Privacy Policy - AdsPilot
Last updated: March 20, 2026
AdsPilot ("AdsPilot", "we", "our", or "us") is a web-based application that helps users create structured Google Search campaigns directly inside their own Google Ads accounts.
This Privacy Policy explains how AdsPilot accesses, uses, stores, protects, and deletes information, including Google user data, when you use our website, application, and related services.
1. Who We Are
AdsPilot is a campaign creation and workflow tool designed to help businesses prepare Google Search campaigns more efficiently. Users provide campaign information, connect their Google Ads account through Google OAuth, select the Google Ads customer account they want to use, and instruct AdsPilot to create campaign structures inside that account.
2. Google User Data We Access
When you connect your Google account to AdsPilot, we request access only to the Google data necessary to provide the core functionality of the application.
- Google Ads account access through the Google Ads API scope required to list accessible Google Ads customer accounts and create campaign entities in the user's own Google Ads account.
- Google Ads customer identifiers, including customer IDs selected by the user.
- Advertising account structures and campaign objects, including campaign budgets, campaigns, ad groups, keywords, negative keywords, responsive search ads, and related campaign assets created or managed through the service.
- OAuth tokens, including temporary access tokens and refresh tokens required to maintain the secure connection between AdsPilot and the user's Google Ads account.
AdsPilot does not access your Google account password. AdsPilot does not access Google Ads billing instruments, payment methods, credit card information, or other financial account data through the Google Ads API.
3. How We Use Google User Data
AdsPilot uses Google user data only to provide and improve the user-facing functionality requested by the user. Specifically, AdsPilot uses Google user data to:
- Authenticate and maintain the secure connection between the user and the user's Google Ads account.
- Retrieve the list of Google Ads customer accounts available to the connected user.
- Allow the user to select the Google Ads customer account where campaigns will be created.
- Create campaign budgets, campaigns, ad groups, keywords, negative keywords, responsive search ads, and related campaign assets inside the selected Google Ads account.
- Create campaigns in a paused state so the user can review them before manually enabling them.
- Activate campaigns only when the user explicitly requests that action.
- Diagnose technical issues, prevent abuse, and maintain service security and reliability.
AdsPilot does not use Google user data for unrelated purposes. AdsPilot does not sell Google user data. AdsPilot does not use Google user data for advertising, profiling, data brokerage, or resale.
4. Limited Use Compliance
AdsPilot's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data accessed through Google APIs is used only to provide or improve user-facing functionality that is visible and expected by the user. Such data is never used for:
- Advertising purposes
- User profiling
- Sale of data
- Any purpose unrelated to the core functionality of AdsPilot
5. Other Information We Collect
In addition to Google user data, AdsPilot may collect and store information submitted by the user when preparing campaigns, including:
- Business website URL and landing page URL
- Business name, offer, target audience, and ad inputs
- Geographic targeting selections
- Daily budget and campaign objective
- Generated draft campaign structures and status data
- Internal identifiers required to secure access to drafts and generated assets
- Operational logs, rate-limiting data, and security event data needed to protect the service
6. Legal Basis and User Control
AdsPilot accesses Google user data only after the user explicitly authorizes the connection through Google OAuth. The user remains in control of whether to connect a Google account, which Google Ads account to use, and whether to proceed with campaign creation or activation.
7. Data Storage and Security
We implement reasonable administrative, technical, and organizational safeguards to protect data against unauthorized access, disclosure, alteration, or destruction. These measures may include:
- Encryption of OAuth refresh tokens at rest
- Secure HTTPS encryption for data in transit
- Server-side handling of Google Ads API requests
- Access controls intended to restrict draft and campaign access to the relevant user
- State validation, nonce checks, and rate limiting
- Operational controls intended to reduce duplicate or abusive API activity
8. Where Data Is Stored
Data may be stored on infrastructure and service providers used to operate AdsPilot, such as hosting, database, and operational infrastructure providers. Depending on the deployment configuration, draft and operational data may be stored in managed database environments or secure server infrastructure used by AdsPilot and its service providers.
9. Data Sharing
AdsPilot does not sell or rent Google user data or campaign data. We share data only in the limited circumstances below:
- With service providers that help us operate the service, such as hosting, database, infrastructure, analytics, or payment providers, subject to contractual or operational controls
- When required by applicable law, regulation, legal process, or enforceable governmental request
- To protect the security, integrity, rights, or safety of AdsPilot, our users, or others
- As part of a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards where required
10. Data Retention
AdsPilot retains data only for as long as reasonably necessary to provide the service, maintain security, comply with legal obligations, resolve disputes, and enforce agreements.
- OAuth credentials may be retained while the user keeps the Google Ads connection active and while needed to provide the requested functionality.
- Campaign drafts and related inputs may be retained while the user continues using the service or until deletion is requested, subject to backup and legal retention requirements.
- Security and operational logs may be retained for a limited period as reasonably necessary to detect abuse, troubleshoot problems, and protect the service.
11. Revoking Google Access
Users can revoke AdsPilot's access to their Google account at any time through their Google Account permissions settings:
12. Data Deletion Requests
Users may request deletion of stored data associated with AdsPilot by contacting us at the email address listed below. Upon a verified request, we will take reasonable steps to delete or de-identify applicable stored data, subject to legal, security, fraud-prevention, backup, and operational retention requirements.
13. Children
AdsPilot is intended for business and professional use and is not directed to children.
14. International Processing
Depending on where our infrastructure or service providers operate, information may be processed in countries other than the user's country of residence. Where required, we take reasonable steps to protect personal data in accordance with applicable law.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the date above and publish the revised version on this page.
16. Contact
For privacy, support, or data deletion requests, contact: