Privacy Policy

Effective Date: November 7, 2025 | Last Updated: September 12, 2026

Introduction

ABAOps ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect information in connection with our managed Google Ads service for ABA providers – account review and setup, measurement verification, campaign management, and reporting, supported by our analysis tools.

Information We Collect

Information You Provide

• Location data: ZIP codes, cities, or addresses you enter to search for keyword data
• Contact information: Email address (if you choose to provide it for reports or account creation)
• Account information: Name, organization details (if you create an account)
• Advertising inquiry records from a practice's Google Ads account: when a call or form conversion happened, which campaign drove it, and for calls the duration and the caller's area code. We never receive caller phone numbers, form contents, call logs or intake records.

Automatically Collected Information

• Usage data: Pages visited, features used, search queries
• Technical data: IP address, browser type, device type, operating system
• Performance data: Page load times, error logs (for improving service quality)

Third-Party Data

• Google Ads Keyword Planner data (via DataForSEO): Keyword search volumes, CPC median bid estimates, collected as monthly snapshots across 100 US metros (anonymized market data, not personal information)

How We Use Your Information

We use the collected information to:

1. Provide the service: Review and set up Google Ads accounts, verify that calls and forms are measured correctly, build and manage campaigns, and produce reporting – supported by our analysis tools
2. Improve the platform: Analyze usage patterns to enhance features and fix bugs
3. Communicate with you: Send reports, updates, or respond to inquiries (only if you opt in)
4. Ensure security: Detect and prevent fraud, abuse, or technical issues

Information We Do NOT Collect

• ❌ We do NOT track individual patient or client information
• ❌ We do NOT collect Protected Health Information (PHI)
• ❌ We do NOT sell your data to third parties
• ❌ We do NOT use your searches for advertising purposes

Data Storage and Security

Storage

• No permanent storage of search queries unless you create an account
• Account data stored securely on encrypted servers (Neon/PostgreSQL)

Security Measures

• Encrypted in transit (TLS)
• Encrypted at rest by our database and storage providers
• Role-based access controls

Data Retention

• Account data: Retained while your account is active
• Service and usage records: Retained for operations, troubleshooting, and record-keeping; contact us to request deletion of your data

Third-Party Services

We use the following third-party services:

DataForSEO (Keyword Data)

• Purpose: Collect keyword search volume and CPC data from Google Ads Keyword Planner via monthly snapshots
• Data shared: No user data is shared with DataForSEO; we query aggregate market-level keyword data only
• Their policy: DataForSEO Privacy Policy

Clerk (Authentication)

• Purpose: Secure user sign-in
• Data shared: Email, name, organization details
• Their policy: Clerk Privacy Policy

Vercel (Hosting)

• Purpose: Application hosting and delivery
• Data shared: Standard web traffic data
• Their policy: Vercel Privacy Policy

Neon (Database)

• Purpose: Managed database hosting for application data
• Data shared: Application records described in this policy
• Their policy: Neon Privacy Policy

AI Model Providers (Anthropic and OpenAI)

• Purpose: Automated classification of advertising search terms and preparation of campaign analyses
• Data shared: Business profile details (practice name, location, services) and advertising search-term text from connected or uploaded reports. No family or patient contact information is sent to AI providers.
• Training: Data is sent via commercial APIs, which under the providers' API terms is not used to train their models
• Their policies: Anthropic · OpenAI

Google Ads API

• Purpose: Reading campaign, keyword, and conversion data from Google Ads accounts you connect or invite us into
• Data shared: Requests are scoped to your own account's data
• Their policy: Google Privacy Policy

Resend (Email Delivery)

• Purpose: Sending setup and report emails
• Data shared: Recipient email address and message content
• Their policy: Resend Privacy Policy

Microsoft 365 (Business Email)

• Purpose: Business email for the service
• Data shared: Email correspondence with practices; by policy no call logs, form exports, intake records or caller identities are ever requested or accepted
• Their policy: Microsoft Privacy Statement

Cookies and Tracking

Essential Cookies

We use essential cookies for:

• Session management (keeping you logged in)
• Remembering your preferences
• Security and fraud prevention

Analytics

We use Google Analytics 4 and a Google Ads conversion tag on this website to measure page visits and ad performance. These set Google cookies. We disable them on personalized setup links. We do not run third-party advertising networks beyond Google's measurement, and we do not sell data.

We do NOT use:

• Third-party advertising cookies
• Cross-site tracking
• Social media pixels (without consent)

Your Rights

You have the right to:

• Access: Request a copy of your data
• Correction: Update incorrect information
• Deletion: Request deletion of your account and data
• Opt-out: Unsubscribe from communications
• Portability: Export your data in machine-readable format

To exercise these rights: Contact us at support@abaops.ai

For California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know: You may request details about the categories and specific pieces of personal information we have collected about you
• Right to delete: You may request deletion of your personal information, subject to certain exceptions
• Right to opt-out of sale: We do not sell personal information. We do not share personal information for cross-context behavioral advertising
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights

To submit a CCPA request, contact us at support@abaops.ai. We will verify your identity before processing your request.

For EEA/UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, you have rights under the General Data Protection Regulation (GDPR):

• Legal basis: We process your personal data based on legitimate interest (providing and improving our service), consent (where you opt in to communications), and contractual necessity (when you create an account)
• Right to access, rectification, erasure, restriction, and portability as described above
• Right to object: You may object to processing based on legitimate interest
• Right to lodge a complaint: You may lodge a complaint with your local data protection authority

Data controller: ABAOps, LLC, 2108 N ST, STE N, Sacramento, CA 95816. Contact: support@abaops.ai

Clinical Information

ABAOps is designed so that no clinical information enters the system:

• No clinical data collected: We don't ask for or store diagnoses, clinical records, or insurance member numbers
• Location data only: ZIP codes and cities are used for market analysis
• Secure infrastructure: Encrypted connections and storage
• No contact details of families: we do not receive caller phone numbers or form contents. Our records hold call times, durations and area codes, and form counts.

Important: You are responsible for ensuring your use of the service complies with the privacy requirements that apply to your practice. ABAOps does not make a HIPAA-compliance certification claim.

Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children. If we discover we have collected information from a child under 13, we will delete it immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Sending email notification (if you have an account)

Your continued use after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy:

Email: support@abaops.ai
Company: ABAOps, LLC
Location: 2108 N ST, STE N, Sacramento, CA 95816

Legal Jurisdiction

This Privacy Policy is governed by the laws of California, without regard to conflict of law principles.

Your privacy matters to us. We're committed to protecting your information and being transparent about our practices.