
changes to third-party API requirements.

The latest version will be published on this page with an updated “Last Updated” date.

If we materially change how Google user data is accessed, used, stored or shared, we will update this Privacy Policy and provide additional notice or obtain additional authorization or consent where required before using Google user data for the new purpose.

Google requires OAuth privacy disclosures to remain current and says users must be informed/consented when API data starts being used for a materially new purpose.

25. Contact Information

If you have questions about this Privacy Policy, NintyOS’s privacy practices, Google API data, connected-service information, or would like to submit an access, correction or deletion request, please contact us:

NintyOS
Email: support@nintyos.com
Address: 407, Satvaved Heights, Opp. Eklavya School, Vastral, Ahmedabad, India – 382418