Privacy Policy

This policy explains what CampaignOps Manager does with information obtained from Google APIs. It is written for the people who review our Google Ads API and OAuth access, and for the members of our own team who authorise the application.

1. Who we are

CampaignOps Manager is an internal software application operated by the Nellamuse team. The application is reached at campaignops.nellamuse.com, and questions about this policy can be sent to contact@nellamuse.com.

The application is not a public service. It is used by our organisation to manage advertising on Google Ads accounts that our organisation owns.

2. Scope of this policy

This policy covers two things:

• the CampaignOps Manager application, and the Google Ads data it reads or changes after a member of our team authorises it; and
• the information-only website published at campaignops.nellamuse.com.

It does not cover Google's own handling of data. Google's practices are described in theGoogle Privacy Policy.

3. Information we access through Google

Access begins only when a member of our team signs in with a Google Account that already has access to our Google Ads manager account and grants the application authorisation through Google's OAuth 2.0 consent screen. The application requests the Google Ads API scope (https://www.googleapis.com/auth/adwords).

With that authorisation, the application accesses the following for accounts we manage:

• Account structure data such as the manager account, linked client accounts, campaigns, ad groups, keywords, ads, budgets and bidding settings.
• Performance and status data such as impressions, clicks, cost, conversions and the serving status of campaigns, ads and keywords.
• Change history for the accounts we manage, so that our team can see what was modified and by which staff account.
• Authorising user identity such as the Google Account email address of the person who granted access, used to attribute actions to a person rather than to an anonymous session.

The application is limited to the Google Ads accounts our organisation owns and the client accounts linked to them. It does not request or receive access to any other advertiser's account, and it does not request access to Gmail, Drive, Calendar or any other Google service.

4. How we use the information

Information obtained through the Google Ads API is used only to:

• operate, monitor and report on advertising campaigns that our organisation runs;
• create, edit, pause, resume and track campaigns, ad groups, ads, keywords and budgets in our own accounts;
• apply tracking parameters and final URL settings requested by our team;
• keep an internal record of the changes the application performs; and
• diagnose faults and maintain the security of the application.

5. Google API Services User Data Policy and Limited Use

In particular, information received from Google APIs is used only to provide and improve the features of the application that are described on this website. It is not transferred to third parties except as required for security purposes, to comply with applicable law, or as part of a merger or acquisition approved by Google's policy. It is never used for serving advertisements, and it is never used for any purpose that is not part of the application's own internal advertising operations. No human reads Google Ads data unless it is necessary for security, for compliance with law, or with the explicit consent of the account holder.

6. Information we do not collect or share

We do not:

• sell, rent, trade or otherwise share Google Ads data or personal information with third parties for their own purposes;
• use Google Ads data for targeted advertising, profiling or credit assessment;
• allow third-party advertisers, data brokers or analytics services to receive data from the application or from this website;
• collect information from visitors to this website. There is no sign-up, no login form and no data submission of any kind on these pages.

7. Storage, retention and deletion

The application stores the minimum needed to operate: OAuth 2.0 credentials for the authorising account, a working cache of the advertising data it reads, and an internal log of actions taken. Credentials are stored in encrypted form and are never displayed in the application's interface.

Working data and logs are retained only while the application is in use and are deleted when they are no longer needed for the purposes described in this policy. When a member of our team revokes authorisation in their Google Account, the stored credentials stop working immediately and are removed from our systems. A request to delete stored advertising data or records can be sent to contact@nellamuse.com, and we will action it promptly, subject to any record-keeping obligation that applies to us.

8. Security

Access to the application is restricted to authorised members of our team. Traffic between the application, Google APIs and this website is carried over HTTPS. Authorisation credentials are encrypted at rest, actions performed through the Google Ads API are logged, and access is removed when a person leaves the team or no longer needs it.

No method of transmission or storage is completely secure, but we take these measures to protect the data our organisation is responsible for, and we review them as the application changes.

9. Revoking access and your choices

A person who has authorised the application can withdraw that authorisation at any time from the Google Account permissions page atmyaccount.google.com/permissions. Removing the application there ends its ability to reach the associated Google Ads data. Access can also be ended by removing the staff member's Google Ads account access, or by contacting us at contact@nellamuse.com.

10. This website, cookies and analytics

The website at campaignops.nellamuse.com is a static, three-page information site. We have added no sign-up, no login, no comment feature, no advertising tag and no analytics of our own to it. The pages set no cookies, and there is no form anywhere on the site that collects information from a visitor.

The site is delivered through Cloudflare, which is also the provider of our DNS. Cloudflare applies platform-level features to pages on our domain on our behalf: a cookie-less web analytics beacon that records aggregate page views and performance data, and an email address rewrite that keeps published addresses away from automated address harvesters. As a hosting and security provider, Cloudflare also processes request metadata such as IP address, user agent and response timing in order to deliver and protect the site. That processing is described in Cloudflare's ownprivacy policy.

Apart from links to Google's policy pages and to Cloudflare's policy page, the site contains no external content.

11. Children

CampaignOps Manager is an internal business tool for advertising professionals and is not directed to children. We do not knowingly collect information from children through this application or this website.

12. Changes to this policy

We update this policy when the application or our practices change. The revision date at the top of the page always shows the current version, and material changes will be reflected here before the change takes effect.

13. Contact

For any question about this policy, about the data the application holds, or about a deletion request, write tocontact@nellamuse.com.