Privacy Policy
AdsGuru collects the account data you give us and the ad account data you connect, uses both only to run the product, sells none of it, deletes ad data within 30 days of disconnecting, and answers data requests at hello@adsguru.co within 30 days. Effective November 11, 2026.
Scope of this policy
This policy covers personal data processed by AdsGuru, the AI ads management service at adsguru.co, when you visit the site, start a trial, subscribe, or connect ad accounts to the product. It is written to be read: short sections, plain language, no surprises buried in clause twelve. If anything here is unclear or seems to not cover your case, write to hello@adsguru.co and a person will answer.
AdsGuru acts as the data controller for your account and billing data, and processes the ad account data you connect in order to provide the service to you. This policy took effect on November 11, 2026, and the current version always lives at this address, with material changes announced by email before they apply.
What we collect
We collect three categories of data, and nothing in the background beyond them.
- Account data you give us. Name, email address and password hash when you register; company name if you provide one; support correspondence when you write to us.
- Billing data. Payment details are collected and stored by our payment processor; AdsGuru receives and keeps the subscription status, invoice history and the last four digits and brand of the card, never the full card number.
- Ad account data you connect. Campaign structure, settings, performance metrics and change history from the Google Ads and Meta accounts you connect over the official APIs, together with the OAuth tokens that authorize the connection. We request ads-management scopes only, as described on the security page.
- Service usage data. Log data generated by your use of the product: sign-ins, approvals and dismissals, settings changes, and technical logs (IP address, browser type, timestamps) needed to operate and secure the service.
We do not collect data from your email, files or social accounts, we do not pull your customers' personal data or audience lists into AdsGuru, and we do not buy data about you from anyone.
Why we process it
Every category above maps to a purpose, and we process nothing beyond these purposes.
- Running the product: audits, proposals, applied changes, reports, the change log and your settings. This is the core purpose and covers the ad account data entirely.
- Billing and account administration: charging the subscription, invoices, trial mechanics, plan changes.
- Support: answering what you send to us, with access to your account data limited to what the question requires.
- Security and abuse prevention: technical logs used to protect accounts and the service.
- Transactional email: the daily note, approval notifications, billing receipts and service announcements. Marketing email is sent only if you opted in, and every marketing message has a working unsubscribe.
We do not sell personal data. We do not use your ad data to benefit anyone else's account, to build cross-customer advertising profiles, or to train models offered to third parties. Where the law requires a legal basis, we rely on performance of the contract for running the product and billing, legitimate interests for security and product improvement, and consent where we ask for it explicitly.
Who we share data with
We share data with subprocessors that host and operate the service, and with nobody else except as the law compels.
- Cloud hosting providers that run our infrastructure, under data processing agreements.
- Our payment processor, which handles card data under its own PCI-compliant systems.
- Email delivery providers for transactional messages.
- Google and Meta, in the sense that the service sends the API calls you approve to your own connected accounts.
No advertising brokers, no analytics resellers, no data marketplaces. If a court order or applicable law compels disclosure, we limit it to what is legally required and tell you unless the law forbids it. If AdsGuru is ever acquired or merged, this policy continues to apply to data collected under it, and we will notify you before any change takes effect.
Retention
We keep data only while it serves the purpose it was collected for.
- Ad account data: kept while the connection is active, deleted within 30 days of disconnecting the account or ending the subscription.
- OAuth tokens: deleted immediately when you disconnect or revoke access.
- Account data: kept while your account exists; deleted on account deletion except where the law requires retention.
- Billing records: kept for the period tax and accounting law requires in the vendor's jurisdiction.
- Technical logs: rotated on a short schedule measured in weeks, not years.
Your rights
You can access, export, correct or delete your data, or object to or restrict its processing, by writing to hello@adsguru.co. We answer within 30 days, and we do not charge for requests. Deleting your account removes your data on the schedule above; disconnecting an ad account removes its data within 30 days without touching the rest of your account.
Where your local law grants additional rights (such as under European or US state privacy laws), those rights apply, including the right to complain to your supervisory authority. We will never penalize an account for exercising a privacy right.
Cookies and tracking
AdsGuru uses cookies for one primary job: keeping you signed in. We use first-party cookies for session management and security, and basic first-party measurement of our own site. We do not run third-party advertising trackers on the product, and the product contains no social widgets that leak your visit to other platforms.
The affiliate program uses a first-party referral cookie lasting 60 days so that a referral can be credited, as described on the affiliates page; it records which link referred you and nothing about your browsing elsewhere. Because we do not track visitors across other sites, there is nothing for a do-not-track signal to turn off, which is the state we intend to keep.
Security
Data is encrypted in transit and at rest, access inside the team is least-privilege, and platform access is OAuth-only so your Google and Meta passwords never exist in our systems. The full description of practices, including what we deliberately do not claim, is on the security page. If we ever suffer a breach affecting your personal data, we will notify you without undue delay and tell you plainly what happened and what we are doing.
International transfers and children
Our subprocessors may process data in jurisdictions other than yours; where they do, transfers are covered by the data processing agreements and standard contractual safeguards those providers offer. AdsGuru is a business tool, is not directed at children, and we do not knowingly collect data from anyone under 16; if you believe a child has created an account, write to us and we will delete it.
Agency plan and client data
On the Agency plan, the agency connects client ad accounts into client workspaces, and the same rules apply per workspace: ads-management scopes only, data used solely to run that workspace, deletion within 30 days of disconnecting that account. The agency is responsible for having the authority to connect a client's accounts and for honoring its own agreements with the client; AdsGuru processes the connected data on the agency's instructions as part of providing the service. White-label reports contain the same campaign data the workspace holds, branded for the agency, and nothing more.
How to exercise your rights, step by step
Every right in this policy is exercised the same way, and none requires a form.
- Export: write to hello@adsguru.co from your account email; you receive your account data and change logs in a machine-readable format.
- Deletion: delete the account from settings, or write to us; confirmation arrives when deletion completes on the retention schedule above.
- Correction: account details are editable in settings; anything else, write in.
- Disconnection: remove an ad account in settings or revoke access at Google or Meta directly; its data is deleted within 30 days either way.
- Unsubscribe: every marketing email has a working one-click unsubscribe; transactional email (billing, security) continues while the account exists because the service requires it.
Changes to this policy
When this policy changes, the effective date at the top changes with it, and material changes are announced by email to account holders before they take effect. Continued use after the effective date means the new version applies. Questions about anything on this page: hello@adsguru.co.