EM Space Privacy Policy

Effective date: 16 October 2026 · Last updated: 16 October 2026

This policy explains how EM Space ("EM Space", "we", "us") handles information it receives from Google APIs. EM Space is an internal marketing platform operated by Edward Martin, Inc. ("Edward Martin"). Only Edward Martin staff use it, and only to manage and report on Edward Martin's own advertising and search presence. Read what EM Space is and does.

This policy covers EM Space only. The Edward Martin website privacy notice covers edwardmartin.com and our shopping services. Where the two differ about data EM Space receives from Google, this policy applies.

1. Google user data EM Space accesses

An authorized Edward Martin staff member signs in with Google and approves access for each service. EM Space asks only for the access below, and uses it only on Edward Martin's own accounts.

Google also gives EM Space OAuth access and refresh tokens so that it can keep making these requests. EM Space does not request access to Gmail, Google Drive, Calendar or Contacts, and it does not ask for anyone's Google profile or contacts.

Most of the data is business data about Edward Martin's own accounts, such as campaign settings, budgets and aggregated performance figures. Search Console and Google Analytics reports are aggregated and do not identify individual visitors.

2. How EM Space uses the data

EM Space uses data from Google APIs only to provide its features to Edward Martin staff:

• showing performance reports and dashboards for Edward Martin's own marketing;
• working out which campaigns bring in sales, and recommending or making budget changes within limits Edward Martin has approved;
• preparing test ads and keyword lists for Edward Martin's own campaigns (always created paused);
• keeping Edward Martin's product listings accurate;
• keeping the service secure, fixing problems, and meeting legal obligations.

Separately, EM Space may send Edward Martin's own first-party data, such as conversions and hashed customer lists from Edward Martin's systems, to Edward Martin's own Google Ads account, under Google's policies for those features. That data comes from Edward Martin, not from Google APIs.

What we never do with Google user data

• We never sell it.
• We never use or transfer it to serve advertising, including retargeting, personalized or interest-based ads.
• We never use it to build user profiles for unrelated purposes, or to decide creditworthiness or lending.
• We never use it to develop, improve or train generalized or non-personalized AI or machine-learning models.
• We never transfer it to data brokers, advertising platforms or information resellers.

3. Limited Use disclosure

EM Space's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

EM Space uses Google user data only to provide or improve the user-facing features described above. It transfers that data only when needed to provide those features, for security, to comply with applicable law, or as part of a merger, acquisition or sale of assets after notice to users.

4. Who can see the data

Only authorized Edward Martin staff who use EM Space for their work can see the reports and data in it. People do not read Google user data except:

• with the affirmative agreement of the user concerned;
• when it is needed for security, for example to investigate abuse;
• to comply with applicable law; or
• when the data has been aggregated and anonymized and is used for internal operations.

5. How the data is stored and protected

• EM Space runs on systems Edward Martin controls. Its main hosting is Amazon Web Services in the United States.
• All data is encrypted in transit (HTTPS/TLS) and at rest. OAuth tokens are kept in an encrypted secrets store (AWS Secrets Manager) or encrypted storage, never in source code.
• Access to EM Space requires an Edward Martin company sign-in, and access to the underlying systems is restricted to authorized staff.

6. Sharing

We do not sell, rent or trade Google user data. We share it only:

• with service providers that host or operate EM Space on our behalf, such as Amazon Web Services, under contracts that require them to protect it and to use it only to provide their services to us;
• when the law requires it, or to protect the rights, property or safety of Edward Martin, our customers or others; or
• as part of a merger, acquisition or sale of assets, after giving notice, and subject to this policy.

7. Retention and deletion

• OAuth tokens are kept only while a Google connection is active. They are deleted when the connection is removed in EM Space, and they stop working as soon as access is revoked in your Google Account.
• Reports and figures drawn from Edward Martin's Google accounts are kept for as long as Edward Martin needs them for business reporting and record-keeping, then deleted.
• To ask us to delete data EM Space received from Google, email the contact below. We will confirm and complete the deletion within 30 days, unless the law requires us to keep it.

8. How to revoke access

You can remove EM Space's access to your Google account at any time on your Google Account's Third-party apps & services page (myaccount.google.com/permissions): choose EM Space, then remove access. EM Space can then no longer get new data from Google with that sign-in. Removing access does not delete data already stored. To have that deleted, contact us as described in section 7.

9. Children

EM Space is a business tool for Edward Martin staff. It is not directed at children and does not knowingly collect data about children.

10. Changes to this policy

If we change this policy, we will post the new version on this page and update the date at the top. We will not use Google user data in a materially different way without first updating this policy and, where required, asking for consent again.

11. Contact