Application privacy

Kurumi PaperClip privacy policy

Updated 19 October 2026. This policy covers the Google integration operated by KURUMI for its own restaurant operations in Da Nang and Hoi An, Vietnam.

About Kurumi PaperClip and its Google permissions

Google data accessed and why

With the account owner’s permission, Kurumi PaperClip accesses KURUMI Google Ads account identifiers, settings, campaign and ad content, targeting and keywords, search-term reports, conversion settings, aggregate advertising metrics and change results.

The data supports private advertising reports, measurement, recommendations and exact owner-approved account operations. Advertising metrics may be compared with KURUMI’s internal restaurant sales totals. Those sales records come from separate restaurant systems, not from this Google OAuth permission.

Processing, storage and access

Current reporting runs through authorized KURUMI operator tools. Credentials, saved reports and related analysis may be retained on KURUMI-controlled computers. Shared Ads credentials have also been retained for existing restaurant integrations. Historical reports from the retired Paperclip service remain in a retained KURUMI server archive.

Google API requests use HTTPS. Access is limited to authorized operators and the service providers needed to run this workflow. Credentials are handled separately from public website content and must not be included in reports, public pages or AI prompts.

Sharing and AI-assisted analysis

Authorized operators may provide selected report content and derived results to OpenAI through Codex to produce KURUMI advertising analysis, summaries and recommendations. The service processes submitted content under the applicable service terms and account settings. KURUMI’s hosting provider also stores retained historical reports. Any additional AI provider must be disclosed before use.

Google user data is not sold or shared for unrelated advertising. Access and transfers are limited to operating the described features, security and legal obligations.

Retention and deletion

Authorization credentials are retained while the connection is needed. Saved reports, approvals and related analysis remain until an authorized KURUMI operator deletes them; there is currently no automatic retention deadline.

Revoking Google access stops new authorized collection but does not remove reports already saved. To request deletion of KURUMI-held reports, derived work records or stored credentials, contact KURUMI. An authorized operator will identify applicable local files and retained archives and explain any records that must remain for operational, security or legal reasons. Copies submitted to service providers are also subject to their applicable deletion controls.

Your control and privacy contact

You can revoke the app’s connection at any time in Google Account connections. After revocation, the integration needs your permission again before collecting further Google data.

For questions or a deletion request, email kurumi.danang@gmail.com. Include the app name and enough information to identify the authorized account or report. Do not send passwords, OAuth tokens or client secrets. KURUMI may verify that you control the account before acting on a request.

Google API data policy

Kurumi PaperClip’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Policy updates and website privacy

Changes to this policy will appear here with an updated date. Material changes to the way Google data is used require notice and renewed consent where required by Google’s policies.

For public website cookies and visitor measurement, see the KURUMI website privacy policy.

Terms of use for KURUMI applications

Message us