Last updated: September 10, 2026
Bulldog Labs (also displayed as BulldogLabs or BDL) is operated by Duke Digital Group ("we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our creative production, advertising management, and conversion tracking services.
We use the collected information to:
Connecting Google is optional. When you connect an account, Google asks you to authorize Bulldog Labs. You sign in directly with Google; we do not receive your Google password. Access is limited by the permissions of the connected Google account and by Bulldog Labs organization and account permissions.
Google conversion uploads contain the original Google click identifier (gclid, wbraid, or gbraid), event timestamp, a unique conversion identifier, the destination account and conversion goal, conversion value and currency when available, and the ad_user_data and ad_personalization consent status recorded for that conversion when one was provided. This integration does not upload personal form answers, IP addresses, or browser user agents to Google. Validation-only mode checks a request without recording a conversion in Google.
Optional hashed contact matching.A conversion callback sent to Bulldog Labs may optionally include an email address or phone number. When it does, we normalize the value and compute a SHA-256 hash of it; the conversion record stores only that hash, not the plain email address or phone number. The hash is included in a Google upload only when the Google integration's data mapping explicitly includes the Email or Phone field and the ad_user_data consent recorded for that conversion, or on its original click, is granted. Google uses the hash to match the conversion to its own records. A hash is a pseudonymous identifier and is not anonymous data. Callbacks and integrations that do not include or map these fields send no contact identifiers to Google.
The BDL direct page script is separate from these conversion uploads. It records the page address, ad click identifiers from the page URL, and a visit identifier so a form can save the BDL Click ID; it does not read form fields or other personal form data.
We store connection credentials, including OAuth access and refresh tokens, connected account details, imported advertising reports, and conversion delivery records in our server-side systems to operate the connected features. Data may be available to authorized members of your Bulldog Labs workspace according to their access permissions and through report-delivery integrations you enable. Our hosting and infrastructure providers process data to operate these services. Conversion data is sent to Google only for the destination you configure.
Our use and sharing of Google API data is limited to providing or improving the connected features described here, security purposes, and applicable legal requirements. We do not sell Google API data or use it to train general-purpose artificial intelligence or machine-learning models. We follow the Google API Services User Data Policy, including its applicable Limited Use requirements. These Google-specific limits also apply to the general AI processing and data-sharing sections below.
We retain connection credentials and imported Google data for as long as needed to provide your connected services and maintain the reports and records you use. You can revoke Bulldog Labs access at any time through your Google Account connections. Revocation prevents further authorized Google API access but does not automatically delete previously stored Bulldog Labs reports or conversions already submitted to Google.
To request deletion of stored Google connection credentials, imported Google data, or associated BDL records, email ray@dukedigitalgroup.com and identify your Bulldog Labs workspace and the accounts concerned. We verify your authority to make the request and remove the requested data, subject to applicable legal retention requirements. Data already sent to Google is also subject to Google's retention policies and the controls in your Google Ads account.
When you use our AI generation features:
We may share your information with:
We implement appropriate technical and organizational measures to protect your information, including:
We retain your information for as long as your account is active or as needed to provide the Service. You can request deletion of your account and associated data by contacting us using the details below. Google-specific retention, revocation, and deletion are explained in section 4.4.
Depending on your location, you may have the right to:
We use cookies and similar technologies to enhance your experience, analyze usage, and personalize content. You can manage your cookie preferences through your browser settings.
The Service is not intended for users under 18 years of age. We do not knowingly collect information from children under 18.
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
If you have questions about this Privacy Policy or our data practices, please contact us at: