Platform privacy statement
Version 1.0 · Last updated: November 13, 2026
Data controller
This statement applies to Agentic, our advertising platform at www.draftagentic.nl. The controller for the processing is:
Draft Digital B.V.Hannie Dankbaarpassage 1, 1053 RT Amsterdam
Chamber of Commerce 92888259
info@draftdigital.nl · +31 6 14183114
We have no data protection officer; for all privacy questions, use the email address above.
What this statement covers
This statement covers Agentic, Draft Digital's advertising platform at www.draftagentic.nl. Draft Digital employees use it to analyse and manage our clients' campaigns, at www.draftagentic.nl or from an AI app such as Claude or ChatGPT that they connect to Agentic. Only people we invite have access.
For your own account (name, email address, your connections) Draft Digital is the controller. For the data in a client's advertising and analytics accounts we are a processor: we work on behalf of that client, under the data processing agreement we have with them.
Visitors of www.draftdigital.nl are covered by the website's privacy statement.
What we read from Google
You connect your own Google account once. Google then shows you which permissions we ask for, and you can untick any of them. We ask for these:
| Service and permission | What for |
|---|---|
| Sign in with Google (openid, email) | Confirm which Google account you connected, so every action is recorded under your name. |
| Google Ads (adwords) | Read campaigns, search terms, keywords, recommendations and change history of the accounts you can access yourself. Make the changes you ask for. |
| Google Analytics (analytics.readonly) | Read reports on website traffic and conversions. Read only. |
| Google Search Console (webmasters.readonly) | Read search performance of websites. Read only. |
| Google Tag Manager (tagmanager.readonly, tagmanager.edit.containers, tagmanager.edit.containerversions, tagmanager.publish) | Read containers, tags and triggers. At your request, edit or pause a tag and publish a container version. |
How we use Google user data
We use data we receive from Google only for the features you use in the platform: showing reports, answering your questions, making the changes you ask for and recording who did what.
Draft Digital's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We never sell this data and don't use it for advertising, profiling or credit decisions.
- We don't use it to train AI models, including our own.
- People at Draft Digital only look at it when you ask us to, for security or to investigate abuse, when the law requires it, or in aggregated and anonymised form to run the platform.
Processing by AI models
When you ask the assistant a question, the platform sends the data needed for the answer to an AI model. These are Gemini and Claude through Google Cloud Vertex AI, processed in the European Union. Google processes that data as our processor and does not train models on it.
If you work from your own AI app, such as Claude or ChatGPT connected to the platform, the answers you ask for go to that app. That app's terms and your organisation's settings apply there.
Storage, security and retention
The platform runs on Google Cloud in the europe-west4 region (the Netherlands). All traffic is encrypted (HTTPS). Every client has its own separated space in the database, and you only see the clients you are a member of.
| Data | How we keep it | Retention |
|---|---|---|
| Access tokens of your Google connection | Encrypted with Google Cloud KMS; the key never leaves KMS. | Until you disconnect or your access is revoked. |
| Figures from Google Ads, Analytics and Search Console | Read live and not stored in our database. | Not kept, except as part of a conversation (see below). |
| Conversations with the assistant, including the answers in them | In the platform's database. | 90 days after the last activity; a pinned conversation until you unpin it, then 90 days. |
| Usage records: who used which feature, when, and with what outcome (without conversation content) | In the platform's database. | As long as we work for the client, and at most 12 months after the work ends. |
Disconnecting and deleting your data
You can disconnect your Google account at any time in the platform under My connections, or at Google on https://myaccount.google.com/permissions. After that we can no longer read or change anything with your account, and we delete the stored tokens.
If you also want us to delete your conversations or other data, email the address above. We reply within one month.
Your rights
Under the GDPR you have the right to access, correct, delete, restrict and port your data, and to object. How to use these rights and how to complain to the Dutch Data Protection Authority is in our general privacy statement. If your request concerns data of one of our clients, we handle it together with that client.
Changes
The version number and the date of the last change are at the top of this page. If something material changes, such as a new Google permission or a new processor, we tell the platform's users before it takes effect.