Data Governance

Your data lives in a vault, not a pool

The Principle of Isolation

ClickCatalyst doesn't use shared data pools. Your data never touches another client's data.

Hashed Identity

When you connect, the engine generates a unique, one-way encrypted hash from your account credentials. This hash becomes the namespace for your dedicated BigQuery dataset.

Tenant Isolation

Your dataset is a private silo. All calculations — ROAS analysis, leakage detection, growth scoring — happen inside this isolated environment on Google Cloud infrastructure. No other user can see it. We can't see it unless you explicitly grant support access.

Authentication & Access Control

Establishing a data pipeline requires specific authentication keys. Here's how the engine handles them:

Google OAuth 2.0

When you click "Connect," you're not sharing your password. You're issuing a scoped OAuth token restricted to read-only access. The engine can pull reporting data, but it cannot create campaigns, modify bids, or spend your budget.

Customer ID & Property ID

These identifiers act as coordinates for the pipeline. They tell the engine which spend stream (Google Ads) to map against which behavior stream (GA4). Without both, the analytical engine can't resolve the math that powers every dashboard.

Data Hydration & Freshness

The engine needs history to understand the future.

Initial Hydration (90 Days)

When you first save a configuration, the engine performs a deep pull of up to 90 days of historical data. This establishes your performance baseline — what normal looks like for your campaigns before optimization begins.

Daily Sync

Every 24 hours, the pipeline performs an incremental sync. It pulls only what has changed since the last run, keeping your dashboards fresh while minimizing API load and maintaining data consistency.

Deletion Rights & Data Sovereignty

In accordance with our Privacy Policy and applicable data protection regulations, you have total sovereignty over your data. Two levels of deletion are available:

Surgical Purge

Delete a specific account configuration? The backend runs a targeted script that identifies and destroys every row associated with that Customer ID and Property ID across all BigQuery tables. Not hidden — permanently deleted.

Total Vault Destruction

Delete your last remaining configuration? The engine triggers a full purge — dropping the entire BigQuery dataset and revoking all OAuth tokens. Your analytical footprint on our infrastructure becomes zero within seconds.

Encryption & Compliance Standards

Encryption at Rest

All data stored in your BigQuery vault is encrypted using AES-256, the same standard used by banks and government agencies.

Encryption in Transit

Data moving between Google's APIs and your vault travels through TLS 1.2+ encrypted tunnels.

Access Controls

Our Terms of Service strictly prohibit employees from viewing your raw data. Automated algorithms handle all processing. Human intervention only occurs if you explicitly request technical support for a sync issue.

Data Accuracy & Attribution Honesty

Are the numbers accurate?

ClickCatalyst is 100% accurate to the data provided by Google's APIs. However, because the engine accounts for Conversion Lag (the delay between click and conversion) and Attribution Ghosts (conversions Google predicted but that never actually materialized), the "Realized Value" shown in ClickCatalyst may appear more conservative than the "Total Revenue" in the native Google Ads interface.

This is by design. We show you what actually converted, not what Google predicted would convert.

Technical FAQ

Q: Is my data shared with other ClickCatalyst users?

Never. Your BigQuery dataset is isolated and encrypted with a hash unique to your account. Other users can't see it. We can't see it unless you grant support access.

Q: What happens if I disconnect my Google account externally?

If you disconnect via Google's 'Third-party apps with account access' page, Google notifies our deauthorization endpoint. We purge your access tokens within 24 hours and delete all associated data per your deletion settings.

Q: Can ClickCatalyst change my Google Ads campaigns or budgets?

No. We only request read-only OAuth permissions. The engine can see your data to analyze it, but it cannot modify campaigns, adjust budgets, or spend your money.

Q: How do you handle currency conversions for multi-account setups?

All currency values are normalized to your workspace's default currency using daily exchange rates from Google's Currency API. This ensures accurate portfolio-level ROAS calculations across different markets.

Q: What compliance standards does ClickCatalyst follow?

AES-256 encryption at rest, TLS 1.2+ encryption in transit, strict OAuth 2.0 read-only access protocols, and compliance with applicable data protection regulations including the DPDP Act 2023 (India). All data processing happens on Google Cloud's SOC 2 certified infrastructure.

Q: Why does ClickCatalyst's revenue number differ from Google Ads?

Google Ads shows 'Total Conversion Value' which includes predicted conversions. ClickCatalyst shows 'Realized Value' — only conversions that actually happened and can be verified in GA4. We account for Conversion Lag and Attribution Ghosts to give you honest numbers.

Q: What happens to my historical data if I delete an account?

Surgical Purge (delete one account) removes all rows tied to that Customer ID. Total Purge (delete your last account) destroys the entire BigQuery dataset. Both deletions are permanent and irreversible.