ADS OPERATOR — Privacy Policy
Last updated: 1 September 2026
ADS OPERATOR is a private advertising operations platform used by authorised administrators to analyse and manage advertising accounts on Google Ads, Meta Ads and Pinterest Ads. This policy explains what it stores and why.
Who this platform is for
ADS OPERATOR is not a consumer product and is not open to public sign-up. Access is restricted to an explicit allowlist of administrator email addresses. An authenticated account that is not on the allowlist is refused access.
Information we store
Administrator identity
When an administrator signs in with Google, we receive their email address, name and
Google account identifier. This is used solely to confirm they are authorised. We request
identity scopes only (openid, email, profile) for
sign-in, and we do not use sign-in to obtain advertising permissions.
Advertising platform connections
When an administrator connects an advertising account, we store the OAuth authorisation issued by that platform, the selected advertising account identifier, the account name and similar non-secret metadata, the granted scopes, and connection status and verification timestamps.
Advertising performance data
We retrieve campaign, ad and performance data from connected advertising accounts in order to produce reporting and recommendations. We may store derived analysis notes against an advertising account identifier.
Security audit records
We record administrative actions — connecting or disconnecting an account, selecting an account, changing safety settings — with a timestamp and the administrator responsible, for security and accountability.
What we do not store
- We do not store passwords for Google, Meta, Pinterest or any connected platform. Authentication happens on those providers' own systems through OAuth.
- We do not sell, rent or share connected advertising data with third parties.
- We do not use connected advertising data to build advertising profiles about individuals.
How credentials are protected
OAuth access and refresh tokens are encrypted at rest using application-layer encryption, with the encryption key held separately from the database. Tokens are never displayed in the interface, never returned through the platform's API, and never written to application logs. Credential storage is kept separate from analysis data. All traffic is served over HTTPS.
Retention
Connection records persist until the connection is removed, either by disconnecting in the portal or by request. Disconnecting deletes the stored credentials and the selected account association immediately. Security audit records and analysis notes are retained until deletion is requested.
Your choices
- Disconnect any advertising account at any time from the connections portal.
- Request deletion of stored data — see Data Deletion.
- Revoke this application's access from the provider's own settings (for Meta, under Apps and Websites; for Google, under Third-party apps with account access).
Third-party platforms
Connected advertising platforms handle your data under their own policies: Meta Privacy Center, Google Privacy Policy, and Pinterest Privacy Policy.
Changes
If this policy changes materially, the "last updated" date above will change.