What this website and the Goossens.ai Integrator application do with data, and how you decide what may run.
Oliver Goossens, reachable at ai@goossens.ai.
Two cookies are always set, because the site needs them: lang remembers the
language you chose (English, German or Slovak) for a year, and cf_consent
remembers your cookie choice for 180 days — which categories you allowed, the version of this
policy, the time and a random consent id that does not identify you.
Each choice you make in the cookie settings is also recorded on our own consent service (consent.goossens.ai) as proof of consent: the consent id, the version, your choices, the language, the page, the time, your IP address with its last part removed and a hash of your browser identifier. We keep these records only as long as we need to prove consent, at most three years.
A small counter on our own server records the number of page views without cookies and without storing IP addresses or any other identifier. The server keeps standard technical access logs for security for a limited time.
Nothing below runs before you decide. When you open the site, Google Consent Mode starts with every purpose denied; only what you allow in the cookie banner or in the cookie settings is loaded, through Google Tag Manager (Google Ireland Ltd.), which itself stores nothing about you.
_ga,
_ga_* (up to 2 years), _clck (1 year), _clsk (1 day)._fbp,
_fbc (3 months).The legal basis is your consent (Art. 6(1)(a) GDPR). These providers may process data in the United States; they are certified under the EU–US Data Privacy Framework. You can withdraw or change your consent at any time with the “Cookie settings” link at the bottom of every page; the site then deletes the cookies of the withdrawn categories and stops the tags.
Goossens.ai Integrator is a private integration application operated by Oliver Goossens. It connects business systems we operate (for example the back office of an online shop) to Google services such as Google Ads, Google Analytics, Google Tag Manager, Search Console and the Data Manager API. It is used only by the people who run those businesses; it is not offered to the public.
When an authorised person grants access, the application receives the Google data the granted scopes allow — for example advertising accounts, campaign and conversion data, analytics reports and tag configurations — and uses it only to measure and manage those businesses' own marketing: reporting, sending conversion events of their own customers' orders, and keeping tracking configuration consistent.
Data is processed on servers operated for these businesses and is not sold, not shared with third parties for their own purposes, not used for advertising profiles and not used to train general-purpose AI models. Access tokens are stored encrypted and can be revoked at any time in the Google account settings (Security → Third-party connections).
Goossens.ai Integrator's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
You can ask what data we hold about you, have it corrected or deleted, restrict or object to its processing, receive it in a portable form, and withdraw a consent at any time without affecting what happened before, by writing to ai@goossens.ai. You may also contact your data protection authority.
The Goossens.ai application (formerly Omni-App) is operated by inMotionMedia s. r. o., Záhradnícka 7, 811 07 Bratislava, Slovakia, company ID 44555253. Contact: privacy@goossens.ai.
When an authorised administrator connects business assets, we process the administrator or business identifier, Facebook Page and Instagram professional-account identifiers, names, granted permissions, media, posts, captions, campaigns, publication status and the engagement, advertising or diagnostic information needed for the requested operation. Access tokens and connection settings are stored encrypted. We never ask for a Facebook or Instagram password.
Data is used only for authorised publishing, linking organic posts to ads, managing authorised campaigns, reporting and troubleshooting. Content and instructions for these operations go to Meta Platforms Ireland Limited through its APIs. We do not sell Meta data, build unrelated advertising profiles or disclose it for another party's independent marketing.
Requested operations rely on the arrangement with the user or asset owner and the legitimate interest in operating a secure business service (Art. 6(1)(b) and (f) GDPR); consent applies where required. Hosting and database providers process information needed to operate the service. Transfers outside the EEA use applicable adequacy decisions or standard contractual clauses where required.
Tokens remain until revoked, disconnected, replaced or invalidated. Connection identifiers and operational receipts remain while needed for the integration and afterwards only for the shortest applicable operational, security, audit or legal period. Disconnecting the app does not remove content already published on Meta. You may request access, correction, deletion, restriction, portability, object or withdraw consent using the contact above; you may complain to the Slovak data protection authority. These integrations perform no automated decision-making with legal effects.
This is a private business operations service for authorised collaborators and explicitly connected assets. Connect or instruct operations only for assets you own or are authorised to manage. Respect platform terms, advertising standards, intellectual-property rules and applicable law. Never submit passwords, tokens or app secrets through support requests.
Publishing, campaign and reporting operations require an authorised instruction or approved automation. Review content, targeting, budgets, schedules and activation before publication. Advertising charges and delivery are governed by Meta's billing and delivery rules.
Protect administrator access and report suspected compromise. Unlawful, misleading, malicious or unauthorised use is prohibited. An integration may be suspended to protect accounts, comply with law or platform rules, or contain a security incident.
External platforms control their availability, reviews and delivery. We take reasonable care to validate operations and report failures, without guaranteeing uninterrupted service, reach, engagement or advertising results. The asset owner remains responsible for submitted content and instructions. Nothing excludes liability that cannot legally be excluded; to the extent permitted by law, the operator is not responsible for indirect loss or actions of third-party platforms. Slovak law applies without limiting mandatory rights.
Remove Goossens.ai (formerly Omni-App) in your Facebook or Meta Business Integration settings, or ask your business administrator to disconnect it. This stops future API access; stored operational records require a separate deletion request.
Email privacy@goossens.ai with the subject “Data deletion – Goossens.ai”. State the business and Page name or URL, Instagram username, and user or business ID if known. Specify the connection or assets you are authorised to manage. Do not send passwords, tokens, app secrets, payment-card data or private messages. We may request safe proof of your authority.
We remove active tokens, connection settings and associated identifiers, publication receipts, campaign metadata and diagnostic records under our control, except information that must be retained for a legal, security, accounting or dispute purpose. We confirm receipt, process a verified request without undue delay and notify you of deletion or explain any required restriction. Your Facebook or Instagram account, published content and Meta's own records must be managed through Meta; they are not automatically deleted by this request.