Privacy
Privacy and Google user data
AD Polish helps paid media teams manage standards and validation. This policy explains how we collect, use, protect, retain, and delete information, including data received through Google OAuth.
Information we collect
We collect only the information needed to operate AD Polish.
This may include account registration details, workspace membership information, product usage records, and connected-platform metadata needed for validation, authentication, support, and reliability. When you connect Google Ads, AD Polish may store OAuth access and refresh tokens, granted OAuth scopes, and connected Google advertising metadata, such as ad account IDs and campaign identifiers. We request only the permissions needed for features you choose to enable.
How we use information
We use data to provide and support the product.
AD Polish uses account, workspace, and connected-platform data to authenticate users, manage workspace access and permissions, run campaign validation and standards-review features, provide enabled integrations, send relevant service notifications, prevent abuse, troubleshoot issues, and improve reliability. Google user data is used only to provide or improve user-facing AD Polish features. We do not sell Google user data or use it for advertising, marketing, retargeting, personalized advertising, creditworthiness, lending, or resale.
Sharing and disclosure
We do not sell Google user data or share it for others’ independent use.
AD Polish may disclose Google user data only to Google when making API requests you authorize; to service providers that support core operations, such as cloud hosting, authentication, and logging or error monitoring; to authorized AD Polish personnel when necessary to provide support, investigate a security issue, prevent abuse, or troubleshoot a technical problem; and when required by applicable law, legal process, or an enforceable governmental request. Service providers may process data only on our behalf and are restricted from using it for their own purposes. We do not otherwise transfer Google user data to third parties.
Security
We use safeguards designed to protect sensitive data.
AD Polish protects data using encrypted transmission through HTTPS/TLS, role-based and least-privilege access controls, restricted administrative access, access logging, and monitoring for unauthorized-access attempts. OAuth tokens are stored only by backend systems that need them to operate the authorized integration and are never exposed in browser responses.
Retention and deletion
We retain Google user data only while it is needed for the connected feature.
OAuth tokens and connected Google metadata are retained while your Google integration is active. When you disconnect the integration, AD Polish stops using it for future product access and removes the locally stored OAuth tokens and connected Google metadata. You can also revoke AD Polish access through your Google Account settings. If you delete your AD Polish account, we delete or de-identify associated data within 30 days, except where retention is required for security, legal compliance, or backup restoration. Cached or temporary processing data is cleared within 30 days. Security and operational logs are retained for up to 90 days, then deleted or de-identified, unless a longer period is required for security investigation or legal compliance. Backup copies are deleted or overwritten through normal backup processes within 90 days.
Your choices
You can disconnect Google and request deletion.
You can stop AD Polish from accessing your Google account by disconnecting the Google integration in your workspace settings or by revoking AD Polish access through your Google Account settings. You may also request deletion of your Google-connected data by contacting support@adpolish.com. Once deleted, OAuth tokens, Google metadata, and associated cached data cannot be restored.
Google API commitments
Our use of Google API data follows Google’s Limited Use requirements.
AD Polish’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used to train generalized or non-personalized AI or machine-learning models, and it is not transferred to third-party AI or machine-learning services for model training. We will update this policy and obtain consent before using Google user data for a materially different purpose.
Policy updates
This policy may evolve with the service.
As AD Polish expands, this privacy policy may be updated to reflect billing, support, compliance, and data-handling workflows. Material changes to how we use Google user data will be communicated before those changes take effect.