GGaby Ads
Client sign in Get free audit

Privacy Policy

Last updated: 11 October 2026

This policy explains how Gaby Ads ("we", "us"), operator of gabyads.com, handles information when you request a demo or connect your Google Ads account. Have this policy reviewed by your legal advisor and add your company's legal name and registered address before relying on it.

1. Information we collect

  • Contact details you enter in the demo form: name, company, email, website, phone and approximate ad spend.
  • Google account identity: your email address and Google account ID, used to verify that the person connecting is an Administrator of the Google Ads account and to let you sign back in to your portal.
  • Google Ads data (scope https://www.googleapis.com/auth/adwords): account names and IDs, user access roles, campaigns, ad groups, ads, keywords, search terms, budgets, bidding settings and performance metrics.
  • OAuth refresh token that Google issues so we can act on the account you authorized.
  • Authorization records: the time, IP address and browser of your consent and sign-ins, kept as evidence of your authorization.

2. How we use it

  • Demo (before an agreement): we only read your Google Ads data to produce your audit and AI ad review. We make no changes to your account.
  • After you accept a proposal: we create, publish, edit, pause and enable campaigns, ad groups, ads, keywords, negative keywords, budgets and bidding strategies on your behalf, as agreed.
  • AI features: ad text, keywords and performance figures may be sent to our AI provider (Anthropic) to review and write ad copy. Google credentials are never shared.
  • To contact you about your audit and proposal.

We do not sell your data or use it to build advertising profiles.

3. Google API Services User Data Policy

Gaby Ads' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Storage and security

  • Refresh tokens are encrypted at rest with per-token keys (envelope encryption).
  • All traffic is encrypted in transit (HTTPS).
  • Only authorized Gaby Ads staff can access the admin platform. Every change made to your Google Ads account is recorded in an audit log.

5. Retention and deletion

If you don't become a client, we delete your Google tokens and cached Google Ads data within 90 days of your demo. You can revoke access any time in Google Ads (Admin → Access and security) or at myaccount.google.com/permissions, or email [email protected] to have your data deleted. We do so within 30 days.

6. Service providers

  • Google LLC: Google Ads API and sign-in
  • Anthropic PBC: AI ad review and copy
  • Cloudflare, Inc.: network delivery and protection
  • Our hosting provider: server infrastructure

7. Your rights

Depending on where you live (for example under KVKK in Türkiye or GDPR in the EU), you may have the right to access, correct, delete or export your personal data, or to object to its processing. Contact [email protected].