Privacy Policy

Last updated: April 21, 2026

Andy Adman ("we", "us", "our") operates the Andy Adman web application. This page describes how we collect, use, and protect your information.

What Data We Access

When you connect your Google Ads account, we request access to your Google Ads data through the Google Ads API. Specifically, we access:

• Campaign data — campaign names, budgets, statuses, and performance metrics
• Keyword data — keyword text, match types, quality scores, and performance metrics
• Search term data — search terms that triggered your ads and their performance
• Ad group data — ad group structure and settings
• Conversion data — conversion tracking setup and conversion metrics

We access this data solely to diagnose wasted spend and propose optimizations for your account.

How We Use Your Data

Your Google Ads data is used to:

• Analyze campaign performance and identify wasted ad spend
• Generate optimization proposals (e.g., negative keywords, bid adjustments, schedule changes)
• Execute changes you explicitly approve
• Show you audit reports and proposal history

We do not use your data for any other purpose. We do not train AI models on your account data. We do not share, sell, or rent your data to third parties.

How We Store Your Data

• Authentication tokens — your Google OAuth refresh token is encrypted at rest using AES-256-GCM encryption before being stored in our database.
• Account data — stored in a secured PostgreSQL database hosted on Neon with encrypted connections (TLS).
• Proposal history — records of audit findings and proposed/executed changes are stored so you can review and rollback if needed.

Data Retention

We retain your account data and proposal history for 90 days after your last login. If you disconnect your Google Ads account or delete your account, we delete all associated data immediately, including encrypted tokens and proposal history.

Data Sharing

We do not share your personal information or Google Ads data with any third parties, except:

• Infrastructure providers that host our application (Vercel, Neon) — they process data on our behalf under strict data processing agreements
• When required by law or legal process

Your Rights

You have the right to:

• Disconnect — remove your Google Ads account connection at any time from the Accounts page
• Delete — request deletion of all your data by contacting us
• Export — request a copy of your data by contacting us
• Revoke access — revoke our Google Ads API access at any time through your Google Account security settings

Google API Services Disclosure

Andy Adman's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

We use essential cookies only — for authentication sessions and OAuth state verification. We do not use advertising or analytics cookies.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact

If you have questions about this privacy policy or your data, contact us at: hello@andyadman.com