Privacy Policy
This policy explains how Orivox handles information when you connect a Google Ads account to Orivox Campaign Copilot at ads.orivox.org.
Information we collect
During Google sign-in we receive basic account information such as your Google account identifier, name, email address, profile image, and the OAuth permissions you granted. We also keep security and approval records needed to operate and protect your connection.
Google Ads data we access
With your authorization, the connector can access Google Ads customer IDs, account and manager-account relationships, campaign structure and status, ads and assets, targeting, and reporting metrics such as impressions, clicks, cost, and conversions. It can send Google Ads changes that you or your chosen AI assistant explicitly request, subject to the safety controls described on our homepage and in our terms.
How we use Google user data
We use Google user data only to authenticate you, discover accounts you can access, answer your requested reporting or audit queries, perform requested Google Ads actions, show exact approval details, prevent misuse, troubleshoot the service, and comply with law. New campaigns are created PAUSED; campaign activation and budget changes require your explicit signed-in approval.
Orivox does not sell Google user data, use it for advertising, build advertising profiles from it, or use it to train general-purpose AI models.
How we store and protect data
We store user records, granted scopes, encrypted access and encrypted refresh tokens, and time-limited approval records in per-user server records. Refresh tokens allow the connector to act after the short-lived access token expires. Encryption keys are kept separately from the token database. We use access controls and transport encryption, and we limit connector credentials to one Orivox user.
When data is shared
Data is transmitted to Google to use the Google OAuth and Google Ads APIs. Results may be returned to the AI assistant or connector that you deliberately configure and ask to use Orivox. We may use infrastructure providers that process data only to host and secure the service. We may also disclose information when required by law or to protect users and the service. We do not share Google user data with data brokers or sell it to third parties.
Retention
We retain connection records while your Orivox Google Ads connection is active and for only as long as needed to provide and secure the service. Expired approval records may be retained for a limited audit period. Operational logs are limited and are not intended to contain OAuth secrets.
Revoke access and delete data
You can use “Revoke Google access” on the connector page to revoke the Google authorization and delete the stored OAuth tokens. You can also revoke Orivox in your Google Account’s third-party access settings. To request deletion of your Orivox profile record or associated service data, email raiifert@gmail.com from the connected address.
Google API Services User Data Policy
Orivox’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Changes and contact
We may update this policy when the service or legal requirements change and will post the new effective date here. Questions or privacy requests can be sent to raiifert@gmail.com.