Privacy Policy

The Dime Ads Client Dashboard (the "Dashboard") is operated by 1000439010 Ontario Inc., operating as Dimeads ("we", "us"), a digital marketing agency located at 9688 Leslie St, Unit 5, Richmond Hill, Ontario L4B 4C4, Canada.

The Dashboard is a private portal for our clients. Accounts are created only by invitation, and each client can see only the information about their own business.

We are responsible for the personal information we hold. Our Privacy Officer is accountable for our compliance with this policy and with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and can be reached at info@dimeads.com.

Account information. Your name, business email address (and any additional email addresses added to your account), your role, your profile photo if you upload one, and the date your account was created. Your password is never stored as typed: we keep only a one-way cryptographic hash of it.

Sign-in and security information. When you sign in we record a session with its start and expiry time, the IP address and the browser/device description sent by your browser. We use this to keep you signed in, to protect your account, and to limit repeated or abusive requests.

Information about your business. Details we hold about our engagement with you in our customer relationship management (CRM) system, such as your company name, website and contacts, so the Dashboard can show the right information to the right client.

Requests you send us. When you submit a request in the Dashboard, we collect its title, details, type and priority, together with your email address, and store it in our CRM so our team can work on it. Our replies to you are stored with it.

Marketing performance data from Google services. If we manage these services for you, the Dashboard shows reports from:

• Google Search Console: how your website appears in Google Search, including search queries, clicks, impressions, average position, top pages and sitemap status;
• Google Analytics: aggregated website traffic and engagement figures;
• Google Ads: campaign performance, such as spend, clicks, conversions and search terms;
• Google PageSpeed Insights: public speed and quality tests of your website's home page.

This is described in more detail in section 4. We do not ask you to sign in with your Google account, and the Dashboard does not access your personal Google account, email, files or contacts.

We use the information above only to:

• create and manage your account, and let you sign in securely;
• show you reports about your own marketing, website and requests;
• receive, track and respond to the requests you send us;
• send you service emails, such as your invitation, password resets and messages about your account (we do not send marketing email from the Dashboard);
• protect the Dashboard, our clients and us against misuse, fraud and security incidents;
• maintain and improve the Dashboard, using aggregated or de-identified information where possible;
• meet our legal obligations.

We do not sell personal information, and we do not use it, or any data from Google services, for advertising or to build profiles of you.

The Dashboard uses Google APIs (Google Search Console API, Google Analytics Data and Admin APIs, Google Ads API and PageSpeed Insights API) to show you reports about the Google properties and advertising accounts we manage for your business.

• How we access it. Access is read-only, through credentials owned by Dimeads that you or we have granted access to your properties (for example, a service account added to your Search Console property, or your Ads account linked to our manager account). The Dashboard never creates, changes or deletes anything in your Google accounts.
• How we use it. Only to display your reports to you and to our staff who manage your account, and to check that each property is connected to the right client.
• How we store it. Report results are kept in temporary server memory for up to 24 hours so pages load quickly, and are then discarded. We keep a record of which property IDs belong to which client, and when each was last checked.
• How we share it. We do not share it with anyone outside Dimeads, except the service providers that host the Dashboard (section 6), or where the law requires it. It is never visible to other clients.

Dimeads's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The Dashboard uses only the cookies it needs to work:

• Sign-in cookies that keep you signed in and let you switch between accounts on the same device. They are protected so that scripts on the page cannot read them.
• Preference cookies that remember display choices such as light or dark mode and the sidebar layout.

We do not use advertising cookies, analytics or tracking cookies, or third-party trackers in the Dashboard.

We use a small number of service providers to run the Dashboard. They process information only on our instructions and only to provide their service to us:

• Railway: hosting for the Dashboard, its database and our CRM;
• Google: the Google API services described in section 4;
• Resend: delivery of invitation and password-reset emails.

These providers may store or process information outside Canada, including in the United States. While it is there, it is protected by contracts and safeguards, but it may be accessible to courts, law enforcement and national security authorities of that country under its laws.

We may also disclose information where required by law, to protect the rights and safety of our clients or us, or as part of a sale or reorganisation of our business, in which case the information would remain subject to this policy.

• Account information: for as long as you have an account, and deleted when your account is deleted.
• Sign-in sessions: they expire after 30 days of inactivity and are deleted with your account.
• Google report results: up to 24 hours in temporary server memory (see section 4).
• Requests and our replies: for as long as we provide services to you, and afterwards for as long as we need them as business records or to meet legal and tax obligations.
• Invitations: an unused invitation link expires after 7 days.

We use safeguards appropriate to the sensitivity of the information, including:

• encrypted connections (HTTPS) for all traffic to and from the Dashboard;
• one-way hashing of passwords, and limits on repeated sign-in attempts;
• server-side checks on every request, so each client can only ever access their own information;
• read-only access to Google services, with credentials kept on our servers and never sent to browsers;
• access to administrative tools limited to authorised Dimeads staff.

No system is perfectly secure. If a breach of security safeguards involving your personal information creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required by law.

You may ask us to:

• tell you what personal information we hold about you and how it is used, and give you a copy;
• correct information that is inaccurate or incomplete;
• delete your account, or withdraw your consent to a particular use, subject to legal or contractual limits.

You can update your name, photo and password yourself on the Account page. For anything else, email info@dimeads.com. We may need to confirm your identity first, and we will respond within 30 days. If withdrawing consent means we can no longer provide part of the Dashboard, we will tell you.

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

The Dashboard is a business service for our clients and is not intended for anyone under 18. We do not knowingly collect personal information from children.

We will update this policy when the Dashboard or our practices change, and show the new date at the top of this page. If a change materially affects how we use your personal information, we will tell you by email or in the Dashboard before it takes effect.

Questions, requests or complaints about privacy:

Privacy Officer, 1000439010 Ontario Inc. (Dimeads)
9688 Leslie St, Unit 5
Richmond Hill, Ontario L4B 4C4
Canada
info@dimeads.com

See also our Terms of Service.