Privacy Policy – JP Agent Tracking Bridge
Last updated: 25 August 2026
This Privacy Policy explains how JP Agent Tracking Bridge accesses, uses, stores, protects, shares and deletes Google user data.
JP Agent Tracking Bridge is developed and operated by JPro Studio, part of Norin Media AB, Sweden. Questions or requests concerning privacy and Google user data can be sent to
About JP Agent Tracking Bridge
JP Agent Tracking Bridge is a WordPress and Joomla extension that helps website owners configure and verify website tracking using an AI agent.
The application connects to Google Analytics and Google Tag Manager through Google OAuth. Access is initiated by the user by selecting "Connect Google" and approving the requested permissions.
The application only accesses Google resources that the authenticated Google user is permitted to access.
Google user data accessed
Depending on the permissions granted by the user, JP Agent Tracking Bridge may access:
Google Analytics
- Google Analytics accounts and properties available to the authenticated user
- Property and resource identifiers
- Analytics configuration and metadata
- Reporting, event and realtime data required to inspect and verify website tracking
Google Analytics access is read-only. JP Agent Tracking Bridge cannot modify or delete Google Analytics data.
Google Tag Manager
- Google Tag Manager accounts, containers and workspaces available to the authenticated user
- Tags, triggers, variables and related container configuration
- Container versions and publication status
With user approval, the application can create or update tags, triggers and variables, create a container version and publish an approved container version.
Authentication data
JP Agent Tracking Bridge receives and stores OAuth access and refresh tokens required to maintain the authorized Google connection. OAuth tokens are not exposed to the website frontend, WordPress or Joomla REST APIs, browser scripts, AI prompts or the AI model context.
How Google user data is used
Google user data is used only to provide or improve the user-facing functionality requested by the user, including:
- Discovering Google Analytics properties and Google Tag Manager containers available to the user
- Inspecting existing tracking configuration
- Detecting existing tags and triggers before proposing changes
- Creating or updating tracking resources approved by the user
- Creating reviewable Google Tag Manager container versions
- Publishing a container version only after explicit user approval
- Verifying that configured website events are received by Google Analytics
- Diagnosing tracking errors, duplicate events and configuration problems
- Providing relevant results to the user and the user's chosen AI agent so that the requested tracking task can be completed
JP Agent Tracking Bridge does not create or manage advertising campaigns.
JPro Studio does not use Google user data for targeted advertising, retargeting, credit decisions, data brokerage or the development, improvement or training of generalized artificial intelligence or machine-learning models.
Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements where applicable.
AI agent processing
JP Agent Tracking Bridge allows the user to work with a compatible AI agent or AI service selected by the user.
Only information necessary to perform the requested tracking operation may be returned through the application's controlled tools to the user's chosen AI environment. OAuth access tokens, refresh tokens and encryption keys are never included in AI prompts or model context.
The user is responsible for selecting an AI provider whose privacy and data-processing terms are appropriate for their organization.
Sharing and disclosure of Google user data
JPro Studio does not sell Google user data.
Google user data is not shared, transferred or disclosed to third parties except:
- To the AI service or agent environment explicitly selected and instructed by the user, when necessary to perform the requested tracking task
- To hosting, infrastructure and security service providers that process data solely as necessary to operate and protect JP Agent Tracking Bridge
- When required by law, regulation, legal process or a valid governmental request
- When necessary to investigate fraud, abuse, security incidents or violations of applicable terms
Service providers are permitted to process information only for the purpose of providing their services to JPro Studio.
Google user data is not shared with advertising networks, data brokers or information resellers.
Data protection and security
JP Agent Tracking Bridge uses technical and organizational security measures designed to protect Google user data, including:
- HTTPS/TLS encryption for data transmitted between the user, JP Agent Tracking Bridge and Google APIs
- AES-256-GCM encryption for stored OAuth tokens
- Server-side storage of OAuth credentials
- Separation between the CMS installation, temporary agent access and the Google OAuth connection
- Access controls and restricted administrative access
- Explicit user approval before publishing a Google Tag Manager container version
- Temporary agent modification access that can be stopped independently
- Measures intended to prevent OAuth credentials from being exposed in browsers, CMS APIs, logs, prompts or AI model context
No method of electronic storage or transmission is completely secure, but we take reasonable measures to prevent unauthorized access, alteration, disclosure or destruction.
Data retention
OAuth access and refresh tokens are retained only while the user's Google connection remains active and for as long as necessary to provide the requested functionality.
Google Analytics and Google Tag Manager API responses are processed only as necessary to perform the requested inspection, configuration or verification. JP Agent Tracking Bridge does not use this information to build independent advertising profiles or commercial data databases.
Limited operational information may be retained where necessary for security, troubleshooting, auditing and legal compliance.
Disconnecting Google and deleting data
Users can disconnect their Google account from JP Agent Tracking Bridge at any time.
When a Google connection is disconnected:
- The application stops using the associated OAuth credentials
- The active OAuth tokens and connection record are deleted from active systems
- The AI agent can no longer access Google resources through that connection
Users can also revoke access directly through their Google Account permissions.
Residual encrypted copies may remain temporarily in security backups until those backups are overwritten through the normal backup lifecycle. Such backup copies are not used for any other purpose.
Users may request deletion of Google user data or related account information by contacting
Stopping a temporary Agent Connection does not automatically disconnect Google or remove tracking that has already been configured. The Google connection can be disconnected separately by the user.
User rights
Depending on applicable law, users may have the right to request access to, correction of or deletion of their personal data, or to object to or restrict certain processing.
Requests can be submitted to:
JPro Studio / Norin Media AB
Email:
Sweden
Changes to this Privacy Policy
We may update this Privacy Policy when the application, legal requirements or data-processing practices change.
Material changes affecting how Google user data is accessed, used, stored or shared will be reflected on this page. The latest revision date will always be displayed at the top.
