Privacy Policy

Last updated: February 20, 2026

This Privacy Policy describes how googleadsagent.ai ("we," "us," or "our"), operated by John Williams of It All Started With A Idea, collects, uses, and protects your information when you use our AI-powered Google Ads management platform ("Service").

1. Information We Collect

We collect minimal data necessary to provide the Service:

• Session data — A unique session identifier stored in your browser's localStorage to maintain your session state across interactions.
• Google OAuth tokens — When you connect your Google Ads account, we receive an OAuth 2.0 access token and refresh token to authenticate API requests on your behalf.
• Usage analytics — Anonymized usage data collected via Google Analytics (through Google Tag Manager) including page views, feature usage, and session duration.
• Google Ads account data — Campaign, ad group, keyword, and performance data accessed through the Google Ads API as directed by you during your session.

We do not collect your name, email address, phone number, or payment information through the Service itself.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Authenticate your Google Ads account access via OAuth
• Execute Google Ads API actions as directed by you (reading reports, making changes)
• Improve the platform's performance, reliability, and user experience
• Monitor usage patterns to identify and fix technical issues
• Comply with legal obligations

3. Google OAuth and API Data

When you authenticate with Google:

• We access your Google Ads data only as directed by you during your session. We do not access data in the background or without your knowledge.
• OAuth tokens are encrypted at rest and stored in Cloudflare KV (key-value) storage. They are never stored in plaintext or logged.
• We request only the minimum scopes required: https://www.googleapis.com/auth/adwords for Google Ads API access.
• You can revoke access at any time through your Google Account permissions.
• We comply with the Google API Services User Data Policy, including the Limited Use requirements.

4. Third-Party Services

We use the following third-party services to operate the platform:

• Cloudflare — Hosting (Cloudflare Pages), edge computing (Cloudflare Workers), and encrypted key-value storage (Cloudflare KV). Cloudflare Privacy Policy
• Google Tag Manager & Google Analytics — Anonymized usage analytics to understand how the platform is used. Google Privacy Policy
• AI providers (Anthropic, OpenAI, Google) — AI inference for the agent's reasoning capabilities. Your Google Ads data may be sent to these providers as part of the agent's processing loop. These providers have their own data handling policies:
  • Anthropic Privacy Policy
  • OpenAI Privacy Policy
  • Google Privacy Policy

5. Cookies

We use cookies and similar technologies to operate the Service, remember your choices, and—when you allow it—measure how the site is used. This section summarizes what we use and how you can control it.

What cookies we use

• Session and essential cookies — Cookies or similar identifiers set by our hosting or infrastructure (for example, Cloudflare) may be used for security, performance, and reliable delivery of pages. These are typically treated as strictly necessary for the site to function.
• Preference cookies — We may store a small preference in your browser (for example, your cookie consent choice) so we do not repeatedly show the same prompt.
• Analytics (via Google Tag Manager) — When analytics tags are loaded through Google Tag Manager, they may set cookies to distinguish sessions and measure traffic and engagement (for example, _ga, _gid).
• localStorage (not a cookie) — We store a session identifier in localStorage to maintain session state for the Service. It is not sent to our servers automatically like a cookie; see Section 1. Information We Collect above for context.

How to control cookies

• Browser settings — You can block or delete cookies through your browser’s privacy or site settings. Blocking some cookies may limit certain features.
• Our consent banner — Where shown, you can accept or reject non-essential cookies (such as analytics) using the on-site cookie notice. Your choice is stored locally so it applies on return visits.

Third-party cookies

When you use the Service, third parties may set or read cookies in connection with their tools:

• Google Tag Manager (GTM) — GTM is used to deploy and manage tags (including analytics). Google’s use of data collected through GTM-enabled tags is described in Google’s policies. Google Privacy Policy
• Google Analytics — If loaded via GTM, Google Analytics may use cookies to collect usage information. How Google uses cookies

We do not use advertising cookies or tracking pixels for ad targeting on this site.

6. Data Security

• All data in transit is encrypted via HTTPS/TLS, enforced by Cloudflare.
• OAuth tokens are encrypted at rest in Cloudflare KV storage.
• Session data is isolated per user and cannot be accessed by other users.
• We do not sell, rent, or share your data with third parties for marketing purposes.
• Access to infrastructure and secrets is restricted to the site operator (John Williams).

7. Data Retention

• Session data and cached Google Ads data expire after 90 days of inactivity.
• OAuth tokens are retained only as long as your session is active. They are automatically purged upon session expiration.
• Analytics data is retained according to Google Analytics' default retention settings (14 months).
• You may request deletion of your data at any time (see "Your Rights" below).

8. Your Rights

You have the right to:

• Access — Request a copy of any data we hold about your session.
• Delete — Request deletion of your session data and any stored OAuth tokens. You can also revoke Google OAuth access directly from your Google Account.
• Opt out of analytics — Use browser extensions like Google Analytics Opt-out or disable cookies in your browser settings.
• Portability — Request your data in a machine-readable format.

To exercise any of these rights, contact us using the information below.

9. CCPA Disclosure (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information:

• We do not sell personal information.
• We do not share personal information for cross-context behavioral advertising.
• You have the right to know what personal information we collect, request deletion, and opt out of any sale (though we do not sell data).
• We will not discriminate against you for exercising your CCPA rights.

Categories of personal information we may collect: identifiers (session IDs), internet activity information (usage analytics), and commercial information (Google Ads account data accessed during your session).

10. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately. If you believe a child under 13 has provided us with data, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact:

John Williams
It All Started With A Idea
Website: itallstartedwithaidea.com
Platform: googleadsagent.ai