How Medvedev APP handles data

The App is a Google Ads management and reporting tool built on the Google Ads API. The owner uses it to create and edit campaigns, ads, keywords and budgets in the Google Ads accounts he manages for his clients. Clients sign in to the App to view performance reports for their own advertising accounts.

The App is not a self-service product: only the owner connects Google Ads, and only the owner creates client users and decides which advertising accounts each of them can see. Clients have read-only access to reports and cannot change campaigns.

• Google Ads. The owner authorises the App through Google sign-in (OAuth) within the scope https://www.googleapis.com/auth/adwords. The App reads account structure, campaigns, ad groups, ads, keywords, search terms, settings and statistics, and makes the campaign changes the owner requests.
• Client users. Name, email address, interface language, the list of advertising accounts the user has access to, and sign-in records (time, IP address, browser) for security.

Clients do not sign in with Google and do not grant the App any Google permissions. The App does not request or store Google account passwords, payment details, emails or contacts.

Google Ads data is used solely to manage advertising in the respective accounts and to show reports to the clients who own those accounts. A client sees only the accounts the owner has granted them. Data is not sold, not shared with third parties, and not used for advertising or to train machine-learning models.

The App’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Sign-in codes and invitations are sent by email through Amazon Simple Email Service (Amazon Web Services), which receives only the recipient’s address and the message itself. The App is hosted on the owner’s own servers.

Report data is copied daily from Google Ads into the App’s database so that pages load quickly. Access tokens are stored encrypted on the server and are never shown to users or published. Connections use HTTPS; sign-in codes expire after 15 minutes and are limited in attempts.

Data of a client account is kept while the client works with the owner. When cooperation ends, the user is disabled and their data is deleted on request, or within 12 months.

You can ask what data about you is stored, have it corrected or deleted by writing to the contacts below. The owner can revoke the App’s access to Google Ads at any time at myaccount.google.com/permissions; after that the App stops receiving data.

The website does not collect visitors’ personal data and does not use advertising trackers. The server may keep technical request logs (IP address, time, page URL) to protect against abuse.

Questions about data handling: [email protected], Telegram @medvedevmax.