Privacy Policy

1. Who we are

Ad Asset Engine ("we", "us") provides a bulk management platform for Google Ads assets at adassetengine.com. This policy explains what data we collect, why we collect it, and how we handle it. For questions, contact us at kevinbrinkman@netprofiler.nl.

2. Data we collect

• Account data: when you sign in with Google, we receive your name, email address, and profile picture from your Google account.
• Google Ads data: with your explicit consent (the Google Ads OAuth scope), we access your Google Ads accounts to read campaign and ad group names and to read and write ad assets (sitelinks, callouts, promotions) on your behalf.
• Content you create: the assets, schedules, and targeting rules you manage in the platform.
• Technical data: standard server logs (IP address, browser type, timestamps) needed to operate and secure the service.

3. How we use Google user data

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google Ads data to provide the features you see in the product: displaying your campaigns, and creating, updating, scheduling, and pausing ad assets you manage.
• We do not sell Google user data or use it for advertising purposes.
• We do not transfer Google user data to third parties except as needed to provide the service (see section 5), to comply with the law, or as part of a merger or acquisition with prior notice to you.
• Humans do not read your data unless you ask us to for support purposes, it is required for security or legal reasons, or it is aggregated and anonymized.
• We do not use Google user data to train machine-learning or AI models.

4. Storage and security

Your data is stored with Supabase (PostgreSQL) and protected with row-level security so that each user can only access their own data. OAuth refresh tokens are stored server-side and never exposed to the browser. All traffic is encrypted in transit (TLS). The application is hosted on Vercel.

5. Third-party processors

• Supabase: database and authentication
• Vercel: application hosting
• Google: sign-in and the Google Ads API

6. Data retention and deletion

We keep your data for as long as you have an account. You can disconnect a Google Ads account at any time from the settings page, which removes the stored connection. To delete your account and all associated data, email us at kevinbrinkman@netprofiler.nl and we will remove it within 30 days. You can also revoke our access to your Google account at any time via your Google account permissions.

7. Your rights

Under the GDPR you have the right to access, correct, export, and delete your personal data, and the right to object to or restrict processing. Contact us to exercise any of these rights.

8. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the application. The latest version always lives at this page.