Privacy Policy
This Privacy Policy explains how YourPPCLab ("we", "us") collects, uses, stores, shares and deletes data in YourPPCLab Ads Reporting (the "Application"). The Application uses the Google Ads API and Google OAuth 2.0 to build performance reports for, and manage, the Google Ads campaigns of advertisers who work with YourPPCLab. A description of the Application is available at yourppclab.ru/google-ads-api/.
1. Who uses the Application
YourPPCLab's PPC specialists sign in to the Application with their Google accounts. The advertisers whose Google Ads accounts we manage have given our specialists access to those accounts through the standard Google Ads user access or manager account (MCC) link. Advertisers receive the reports the Application builds.
2. Information we collect: Google user data we access
The Application requests one OAuth scope:
| Scope | Why we need it |
|---|---|
https://www.googleapis.com/auth/adwords | To read performance data from, and apply reviewed changes to, the Google Ads accounts the signed-in specialist is authorized to manage. |
Through this scope, the Application accesses the following data:
- Account information: customer IDs, account names, currency and time zone of the Google Ads accounts the signed-in user can access.
- Campaign settings: campaigns, ad groups, ads, keywords, negative keywords, budgets, bidding strategies, targeting and conversion actions.
- Performance metrics: impressions, clicks, cost, conversions and conversion value, broken down by date, campaign, device, location, age and gender ranges, and search term. These are aggregated statistics provided by Google Ads and do not identify individual people.
- Click identifiers: Google Click IDs (GCLID) with click date, campaign and device. We use them only to match ad clicks with visits recorded in the advertiser's own website analytics, so that we can report results by device.
- Change history: what was changed in the account, when, and by which user (email of the Google Ads user who made the change).
- Keyword planning data: search volume, competition and bid estimates for keywords.
The Application does not request or access Gmail, Google Drive, Contacts, Calendar, profile photos or any other Google user data. We do not collect data from visitors of this website. This site does not use analytics or advertising cookies.
3. How we use the information
We use Google user data only to provide the Application's features to the advertiser who owns the account:
- to build performance reports and dashboards for that advertiser;
- to audit the account and prepare optimization recommendations;
- to apply campaign changes that a specialist has prepared and reviewed;
- to plan keywords and budgets for that advertiser's campaigns.
We do not use Google user data for advertising, to build user profiles, to make credit or lending decisions, or to train or improve artificial intelligence or machine learning models. We do not use the Application to generate images, video or other media.
4. Sharing and disclosure
We do not sell, rent or trade Google user data. We share reports built from an advertiser's account only with that advertiser. We do not transfer Google user data to third parties, except:
- when required by law or a valid legal request;
- to protect the security of the Application or prevent abuse;
- as part of a merger or acquisition, with the same protections as in this policy.
Human access to the data is limited to YourPPCLab specialists who work on the advertiser's account.
5. Storage and security
- Data is stored on a single server controlled by YourPPCLab. It is not stored in third-party cloud services.
- OAuth refresh tokens and the Google Ads developer token are stored in files readable only by the Application's service user (file permission 600). They are never published or sent to third parties.
- All connections to Google APIs and to our website use HTTPS (TLS).
- Client reports are published on non-public URLs or behind password protection.
6. Retention and deletion
- Raw data and reports for an advertiser are kept while we manage that advertiser's account. We delete them within 30 days after our work for the advertiser ends, or within 30 days after the advertiser asks us to.
- Click identifiers (GCLID) are kept for up to 13 months and then deleted.
- OAuth tokens are deleted when a specialist stops using the Application or when access is revoked.
You can revoke the Application's access at any time:
- in your Google Account at myaccount.google.com/permissions; or
- by removing YourPPCLab's users or manager-account link in Google Ads → Admin → Access and security.
To ask for your data to be deleted, email us at yurkov.alexander@gmail.com. We will confirm the deletion.
7. Google API Services User Data Policy
YourPPCLab Ads Reporting's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
8. Children
The Application is a business tool. It is not intended for anyone under 18, and we do not knowingly collect data from children.
9. Contact
Questions about this policy or requests about your data: YourPPCLab, email yurkov.alexander@gmail.com, Telegram @alex_dzen, website yourppclab.ru.
10. Changes to this policy
We may update this policy. The current version is always published at this address, with its effective date at the top. If a change affects how we use Google user data, we will update this page before the change takes effect.