Privacy Policy

Grace Core Corporation
Effective Date: October 7, 2026

Introduction

We use cookies to:

Grace Core Corporation (“Grace Core,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information and business data entrusted to us.

This Privacy Policy describes how we collect, use, process, store, protect, and disclose information through our corporate website, https://gracecore.com, and our GCORE Marketing Intelligence
platform (“GCORE”).

GCORE is a marketing investigation and decision intelligence platform designed to help businesses understand advertising performance, investigate marketing data, evaluate evidence, and identify opportunities for improved marketing decisions.

By using our website or services, you acknowledge the practices described in this Privacy Policy. Where required by applicable law, we obtain consent for the collection, use, or disclosure of personal information.

Information We Collect

Depending on how you interact with Grace Core or GCORE, we may collect the following categories of information.

Information you provide directly

Website usage information

Our website may collect technical information such as IP address, browser type, device information, referring pages, and website activity.

Cookies and similar technologies may be used to support website functionality, understand usage, and improve visitor experience. Additional analytics or marketing technologies will be disclosed where implemented, with consent obtained where legally required.

Connected marketing platform information

When an authorized user connects a supported advertising, analytics, or marketing platform to GCORE, we may access information made available through that platform’s authorized APIs.

Depending on the platform, granted permissions, and available functionality, this may include:
GCORE’s access is governed by the permissions granted by the connecting user, the functionality enabled in GCORE, and the applicable provider’s API requirements.

We seek to limit access to the information necessary to deliver the requested services.

How We Use Information

Grace Core may use collected information to:

We do not use connected advertising-account information for unrelated purposes without appropriate authorization or another applicable legal basis.

Connected Third-Party Platforms and Authorization

GCORE is designed to connect with authorized marketing platforms, which may include:

Google Ads

Google Analytics 4 (GA4)

Google Tag Manager

Meta Ads

LinkedIn Ads

The availability of a particular integration depends on its implementation status, customer
eligibility, authorized permissions, and applicable third-party approvals.

Connections may use OAuth or another provider-authorized authentication mechanism.

When you authorize a connection, GCORE may receive access tokens or other authorization
information permitting access to specified resources.

You remain responsible for ensuring that you have the authority to connect and authorize access to the relevant advertising, analytics, or marketing accounts.

GCORE accesses connected resources only within the permissions granted and subject to applicable platform rules.

An authorized user may request that a connection be disconnected. Revoking provider access may also be possible through the relevant third-party platform.

Disconnecting a service does not necessarily erase previously generated reports or information subject to lawful retention. Data deletion requests are addressed as described below, subject to applicable provider requirements.

Artificial Intelligence and Automated Analysis

GCORE uses software-based analytical processes, which may include artificial intelligence, to investigate marketing information and support decision-making.

These processes may examine advertising metrics, campaign performance, measurement
information, historical results, and other authorized data.

Where necessary to deliver an authorized feature, relevant information may be processed using external technology service providers, including AI service providers, subject to applicable agreements, safeguards, and platform restrictions.

GCORE is designed to support evidence-based marketing analysis and recommendations. Its outputs may require human interpretation, verification, or approval before business decisions are made.

We do not represent that AI-generated analysis will always be accurate or complete.

The use of connected platform data for AI processing must remain consistent with applicable provider permissions, agreements, and data-use restrictions.

Information Sharing and Service Providers

Grace Core may disclose information to
service providers that assist with hosting, infrastructure, authentication,
communications, analytics, security,
customer support, or authorized AI
processing.

Such access must be limited to legitimate business and service-delivery purposes and subject to appropriate contractual, confidentiality, and security protections.

We may also disclose information where
required by applicable law, legal process, or to protect the rights, security, and integrity of our services.

We do not sell personal information or
connected advertising-account data to
data brokers.

We do not disclose one customer’s
confidential advertising-account data to
another unaffiliated customer without
authorization.

Any use or disclosure of platform-sourced data is also subject to the restrictions imposed by that platform.

Data Security

Grace Core recognizes the importance of protecting personal information, account credentials, authorization tokens, and customer marketing data.

We maintain and develop administrative, technical, and organizational safeguards appropriate to the nature and sensitivity of the information processed.

These safeguards are intended to reduce risks of unauthorized access, disclosure, alteration,
misuse, or loss.

No internet-based system or electronic storage method can be guaranteed completely secure.

Users should take reasonable precautions to protect their account credentials and notify us
if they suspect unauthorized access.

Data Storage and Retention

We retain information only for as long as
reasonably necessary to provide our services, satisfy legitimate business requirements, meet legal obligations, and comply with applicable third-party platform policies.

Retention periods may vary depending on the category of information, the service involved, customer requirements, and applicable legal or contractual obligations.

Certain third-party platforms may impose additional restrictions on storage, retention, and deletion of information obtained through their APIs. Where applicable, these restrictions govern the relevant data.

When information is no longer required, we take appropriate steps to delete, de-identify, or otherwise securely dispose of it, subject to lawful retention requirements.

International Data Processing

Grace Core is a Canadian company.

Some infrastructure, hosting, analytics, or technology providers may process information outside Canada.

Where personal information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction, including lawful access by governmental authorities.

We seek to use appropriate safeguards and contractual protections when information is transferred to external service providers.

International Data Processing

If you register for product updates, join a waitlist, request early access, or otherwise consent to communications, Grace Core may contact you regarding:
logo2

Marketing communications will include an unsubscribe option where required by law.

You may withdraw consent to optional marketing communications at any time. Essential service-related communications may continue where necessary.

Cookies and Website Technologies

Our website may use cookies or similar technologies to operate site features, maintain security, remember preferences, and measure website performance.

Third-party technologies, where enabled, may independently collect information in accor
dance with their applicable privacy policies.

Visitors may manage cookies through browser settings and any consent-management tools made available on our website.

Your Privacy Rights

Subject to applicable laws and relevant exceptions, individuals may have the right to:

To submit a privacy-related request, contact us using the information below.

We may need to verify your identity or authority before processing certain requests.

Requests involving third-party connected accounts may also be governed by the relevant platform’s policies and contractual requirements.

Third-Party Websites and Services

Our website and platform may contain links or integrations involving third-party services.

Grace Core does not control the privacy practices of independent third-party websites or platforms.

We encourage users to review the
applicable privacy policies of those services, including Google, Meta, and LinkedIn.

Children's Privacy

Grace Core’s website and GCORE Marketing Intelligence are intended primarily for businesses and professional users.

Our services are not directed toward children, and we do not knowingly solicit personal
information from children through GCORE.

If we become aware that personal information from a child has been collected without appropriate authorization, we will take appropriate steps consistent with applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technologies, data-processing practices, or legal requirements.

Revisions will be published on this page with an updated effective date.

Where required by law or applicable platform policies, we will provide additional notice or
obtain consent before materially changing how information is used.

Contact Us

If you have questions about this Cookie Policy, contact us at:

PO Box 1112 Station Main,
Bradford , Ontario,
Canada L3Z 2B5

contact@gracecore.com