RevenueFlows AI

Privacy Policy

Last updated: September 28, 2026

Introduction

Welcome to Rainmakers Dojo Inc., doing business as RevenueFlows AI ("Company," "we," "our," "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.revenueflows.ai or use the RevenueFlows AI application at app.revenueflows.ai (together, the "Services").

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Services.

Information We Collect

We may collect information about you in a variety of ways. The information we may collect through the Services includes:

Personal Data

Personally identifiable information, such as your name, shipping address, email address, and telephone number, and demographic information, such as your age, gender, hometown, and interests, that you voluntarily give to us when you register with the Services or when you choose to participate in various activities related to the Services, such as online chat and message boards.

Derivative Data

Information our servers automatically collect when you access the Services, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Services.

Financial Data

Financial information, such as data related to your payment method (e.g., valid credit card number, card brand, expiration date) that we may collect when you purchase, order, return, exchange, or request information about our services through the Services.

Use of Your Information

We use the information we collect to:

  • provide, operate, secure, and improve the Services;
  • create and manage advertising campaigns on connected platforms, only at the direction of the client who connected the account;
  • report advertising and store performance inside the client’s dashboard;
  • send the conversion data a client has configured (such as store purchases) to that client’s own advertising and analytics accounts;
  • respond to support requests and communicate with you about the Services; and
  • meet our legal obligations.

Text messaging: No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing with subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. If you set the DNT signal on your browser, we will respond to such DNT browser signals.

Options Regarding Your Information

You may at any time review or change the information in your account or terminate your account.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use and/or comply with legal requirements.

Data from Connected Advertising & Marketing Platforms

Clients of the RevenueFlows AI application (app.revenueflows.ai) may connect third-party business accounts — such as Meta (Facebook/Instagram) ad accounts, Facebook Pages and Pixels/Datasets, Google accounts, Shopify stores, and email marketing platforms — to our services. When an account is connected, we access, via each platform's official APIs, only the business data needed to provide our services: business asset identifiers (such as ad account, Page, and pixel IDs), advertising campaign structure and performance data, and aggregated conversion data. We use this data solely to operate the connected client's dashboard, create and report on advertising campaigns at their direction, and provide server-side conversion measurement.

We do not sell this data, do not use it for any purpose other than providing our services to the client who connected the account, and do not share it with third parties except subprocessors necessary to operate the service (such as our hosting and database providers). Access credentials are stored encrypted (AES-256-GCM).

Deletion: disconnecting a platform inside the RevenueFlows dashboard immediately deletes the stored access credentials for that platform. You may also request deletion of all platform-derived data at any time by emailing support@revenueflows.ai — requests are honored within 30 days, and any deletion reference code issued to you (for example via Facebook's data deletion process) can be included to track your request. Data received from Meta is handled in accordance with the Meta Platform Terms. If you asked Meta (Facebook) to delete your data, you can check the status of that request at https://app.revenueflows.ai/data-deletion. Data received from Google APIs is covered in detail under “Google user data” below.

Google user data

This section explains how the RevenueFlows AI application accesses, uses, stores, shares, and deletes data it receives when a client signs in with Google and connects Google Ads and/or Google Analytics.

What we access.

  • Your Google account email address, so we can show which Google account is connected.
  • The Google Ads accounts you can access, and within the account you select: its campaigns, ad groups, ads, keywords, search terms, conversion actions, and performance metrics.
  • For Google Analytics: the list of your GA4 accounts, properties, and web data streams.

How we use it. We use Google user data only to provide the features you use in the RevenueFlows AI dashboard:

  • showing which Google account is connected and letting you pick the Google Ads account to use;
  • creating and editing campaigns, keywords, budgets, and conversion actions, only when you request it in the dashboard (new campaigns are created paused unless you choose to launch them live);
  • reporting campaign performance to you;
  • running the Optimize recommendations you review and approve;
  • creating a Measurement Protocol API secret in the GA4 property you pick, so your store’s purchase events can be sent to it; and
  • uploading your store’s purchase conversions (order ID, value, currency, click identifiers, and hashed email/phone only when Enhanced Conversions is enabled) to your Google Ads account through the Google Data Manager API.

How we store it. We store an encrypted (AES-256-GCM) OAuth refresh token, the Google account email address, the IDs of the Google Ads account, conversion action, and GA4 property/data stream you select, and the GA4 Measurement Protocol secret (encrypted). Google Ads performance reports are requested from Google when you view them and are not stored. The only cached Google API response is a connection check that lists the Google Ads account IDs your login can access; it is treated as expired after 1 hour and replaced on the next check. An audit log records changes made through the Services (such as campaigns launched or settings changed).

How we share it. We never sell Google user data and never use it for advertising. We do not share it with anyone except the infrastructure subprocessors that run the Services (hosting: Vercel; database: Supabase), and only so they can operate the Services for you. Google user data is not sent to AI or large-language-model providers and is not used to develop, improve, or train any AI or machine-learning model.

Retention and deletion. Disconnecting Google in the dashboard (Settings → Tracking) immediately deletes the stored refresh token and Google account email address. The selected account and conversion-action IDs are kept so a reconnect can resume your setup; email us if you want them deleted too. You can also revoke our access at any time at https://myaccount.google.com/permissions, or email support@revenueflows.ai to delete all Google-derived data; we complete these requests within 30 days.

RevenueFlows AI’s use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Microsoft Clarity

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity.

Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

Rainmakers Dojo Inc. (doing business as RevenueFlows AI)
Contact: Ishan Soni
Website: www.revenueflows.ai
Email: support@revenueflows.ai
Address: 1044 Christie Vista SW, Edmonton, Alberta T6W 4W8, Canada