Privacy Policy

1. Introduction

Ad Pulse Guard ("we," "us," or "our") operates the Ad Pulse Guard web application at adpulseguard.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

Information You Provide

When you create an account or use our Service, you may provide us with:

• Your email address and name
• Account credentials (managed securely via Supabase Auth)
• Alert preferences and threshold configurations
• Communications you send us (support requests, feedback)

Google Ads Data

When you connect your Google Ads account via OAuth, we access your campaign performance data in read-only mode. This includes campaign names, impressions, clicks, conversions, cost data, and related metrics. We do not have permission to modify your campaigns, budgets, bids, or ads.

Automatically Collected Data

When you access our Service, we may automatically collect:

• Browser type and version
• IP address (for security and abuse prevention)
• Pages visited and features used within the Service
• Timestamps and session duration

3. How We Use Your Information

We use the information we collect to:

• Monitor your ad campaigns for performance anomalies, budget issues, and metric changes
• Generate AI-powered recommendations and insights using Anthropic Claude
• Send email alerts when performance thresholds are breached
• Deliver weekly and monthly performance reports
• Track budget pacing across your campaigns
• Provide and maintain the Service
• Respond to support requests and communicate with you
• Detect fraud, abuse, and security incidents
• Improve the Service and develop new features

4. AI Processing of Your Data

Ad Pulse Guard uses Anthropic's Claude AI to analyze your campaign metrics and generate recommendations. When you use the AI chat feature or receive AI-generated insights:

• Your campaign performance data (aggregated metrics, not raw personal data) is sent to Anthropic's API for analysis
• Anthropic does not use your data to train their models
• AI-generated recommendations are advisory only and do not constitute professional advertising or financial advice
• We cache AI responses temporarily to improve performance and reduce redundant processing

5. How We Share Your Information

We do not sell your personal information. We may share your data with the following third-party service providers, solely to operate the Service:

• Supabase: Database hosting, authentication, and data storage
• Google Ads API: To fetch your campaign data (read-only access)
• Anthropic (Claude AI): To generate intelligent campaign recommendations
• Stripe: To process subscription payments (we never see or store your full card number)
• Resend: To deliver alert emails and performance reports (which may include campaign metrics)
• Vercel: Application hosting and deployment
• Slack: Only if you choose to connect a Slack workspace to receive alerts
• PostHog: Privacy-conscious product analytics (in-app usage events only — does not receive your Google Ads data)

We may also disclose your information if required by law, court order, or governmental request, or if necessary to protect the rights, property, or safety of Ad Pulse Guard, our users, or the public.

6. Data Retention

We retain your Google Ads campaign data only while your account is active and you have a connected Google Ads account. Alert history is retained for the duration of your account.

When you disconnect a Google Ads account, or delete your Ad Pulse Guard account, we permanently delete the associated Google user data, campaign metrics, alerts, AI recommendation history, and stored OAuth tokens within 30 days — except where retention is required to comply with applicable law. Certain anonymized, aggregated data may be retained for analytics purposes.

7. Data Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit (TLS/SSL) and at rest
• Row-level security (RLS) policies ensure you can only access your own data
• OAuth tokens are securely stored and automatically refreshed
• We never see or store your Google password
• Administrative access is restricted and audited

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights

For All Users

You have the right to:

• Access your personal data stored in our system
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Revoke Google Ads access at any time (via Google Account settings or our dashboard)
• Opt out of non-essential email communications

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

European Residents (GDPR)

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, data portability, and the right to object. Our legal basis for processing is your consent (provided when you create an account and connect your ad account) and our legitimate interest in operating the Service.

To exercise any of these rights, contact us at support@adpulseguard.com.

9. Cookies

We use essential cookies for authentication and session management. These cookies are strictly necessary for the Service to function and cannot be disabled.

We also use PostHog for privacy-conscious product analytics, which helps us understand how the Service is used so we can improve it. This captures in-app usage events (such as pages visited and features used) and does not receive your Google Ads data. We do not use advertising cookies or third-party ad-tracking pixels.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information promptly.

11. Third-Party Links

The Service may contain links to third-party websites or services (such as Google Ads, Stripe, or Anthropic). We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing any information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice within the Service. The "Effective Date" at the top of this page indicates when the policy was last revised. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: support@adpulseguard.com

14. Google User Data & Limited Use

Ad Pulse Guard helps advertisers monitor their Google Ads accounts and receive alerts about performance and budget issues. To provide this service, the App connects to your Google Ads account using Google OAuth and the Google Ads API, with your explicit consent.

What Google user data we access

When you connect your Google account, we request access to the Google Ads scope (https://www.googleapis.com/auth/adwords). With this access, we read the following from the Google Ads accounts you choose to connect:

• Basic Google account profile information (such as your email address) to identify your account
• The list of Google Ads accounts you have access to, so you can choose which to monitor
• Campaign performance data, including spend, impressions, clicks, click-through rate (CTR), conversions, conversion value, cost-per-click (CPC), cost-per-acquisition (CPA), return on ad spend (ROAS), budgets, and budget pacing
• Campaign, keyword, search term, device, and asset-group level metrics
• Campaign status (for example, active or paused)

We request read-only access for monitoring purposes. The App does not create, edit, pause, or delete your campaigns, and does not make changes to your Google Ads account.

How we use Google user data

We use the Google Ads data described above solely to provide and improve the features of Ad Pulse Guard, specifically to:

• Display your account and campaign performance in your dashboard
• Run our Health Check analysis to surface potential issues (such as spend without tracked conversions, low click-through rates, or missing conversion tracking)
• Continuously monitor your account and detect anomalies (such as spend spikes, conversion drops, or budget overruns)
• Send you alerts and digest notifications by email, and by Slack if you choose to connect it
• Generate insights and recommendations to help you improve account performance

How we store and protect Google user data

• Google Ads data and OAuth tokens are stored in our secured database infrastructure (hosted on Supabase).
• Data is encrypted in transit (TLS) and at rest.
• OAuth access and refresh tokens are stored securely and used only to sync your data on your behalf.
• Access to stored data is restricted to authorized systems and personnel for the purpose of operating, maintaining, and securing the service.

How we share Google user data (Subprocessors)

We do not sell your Google user data. We share it only with the service providers ("subprocessors") that are necessary to operate the App, and only to the extent required to provide the service to you:

• Supabase — database hosting and storage of your account and campaign data
• Vercel — application hosting and compute
• Anthropic (Claude) — processes campaign data to generate insights and recommendations for you. We do not permit this data to be used to train third-party models.
• Resend — delivery of alert and notification emails (which may include campaign metrics)
• Slack — only if you choose to connect a Slack workspace to receive alerts

Our payment processor (Stripe) and our product-analytics provider (PostHog) do not receive your Google Ads data; they process only billing information and in-app product-usage events, respectively.

Limited Use disclosure

Ad Pulse Guard's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we do not:

• Sell your Google user data
• Use or transfer your Google user data for serving advertising, including retargeting, personalized, or interest-based advertising
• Transfer your Google user data to data brokers, information resellers, or other third parties for purposes unrelated to providing or improving the App
• Use your Google user data to determine creditworthiness or for lending purposes
• Allow humans to read your Google user data, except: (a) with your affirmative consent, (b) where necessary for security purposes (such as investigating abuse), (c) to comply with applicable law, or (d) where the data has been aggregated and anonymized for internal operations in accordance with applicable requirements

Google data retention and deletion

• We retain your Google Ads data only while your account is active and you have a connected Google Ads account.
• You can disconnect a Google Ads account at any time from within the App, which stops further syncing.
• You can revoke the App's access to your Google account at any time through your Google Account security settings at myaccount.google.com/permissions.
• When you disconnect an account or delete your Ad Pulse Guard account, we delete the associated Google user data and stored OAuth tokens within 30 days, except where retention is required to comply with applicable law.
• To request deletion of your data, contact us at support@adpulseguard.com.