Privacy policy

Adlyko (“we”, “us”) helps you manage your Google Ads through your own AI agent. This privacy policy explains what data we collect, why, and what your rights are. Questions? Email hi@adlyko.com.

What data we collect

• Account details: your name and email address from your Google account when you sign up.
• Google authorization: an OAuth refresh token that lets Adlyko work in your Google Ads account on your behalf. With it we cannot access your Gmail, Drive or other Google services.
• Google Ads data we read: only from the accounts you check yourself in the portal. Specifically: the account name and customer ID, campaigns, ad groups, ads and ad assets, keywords and search terms, bid strategies and budgets, location and language settings, conversion actions, and the performance figures that go with them (impressions, clicks, cost, conversions, conversion value and Quality Scores). We don’t read any payment or billing details from your Google Ads account.
• Google Ads data we can change: only when you instruct us to through your AI agent. This covers creating and adjusting campaigns, ad groups, ads, keywords, budgets, bids, extensions and conversion actions, and pausing or resuming them. New campaigns are always created paused, so nothing goes live unless you switch it on. We never make changes on our own initiative.
• Usage data: for every action your AI agent takes, we record which tool, which Google Ads account (customer ID), your email address, the status (succeeded or failed) and the time. We use this to secure your account, to track down errors and to count how much of your plan you’ve used.

The free Google Ads audit

You don’t need an account for the free audit. We ask for your name and email address, and optionally your phone number, your website and what kind of business you run, so we can send you the report and get in touch. Then you connect your Google account yourself, so we can read your real numbers instead of giving you a questionnaire.

What we store: the details from the form, the Google address you granted access with, the Google Ads account you chose with its name and customer ID, the findings and the score from the report, and a Google token we used to read the account. During an audit we only read and change nothing. We never use that token to call a function that changes anything.

If you don’t sign up afterwards, we only use your details to send you your own report and to remind you at most twice that it’s ready. Want us to delete everything, including the connection to your Google account? Email hi@adlyko.com. You can also revoke the access yourself at any time through your Google account.

Visitor statistics

To see which channel brings visitors to Adlyko (for example Google, LinkedIn, or direct) and whether that leads to an audit or a signup, we keep a limited, first-party visitor statistic on your very first visit: the referring website, any UTM or ad parameters, your country and city (derived through our hosting provider’s infrastructure, not from your IP address, which we don’t use for this statistic; see “Security and abuse detection” below for the only place where we do use it), the browser and device details your browser sends by default (the user agent), and whether that visit later led to an audit or a signup. This uses a technical, first-party cookie that serves only this purpose, is never shared with third parties or ad networks, and isn’t used to follow you on other websites or to profile you.

One thing we want to say explicitly here: if you sign up later, we link your email address to that first visit, because otherwise we can’t see which channel brought you. From that moment this visit record can be traced back to you. The legal basis for this is our legitimate interest in knowing where our customers come from. If you visit the site without signing up, it stays limited to the details above, without your name or email address. Because this is our own cookie that serves only this purpose and isn’t used for advertising or profiling, the applicable guidelines don’t require a separate cookie consent screen for it. We mention it here for completeness.

Analytics cookies (Google Analytics)

Besides the first-party statistic above, we use Google Analytics (through Google Tag Manager) for more detailed marketing and usage statistics, but only with your consent. These cookies are notset before you click “Accept” in the cookie banner that appears on your first visit; if you choose “Decline”, we don’t load Google Analytics and no Analytics cookies are set. You can change your choice at any time through “Cookie settings” at the bottom of the page. You can read more about how Google handles this data in Google’s privacy policy.

Security and abuse detection

When you sign up, we store a one-way hash (HMAC) of your IP address, never the IP address itself, and that hash can’t be turned back into your real IP address. We use it only to recognize whether the same device or network creates several accounts (for example to get around the limits of a free account), not for marketing or usage statistics, and never combined with the visitor statistics above. The legal basis is our legitimate interest in preventing abuse of a limited free service.

What we use your data for

• To give you access and deliver the product.
• To let your AI agent carry out Google Ads actions that you initiate.
• To prevent abuse and track down errors.
• To communicate with you about your account (for example a welcome email).

We never sell your data and don’t use it for advertising or profiling.

Use of Google user data (Limited Use)

Adlyko’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use the Google Ads access only to provide the features you request in your AI agent, we don’t share this data with third parties for other purposes, we don’t use it for advertising, and we don’t let people read your data except where necessary for security, to comply with the law, or with your explicit consent.

AI models.Your Google Ads data only goes to the AI agent you connect yourself, and only to answer the question you ask at that moment. We never use that data to develop, improve or train AI models, and we don’t pass it on to services that would.

Who we share data with

We only share data with processors needed to deliver the service:

• Google: your Google Ads account (the actions you carry out).
• Supabase: database hosting (account and usage data).
• Vercel: hosting of the website.
• Resend: sending emails (for example your welcome email).
• Stripe: payments and invoicing, if you take out a paid plan (your name, email address, billing address, VAT number and payment details). Your card details never reach us; you enter them directly with Stripe.
• Google Analytics: only if you consent to it in the cookie banner (see above).

Retention

We keep your data for as long as you have an active account. If you request deletion, we erase your account details and refresh token and revoke the access. We may keep usage logs in anonymized or limited form for security and statistics.

Security

Connections run over encrypted HTTPS. Access to your Google Ads account runs through Google’s official OAuth flow; you can revoke that access at any time in your Google account settings. New campaigns are always created PAUSED, so nothing goes live without your approval.

Your rights (GDPR)

You have the right to access, correct and delete your data, and you can always revoke your access. Send a request to hi@adlyko.comand we’ll handle it as quickly as possible.

Changes

We may update this policy. If there are important changes, we’ll let you know by email or through the website.

Contact

Adlyko is a service of Forte Digital (Dutch Chamber of Commerce 99484919) · hi@adlyko.com