NAE Core

Legal

Privacy Policy

In effect from 14 November 2026.

Contents

  1. Who this policy is from
  2. What this policy covers
  3. This website
  4. Information received from Google
  5. Retention
  6. Security
  7. Choices and requests
  8. Children
  9. Changes to this policy
  10. Contact

1. Who this policy is from

NAE Core is the name of a software platform. It is not presented here as a separate company.

NAE Core is operated by The Ramos Trading Inc. In this policy, The Ramos Trading Inc. is referred to as "we".

We are responsible for this website and for the information we handle for our own purposes, such as messages sent to the contact address. When an organization connects its own accounts to the platform, including its Google accounts, we use the information we receive only to provide the platform to that organization, as described in this policy.

2. What this policy covers

This policy covers:

  • this public website; and
  • the information that the NAE Core platform receives from Google when an organization connects a Google service.

The NAE Core platform is in development and is not commercially available. It is available only to organizations and people who have been given access. Other information handled inside the platform is outside the scope of this policy.

3. This website

This website is informational. It:

  • has no accounts, sign-in or forms;
  • sets no cookies;
  • uses no analytics, advertising or tracking tools; and
  • loads no content from other sites.

This website is hosted on Microsoft Azure. To deliver pages and protect the service, the hosting provider processes technical information such as the requesting internet address and the time of the request.

If you write to the contact address in section 10, we use what you send only to respond to you. We keep these messages in our support mailbox for our business records. They are not deleted automatically.

4. Information received from Google

An organization can choose to connect two Google services. A connection is made only when an authorized person at that organization approves it on Google's own sign-in page. In both cases the platform only reads information, and its software refuses every operation that would change anything on Google.

Which Google services

  • Google Ads (read-only reporting). Google Ads offers one access permission, which would also allow changes. We use it only to read the connected organization's own advertising account: the account's currency and time zone, its list of campaigns, and campaign performance figures. We do not create, change, pause or delete campaigns, budgets, ads or keywords. This connection is currently used, with limited access, by one pilot organization for its own account.
  • Google Business Profile (read-only). Google Business Profile also offers one access permission, which would also allow changes. The platform uses it only to read the connected organization's own business accounts and locations (so that the organization can choose which location to connect), the chosen location's profile (such as its name, phone number, address, categories, website and opening hours) and its posts. It does not create, edit, delete, publish, upload or reply to anything on Google. One pilot organization has authorized access to Google Business Profile for its own account. This integration is limited to the pilot and is not generally available.

What we store and what we do not

  • Stored: the access credentials Google issues for the connection, kept in encrypted form; the identifier of the connected advertising account, or of the business location, its parent business account and the location's name; the advertising account's currency and time zone; the person who made the connection; and the connection's status, technical details of the connection, and the time of its last success or error.
  • Not stored: campaign figures, the rest of a location's profile, the list of accounts and locations, and posts. They are retrieved from Google when an authorized person at the organization views them, and are shown only to that person.

How it is used and who can see it

  • Use: only to show the organization its own information in the platform.
  • Who can see it: only people who have been given access to the connected organization and the relevant permission in the platform. The operator's administrators grant this access.
  • Information received from Google is not sold, not used for advertising, not used to train artificial intelligence models, and not sent to artificial intelligence service providers.
  • Apart from the organization's own users of the platform, no one at The Ramos Trading Inc. reads it, except with the organization's affirmative agreement for specific information, when necessary for security purposes (for example, investigating a bug or abuse), or to comply with applicable law.
  • We will ask the organization for its consent before using information received from Google in a new way.

NAE Core's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Sharing

We do not sell or transfer information received from Google, except to Microsoft Azure, which hosts the platform's software, database and encryption keys on our behalf, or when this is necessary for security purposes or to comply with the law.

Removing access and deleting information

The platform does not offer a way to disconnect a Google service from inside the platform. Access can be removed at any time in the security settings of the Google Account that granted it. From then on the platform can no longer read that organization's Google information.

Removing access does not by itself delete what is stored (listed above). To have it deleted, an authorized person at the organization can write to the contact address in section 10. We verify the request with the organization, delete the stored credentials, identifiers and connection records by hand, and confirm in writing when this is done. The platform does not delete this information automatically.

NAE Core is not affiliated with, endorsed by or certified by Google. Google, Google Ads and Google Business Profile are trademarks of Google.

5. Retention

  • Information shown from Google is not stored, so it is not retained.
  • Stored connection data is kept until it is deleted as described in section 4.
  • Backup copies of the platform's database are made automatically, so that the database can be restored to its state at any point in the previous 7 days. Information deleted from the database can remain in backup copies until they expire.
  • Technical logs of requests and errors are kept for 30 days. They do not contain campaign figures, profile details or posts received from Google.
  • Connection authorization records (a random reference, the organization, the person who started the connection, and times) are kept until the connection's data is deleted as described in section 4; records of connection attempts that were not completed are not yet deleted automatically. They contain no information received from Google.

6. Security

This website and the platform's connections to Google use encrypted (HTTPS) connections. Access credentials for connected services are encrypted by the platform before they are stored. Access to an organization's information is limited by role-based permissions, and the software allows only read operations on connected Google services. No method of storage or transmission is completely secure.

7. Choices and requests

You can ask to access, correct or delete personal information we hold about you, or to receive a copy of it, by writing to the contact address in section 10. We will verify the request and respond within 45 days, and if we cannot fulfil it, we will tell you why. If you disagree with our response, you can ask us to reconsider it by replying to it. Which rights apply depends on the law that applies to you.

8. Children

This website and the platform are intended for businesses and the people who work for them. They are not directed to children, and we do not knowingly collect personal information from children under 13.

9. Changes to this policy

When this policy changes, we will publish the new version on this page with a new effective date.

10. Contact

Contact: support@naecore.com