Privacy policy

Boost-OS (also called the CB OS Command Center) is operated by Tic Toc Advertising, Inc., doing business as Community Boost Consulting (“Community Boost,” “we,” “us”). It is Community Boost’s internal operations app, at boost-os.onrender.com. It is used only by Community Boost staff, who sign in with their Community Boost Google accounts, to manage marketing work for the nonprofit and business clients Community Boost serves.

This policy explains what Boost-OS collects, how it is used and shared, and the choices available. It adds to Community Boost’s general privacy policy, which covers our public websites and events. Where the two differ for Boost-OS, this policy applies.

1. Information we collect

From staff who sign in

• Your Google account name, email address and profile picture, received through Google Sign-In (the openid, email and profile permissions). Only @communityboost.org accounts are admitted.
• What you do in the app: pages opened, records you create or change, approvals you give, and the time of each, kept as an audit trail.
• Technical information such as IP address, browser type and session cookies, used to keep you signed in and the app secure.

About Community Boost’s clients

Business information Community Boost needs to serve each client: organization and contact details, goals, budgets, contracts, invoices and campaign plans. This is entered by staff or read from the business systems described below.

Google user data

When an authorized Community Boost administrator connects Google services, Boost-OS requests only these permissions:

• Google Ads (https://www.googleapis.com/auth/adwords): to read the structure and performance of the client Google Ads accounts managed under Community Boost’s manager account — campaigns, budgets, ad groups, keywords, ads, assets, conversion actions, policy status and metrics such as impressions, clicks, cost and conversions — and to make changes to those accounts only when a signed-in staff member with permission reviews and approves each change in the app.
• Google Analytics (https://www.googleapis.com/auth/analytics.readonly): read-only reports of sessions and key events from paid-search traffic in a client’s Google Analytics 4 property, to check that Google Ads and Analytics agree. Boost-OS cannot change anything in Google Analytics.

2. How we use information

• To operate the app: sign-in, access control and the records staff rely on.
• To deliver client services: health checks, budget pacing, compliance checklists, recommendations, change drafts and monthly reports on the client’s own accounts.
• To keep an audit trail of who approved and applied each change, and to secure the app.
• To improve the app’s own features and fix problems.

Boost-OS never changes or deletes anything in a Google Ads account or Google Analytics property on its own. Every change is drafted for review, and is sent to Google only when a signed-in staff member with permission approves it.

3. Use of Google user data and Limited Use

Boost-OS’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Google user data is used only to provide and improve the user-facing features described above, for the client accounts it belongs to.
• Google user data is not sold, and is not used for advertising, retargeting or profiling.
• Google user data is not used to develop, improve or train generalized AI or machine learning models.
• People at Community Boost read Google user data only for the client work it supports, for security, to comply with law, or with the client’s agreement.
• Google user data is transferred to others only as needed to provide those features (see section 5), for security, or to comply with law.

4. AI features

Some features, such as drafting ad copy or a monthly report summary, send the relevant figures to an AI model provider (for example Anthropic, OpenAI or Google) when a staff member asks for a draft. These providers process the data only to return that result, under terms that do not allow them to train their models on it. AI output is always a draft that a person reviews; the app shows which figures each draft was based on.

5. How we share information

We do not sell personal information or Google user data. We share information only with:

• Service providers who run the app for us, under contract and only for that purpose: hosting (Render), database and authentication (Supabase), and the AI providers above.
• The client the information belongs to, for example in their reports.
• Authorities or other parties when required by law, or to protect the rights, property or safety of Community Boost, our clients or others.
• A successor in a merger, acquisition or sale of assets, which would remain bound by this policy for the data it receives.

6. Storage, security and retention

Data is stored in the United States. Google access credentials are encrypted at rest, connections use HTTPS, and access inside the app is limited by role. No method of storage or transmission is perfectly secure, but we work to protect the data we hold.

Google Ads and Analytics results are cached for a short time so pages load quickly, and reports, approvals and change records are kept for as long as Community Boost serves the client, to support the client’s records. Google credentials are kept until the connection is disconnected.

7. Your choices and deleting data

• An administrator can disconnect Google Ads and Analytics in Boost-OS at any time, which removes the stored credential. Access can also be revoked from your Google account at myaccount.google.com/permissions.
• To ask what we hold, correct it, or delete stored Google user data or other personal information, email support@communityboost.org. We respond within 30 days.
• Residents of states with privacy laws, including California, have the rights described in our general privacy policy, and we will not treat anyone differently for using them.

8. Cookies

Boost-OS uses only the cookies needed to keep you signed in and secure. It does not use advertising or cross-site tracking cookies.

9. Children

Boost-OS is a workplace tool and is not directed to anyone under 16.

10. Changes to this policy

We may update this policy. The date at the top shows the latest version, and we will tell staff about material changes in the app.

11. Contact us

Tic Toc Advertising, Inc. d/b/a Community Boost Consulting
1455 Frazee Road, Suite 500, San Diego, CA 92108
support@communityboost.org · (866) 903-3635