Jiumiai-Research & JMAI Privacy Policy

01

Specific data processed by Research

Research inputs: questions, product or brand names, seed keywords, website addresses, target countries or regions, and selected attachments and extracted text are used to understand your request, construct queries, generate reports and support follow-up discussion. Browsing the public overview does not give us access to your personal Google Ads account.

Google Ads keyword data: queries use the platform-authorized account and receive the keyword ideas, average monthly searches, monthly search volumes, advertising competition levels or indices, and top-of-page bid ranges actually returned by Google. Some metrics may be unavailable. These are keyword research metrics, not ordinary users’ personal advertising budgets, invoices or campaign histories. This research flow does not create ads, modify campaigns, change budgets, or request Gmail, contacts, Google Drive files or personal calendars.

Connection data: the platform configures the administrator-authorized Google Ads customer identifier, manager identifier where needed, OAuth client information and refresh token. The refresh token obtains a short-lived access token from Google; the current keyword collection implementation does not persist that short-lived token. These server credentials authenticate API requests and are not ordinary research inputs, AI prompts or shared-report content.

Task and output data: task identifiers, status, research inputs, collected results, reports and necessary usage records support history, follow-up research, billing reconciliation and support. Google Trends relative interest and third-party search results are identified separately and are not presented as Google Ads absolute search volumes.

02

Google authorization, availability and revocation

The Google Ads OAuth connection for Jiumiai-Research uses the https://www.googleapis.com/auth/adwords scope. Although this scope includes Google Ads management capabilities, the disclosed research flow uses it only for keyword research and necessary geographic queries. It does not offer advertising campaign management on users’ behalf. We do not describe this broader OAuth scope as a read-only permission.

An administrator authorized to manage the platform’s Google Ads account grants access. Ordinary research users sign in to JMAI and submit a question; they do not need their own advertising customer account or provide a Google password to us. GKP requires API access, valid authorization and completed connection configuration. We do not claim to have obtained real GKP data when those conditions are unmet.

The authorizing administrator can visit https://myaccount.google.com/connections, select the application and remove access. They can also contact leo@jiumi.com.cn regarding connection configuration stored by the platform. Revocation stops subsequent API access under that authorization and may interrupt ongoing tasks. Revocation and deletion of saved research reports are separate actions; request report or attachment deletion separately.

JiumiGrow’s GA4 analytics.readonly authorization belongs to a separate application flow. Using Jiumiai-Research does not automatically grant or extend GA4 permissions. New data categories or purposes will be disclosed and, where required, authorized or consented to before use.

03

Recipients and AI processing

Google receives the keywords, geographic targeting and other parameters needed for keyword queries, together with server credentials required to authenticate requests. Entire research attachments are not submitted as inputs to the Google Ads keyword endpoint.

Search and trend services: depending on enabled sources, Google Trends or search-data services such as SerpApi may receive relevant keywords, regions and query parameters to return evidence. These sources are identified separately from the Google Ads OAuth connection.

AI analysis services: to fulfill your request, the selected model and its configured inference service may receive the research question, necessary text or images from selected attachments, keyword metrics and search evidence. They return intent analysis, reports or follow-up answers. The actual processor depends on the model and integration configuration in use. Ads authorization tokens and client secrets are not analysis inputs. AI-assisted research does not mean your Google data is used to train general-purpose models; the restrictions also cover derived data.

Infrastructure and support: hosting, database and object-storage services process tasks, reports and attachments needed to operate the service. Access is limited to service delivery, support you request, security investigation and legal obligations. Google-data transfers and human access must also meet the Limited Use restrictions below.

Report recipients: enabling sharing lets people with the link read the shared report’s conclusions and cited data. A share link is not recipient-specific access control. Check for confidential content before sharing. Disabling sharing stops subsequent public access through the link, but cannot recall previously downloaded, captured or copied content. We do not sell Google user data or provide it to advertising platforms, data brokers or for credit assessment.

04

Research retention and deletion requests

Purpose and scope: research inputs, selected attachments, collected results and reports support delivery and history. Task status, usage and necessary billing records support troubleshooting and reconciliation. Platform connection configuration is retained while the connection is needed. Retention depends on the data category, service needs, legal obligations and dispute resolution. There is currently no single automatic erasure schedule covering all categories.

How to request deletion: email leo@jiumi.com.cn with the subject “Jiumiai-Research data deletion.” Identify your platform account, relevant task or report identifiers and the requested scope: inputs, attachments, reports or the entire account. To stop public access alone, first disable sharing in report settings. Do not send passwords, tokens or Google client secrets.

Verification and handling: we verify your authority over the account or records and may request the minimum additional information needed. We then process the confirmed deletion scope. If records must be retained by law or for necessary dispute resolution, we explain their categories, reasons and applicable restrictions. Processing time depends on identity verification, request scope and necessary retention obligations. You may ask for status through the same email address.

Revocation versus deletion: revoking Google access does not automatically erase generated reports, and deleting a report does not revoke the administrator’s Google authorization. Specify both requests when you need the connection stopped and records removed. Deletion or disabled sharing cannot control copies previously saved by third parties.

05

Research data: collection, use, sharing and deletion

Your research questions, keywords, countries or regions, website addresses and selected attachments define the research task. Google Ads requests include keywords and targeting parameters; returned historical keyword metrics are used to analyze search demand. The platform administrator-authorized Ads account identifier and OAuth credentials authenticate requests. They are not ordinary users' advertising account data and are not used to read those users' advertising budgets or invoices.

Google Trends interest and Google Ads keyword metrics are distinct sources. Reports should distinguish actual sources, gaps and estimates. Keyword results, research requests and selected materials may be sent to the AI analysis provider configured for the feature to generate the user's report. Authorization tokens and client secrets must not be sent to models or displayed in shared reports. Google API data is not used to train general-purpose AI models.

Accounts, tasks, research results and reports are stored for history, support and billing reconciliation. Report sharing may allow link holders to read report content. Avoid submitting information you do not want shared and disable sharing when needed. Retention depends on service, legal and dispute-resolution needs; no uniform automatic deletion period is promised.

To request deletion of research inputs, attachments, reports or an account, email leo@jiumi.com.cn with your account and relevant task or report details. We verify your authority, process the request and explain any legally required retention. Revoking Google access prevents subsequent authorized access but does not automatically erase saved reports; request deletion separately. Do not email passwords or complete tokens.

06

Jiumiai-Research application and Google data flow

Jiumiai-Research is our Google connection application for keyword and market research in JMAI. The separate JiumiGrow application serves GA4 analytics in the growth platform. Neither application is a Google product. After authorization, the growth platform reads aggregate statistics for the selected GA4 property to show website traffic and channel performance. JMAI uses the platform-authorized Google Ads account for keyword research. GKP becomes available only after access approval and connection configuration; trend estimates are not GKP data.

Keyword research results may be provided with the research request and selected attachments to the AI analysis service configured for that feature to produce the requested report. Reports and research results may be retained for history. GA4 synchronization is a separate flow: connecting GA4 does not automatically send its analytics into report generation. OAuth credentials are not included in reports or model prompts.

We do not use Google APIs or data obtained through them to create non-consensual intimate imagery, and prohibit such use of the relevant services.

07

Scope and operator

This policy explains how 深圳市前海九米信息技术有限公司 processes information for jiumiai.com (JMAI) and the growth platform at jiumiqqt.com and grow.jiumiqqt.com. Jiumiai-Research serves JMAI research, while JiumiGrow serves growth-platform GA4 analytics; their data handling is described separately here. The information processed depends on the features you use or authorize.

08

Information we process

Depending on your use, we process account and contact information, login and security records, and the keywords, website addresses, product information, images, videos, documents and prompts you submit, together with generated reports and media. We also process task status, usage, order and billing records to provide history, troubleshoot problems and settle charges. Submit only material you are authorized to use and avoid unnecessary sensitive personal information.

09

Why we process information

We use information to provide sign-in, content analysis and generation, website analytics, keyword research, saved results and sharing, support, billing and security. Where applicable law requires consent, we process information on that basis; other processing may be necessary to provide the service, comply with legal obligations or rely on another basis permitted by applicable law. Optional Google connections and analysis features are your choice.

10

Growth platform: Google Analytics 4

When you connect GA4, the growth platform requests the read-only analytics.readonly scope and reads the names and identifiers of accessible accounts and properties so you can choose a website property. Synchronization reads aggregate statistics for the selected website, including active users, sessions, page views, key events, daily trends and source/medium. Current reports cover the last 30 days through yesterday. This path does not request Gmail, contacts or individual visitor identities, and does not invoke generative AI.

To maintain authorized synchronization, the server stores connection information such as OAuth access and refresh tokens and granted scopes; credentials are stored encrypted. You may disable synchronization or disconnect. Disconnecting clears connection credentials and stops synchronization but preserves the latest successful report and historical snapshots. It does not revoke authorization at Google or automatically erase historical analytics.

11

JMAI: Google Ads keyword research

The Google Keyword Planner (GKP) integration uses the platform’s configured and authorized Google Ads account. It processes research inputs such as keywords and target locations to obtain search volumes, competition, bid ranges and related keywords. Individual users are not required to authorize their own Google Ads accounts. The current feature does not create advertisements or change advertising budgets. Available sources are identified by the feature; estimated data is not equivalent to original Google Ads metrics.

12

Google data use restrictions

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google user data and derived data are used only to provide or improve the clearly disclosed user-facing features you use. They are not sold or used for personalized advertising, credit assessment or training general-purpose AI models. Transfers and access are limited to what is necessary for those features, your consent, security, legal compliance or other limited circumstances permitted by that policy. Human access is subject to the same policy restrictions.

13

Service providers and AI processing

To deliver the features you select, necessary inputs may be processed by model and inference relay providers, search and data services, cloud hosting and object storage, or authentication and messaging providers. For example, Google provides the analytics and keyword services described above, and search or trends features may use SerpApi. Providers and transmitted information depend on the feature and configuration. Provider rules for ordinary AI inputs and outputs may differ; this policy does not promise a uniform retention period or training policy across all providers. Google user data remains subject to the preceding restrictions. Information may also be disclosed where legally required or necessary to protect security and lawful rights.

14

Reports and public sharing

Saved reports and media are available for later review. Some reports receive an enabled sharing link when created; anyone who possesses that link may view the report without signing in. Review content before sharing and avoid information that should not be public. Use available disable-sharing or deletion controls, or contact us for assistance. Disabling a link cannot retrieve copies already downloaded or copied by others.

15

Cookies and local storage

We use cookies and similar technologies for sign-in, security verification and necessary service state. Browser storage may also retain display preferences and creative drafts. You can manage or clear this information through your browser settings. Clearing it may sign you out or remove local drafts, but does not automatically delete server-side reports, media or accounts.

16

Retention, deletion and security

Retention depends on the time needed to provide services, your use of historical records, contractual and legal requirements, and security needs. There is no single automatic deletion date for all information. Analytics retained after disconnecting Google, saved reports and media require separate deletion or a request. Billing, security and dispute records may be retained for legal obligations or legitimate needs; deletion from backups may not occur at the same time as deletion from active systems.

We use measures including access controls, credential protection and transport security to reduce risk. No network or storage system can be guaranteed completely secure. Contact us promptly if you identify a risk or suspect unauthorized account use.

17

Processing locations

Service infrastructure and providers may be located in mainland China, Hong Kong and other regions. Some Google connections access Google services through a Singapore relay, and Google and other providers may process information abroad. Relevant features may therefore involve cross-border transfers. We will fulfill applicable notice, consent and other cross-border processing obligations required by law.

18

Your choices and rights

You may decline to connect Google or use optional analysis, or disconnect within the platform. Revoking access in your Google Account’s third-party connections page stops subsequent authorized access, but does not automatically delete historical data already stored by us.

Contact us to request access, correction, a copy or deletion of personal information, account deletion, withdrawal of consent, or other rights under applicable law. We may verify your identity and authority and explain any legally required retention or inability to fulfill a request. Withdrawal does not affect lawful processing before withdrawal. This service is intended for business users; minors should not submit personal information without a guardian’s guidance.

19

Contact and policy updates

For questions about personal information or this policy, contact 深圳市前海九米信息技术有限公司 at leo@jiumi.com.cn. Identify the platform and type of request; do not email passwords or complete authorization tokens.

We may update this policy as services or laws change and will show the updated date here. Material changes will be notified as required, and renewed consent will be obtained where legally necessary. The Chinese and English versions describe the services listed on this page.