1. Introduction

AdKondo ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the AdKondo platform, including our website, application, and all related services (collectively, the "Service").

By accessing or using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with any part of this Privacy Policy, you should not access or use the Service.

This Privacy Policy should be read in conjunction with our Terms and Conditions.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: When you create an account via Google OAuth, we receive your Google profile information including your name, email address, and profile picture
• Business Context Information: Website URLs, business descriptions, target audience details, conversion goals, and other business-related information you provide during the setup process
• Feedback and Communications: Recommendation feedback (approve, dismiss, or report), support inquiries, and other communications you send to us

2.2 Google Ads Account Data

When you connect your Google Ads account, we access and collect the following data through the Google Ads API:

• Account-level settings and configuration (account name, currency, time zone)
• Campaign data (names, statuses, budgets, bidding strategies, performance metrics)
• Ad group data (names, statuses, targeting settings)
• Keyword data (keywords, match types, bids, quality scores, performance metrics)
• Search term reports (actual search queries triggering your ads and their performance)
• Ad data (ad copy, headlines, descriptions, URLs, performance metrics)
• Performance metrics (impressions, clicks, conversions, cost, CTR, CPC, CPA, ROAS)

We access this data in read-only mode. We do not modify, create, or delete any data in your Google Ads account.

2.3 Website Content Data

If you provide your business website URL during setup, we may access and analyze publicly available content from your website to better understand your business context. This includes:

• Page titles and meta descriptions
• Headings and body text content
• Product or service descriptions

We only access publicly available website content and do not attempt to access password-protected areas, admin panels, or private pages.

2.4 Automatically Collected Information

• Usage Data: Pages visited, features used, actions taken within the Service, time spent, and interaction patterns
• Device Information: Browser type, operating system, device type, screen resolution, and language preferences
• Log Data: IP address, access times, referring URLs, and error logs

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing the Service

• Authenticating your identity and managing your account
• Retrieving and analyzing your Google Ads performance data
• Generating personalized optimization recommendations using AI analysis
• Monitoring your account for performance anomalies and generating alerts
• Displaying dashboards, reports, and performance visualizations
• Processing your feedback to improve recommendation quality

3.2 AI Processing

We use artificial intelligence services to analyze your advertising data and generate recommendations. This involves:

• Sending anonymized or pseudonymized advertising performance data to AI processing services
• Using your business context information to improve the relevance of AI-generated recommendations
• Processing search term data to identify irrelevant traffic and negative keyword opportunities

We minimize the personal information sent to AI services and focus on advertising performance metrics and business context data necessary for generating relevant recommendations.

3.3 Service Improvement

• Analyzing usage patterns to improve Service features and user experience
• Developing new features and functionality
• Identifying and fixing technical issues and bugs
• Conducting aggregated, anonymized analytics to understand Service performance

3.4 Communications

• Sending account-related notifications (alerts, recommendations, security notices)
• Responding to your support requests and inquiries
• Sending service updates and important policy changes

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

4.1 Third-Party Service Providers

We use trusted third-party services to operate the Service:

• Google (Google Ads API, OAuth): To authenticate your account and access your advertising data. Subject to Google's Privacy Policy
• OpenAI: To process advertising data and generate AI-powered recommendations. Advertising metrics and business context data (not personal identifying information) may be sent to OpenAI for analysis. Subject to OpenAI's Privacy Policy
• Supabase (Database Hosting): To securely store your account data, cached advertising data, and generated recommendations. Subject to Supabase's Privacy Policy
• Hosting Provider: To host and serve the Service application

4.2 Legal Requirements

We may disclose your information if required to do so by law, regulation, or legal process, or if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or government request
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users of the Service or the public

4.3 Business Transfers

If AdKondo is involved in a merger, acquisition, bankruptcy, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any change in ownership or uses of your personal information.

5. Data Storage and Security

5.1 Data Storage

Your data is stored on secure cloud infrastructure. We store:

• Account information and authentication tokens in encrypted database storage
• Cached Google Ads performance data for generating recommendations and displaying dashboards
• Generated recommendations and your feedback on them
• Alert history and account monitoring data
• Business context information you provide

5.2 Security Measures

We implement appropriate technical and organizational security measures to protect your data, including:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest, including OAuth tokens and credentials
• Secure authentication via Google OAuth 2.0 (we never store your Google password)
• Regular security reviews and updates
• Access controls limiting data access to authorized personnel and systems
• Automatic session expiration and token management

While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

• Account Data: Retained for the duration of your active account
• Google Ads Performance Data: Cached data is periodically refreshed and older cached data is replaced
• Recommendations: Retained for the duration of your active account to provide historical context
• Session Data: Automatically cleaned up after expiration

Upon account deletion, we will:

• Delete your account information and associated data within 30 days
• Revoke all OAuth tokens and disconnect from your Google Ads account
• Remove cached advertising data and generated recommendations

We may retain anonymized, aggregated data that cannot be used to identify you for analytical and service improvement purposes.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

7.1 Access and Portability

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format where technically feasible.

7.2 Correction

You have the right to request that we correct inaccurate personal information we hold about you.

7.3 Deletion

You have the right to request that we delete your personal information. You can delete your account at any time, which will trigger the data deletion process described in Section 6. You may also revoke our access to your Google Ads account at any time through your Google Account security settings.

7.4 Restriction and Objection

You have the right to request that we restrict the processing of your personal information or to object to certain types of processing.

7.5 Withdraw Consent

Where we rely on your consent to process personal information, you have the right to withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact us at support@adkondo.com. We will respond to your request within 30 days or as required by applicable law.

8. Google API Services User Data Policy

AdKondo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request access to the Google Ads data that is necessary to provide our Service
• We do not use Google Ads data for serving advertisements
• We do not sell Google Ads data to third parties
• We do not use Google Ads data for purposes unrelated to the Service
• We allow you to revoke our access to your Google data at any time

9. Cookies and Tracking Technologies

We use the following cookies and similar technologies:

• Essential Cookies: Required for the Service to function, including authentication tokens and session management. These cannot be disabled.
• Local Storage: We use browser local storage to maintain your authentication session (auth_token) and user preferences for a seamless experience.

We do not use third-party advertising cookies or cross-site tracking technologies. We do not participate in ad networks or sell data to advertisers.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and third-party service providers are located.

If you are accessing the Service from the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, please note that your data may be transferred to jurisdictions that may not provide the same level of data protection. In such cases, we rely on appropriate safeguards such as standard contractual clauses or other legally recognized transfer mechanisms to ensure adequate protection of your personal information.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell
• Right to Delete: You have the right to request deletion of your personal information
• Right to Opt-Out: You have the right to opt out of the sale or sharing of your personal information. Note: We do not sell your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Correct: You have the right to request correction of inaccurate personal information

To exercise these rights, contact us at support@adkondo.com. We will verify your identity before processing your request.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis for Processing: We process your data based on: (a) your consent (e.g., when you connect your Google Ads account); (b) performance of our contract with you (providing the Service); (c) our legitimate interests (improving the Service, security); and (d) compliance with legal obligations
• Data Protection Officer: For GDPR-related inquiries, contact us at support@adkondo.com
• Supervisory Authority: You have the right to lodge a complaint with your local data protection supervisory authority

13. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe that a child under 18 has provided us with personal information, please contact us at support@adkondo.com.

14. Third-Party Links

The Service may contain links to third-party websites or services, including Google Ads and Google Account settings. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party services you interact with.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes:

• We will update the "Last updated" date at the top of this page
• We will notify you through the Service or via email for significant changes
• We will provide at least 30 days' notice before material changes take effect

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: