Privacy Policy

Dukes Matrix ("we", "our", or "us") operates the dukesmatrix.com website and provides the Dukes Matrix application (the "Service"). This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you use our Service.

Dukes Matrix is developed and operated by Duke Labs Pty Ltd (ABN: 52 604 464 940), based in Melbourne, Australia.

We are committed to protecting your privacy and handling your data in an open and transparent manner. By using our Service, you agree to the collection and use of information in accordance with this policy.

We may collect, or process on behalf of our users, the following categories of data when you use or interact with our Service:

Account Information

When you create an account, we collect your email address and basic profile information from your Google account (name and profile picture) for authentication purposes.

Google Ads Data

With your explicit consent via OAuth authorisation, we access your Google Ads account data including:

• Campaign performance metrics (impressions, clicks, conversions, cost)
• Product-level performance data from Shopping and Performance Max campaigns
• Historical performance data for trend analysis (up to 90 days)
• Campaign and asset group structure information

This data is used solely to provide our BCG Matrix analysis and product segmentation features. We access this data in read-only mode and do not modify your Google Ads campaigns.

Google Merchant Center Data

With your explicit consent via OAuth authorisation, we access your Merchant Center product feed data including product titles, prices, sale prices, categories, product types, availability, brand, and product identifiers to correlate with advertising performance.

Usage Data

We automatically collect certain information when you use our Service, including your IP address, browser type, pages visited, and time spent on pages.

We use the information we collect exclusively to provide and improve the Dukes Matrix application. Specifically, we use your data to:

• Provide, operate, and maintain the Dukes Matrix Service
• Generate BCG Matrix product segmentation and budget allocation recommendations
• Analyse your Google Ads performance data and present insights
• Correlate Merchant Center product data with advertising performance
• Detect performance trends and generate optimisation suggestions
• Communicate with you about updates, support, and service notifications
• Detect and prevent fraud or technical issues

We will not use your Google user data for any purpose other than providing or improving the user-facing features of Dukes Matrix that are visible and accessible to you.

In accordance with Google's API Services User Data Policy, we explicitly confirm that Google user data accessed through our application is never used for any of the following purposes:

• Targeted advertising, personalised advertising, retargeted advertising, or interest-based advertising
• Selling data to third parties or data brokers
• Providing data to information resellers
• Determining credit-worthiness or for lending purposes
• Creating databases or datasets unrelated to the Service
• Training artificial intelligence (AI) or machine learning (ML) models
• Any purpose other than providing or improving the Dukes Matrix application

Dukes Matrix's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request access to data that is necessary to provide and improve our Service
• We do not sell your Google user data to third parties
• We do not use your Google user data for advertising purposes
• We do not transfer your data to third parties except as necessary to provide the Service (see Section 8)
• Human access to your data is limited to what is necessary for support, debugging, and responding to your requests
• We do not use Google user data to train AI or machine learning models

Security procedures are in place to protect the confidentiality, integrity, and availability of your data. We use the following measures:

• Encryption in transit: All data transfers use encrypted connections (HTTPS/TLS)
• Encryption at rest: Data stored in Google Cloud Platform (BigQuery) is encrypted at rest using Google-managed encryption keys
• Access controls: Strict authentication and authorisation controls limit access to all systems
• Service account security: Google Ads and Merchant Center OAuth refresh tokens are stored securely in encrypted databases and are used only to fetch performance data on your behalf
• Infrastructure: We use Google Cloud Platform and Vercel for data processing, storage, and hosting — both of which maintain SOC 2 and ISO 27001 certifications

You can revoke access at any time through your Google Account settings or by disconnecting within our application.

We store your personal information and Google user data for a period of time that is consistent with our business purposes and the provision of our Service:

• Account data: Retained for as long as your account is active
• Google Ads performance data: Historical performance data is retained to provide trend analysis and improve recommendations
• Merchant Center product data: Refreshed daily and retained while your account is active
• OAuth tokens: Retained only while your Google account connection is active

When the data retention period expires or when you request deletion, we will delete or destroy the data in accordance with the following:

• If you disconnect your Google Ads or Merchant Center account, associated OAuth tokens are deleted immediately
• If you delete your account, all associated data (including performance data, product data, and account information) will be deleted within 30 days
• You may request deletion of your data at any time by contacting us at privacy@dukelabs.com.au

We may retain data beyond these periods only where required by law or for legitimate compliance purposes.

We do not sell, trade, or rent your personal information or Google user data to third parties. We do not transfer or disclose your information to third parties for purposes other than providing and improving the Dukes Matrix Service.

We may share your information only in the following limited circumstances:

• Infrastructure Providers: We use Google Cloud Platform (for data processing and storage) and Vercel (for application hosting). These providers process data solely as necessary to operate the Service and are bound by their own data protection obligations. They do not have independent access to use your data.
• Legal Requirements: We may disclose your information if required to do so by law (e.g., in response to a court order or valid legal process) or if we believe disclosure is necessary to protect our legal rights.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. You will be notified of any such change.

We do not transfer Google user data to any third party for the purposes of targeted advertising, selling to data brokers, providing to information resellers, determining credit-worthiness, lending, or any other prohibited purpose.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (see Section 7 for details)
• Disconnect your Google Ads or Merchant Center account at any time
• Revoke OAuth consent through your Google Account settings
• Export your data in a portable format
• Withdraw consent for data processing at any time

To exercise any of these rights, please contact us at privacy@dukelabs.com.au.

We use essential cookies to maintain your session and authentication state. We do not use tracking cookies or third-party advertising cookies. We use Google Analytics to understand aggregate usage patterns; this service may set its own cookies in accordance with Google's Privacy Policy.

Our Service is not intended for use by children under 18 years of age. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. If we make material changes to how we use Google user data, we will notify you via email or a prominent notice within the Service prior to the change taking effect.

If you have any questions about this Privacy Policy or our data handling practices, please contact us:

• Email: privacy@dukelabs.com.au
• Website: www.dukesmatrix.com

Dukes Matrix is operated by Duke Labs Pty Ltd
ABN: 52 604 464 940
Melbourne, Australia