Privacy policy
Last updated: October 12, 2026
PPCagent is a service of NedDev BV (Dutch Chamber of Commerce (KvK) 65641922), based in Rotterdam, the Netherlands ("we"). We are the data controller for the personal data described here, under the General Data Protection Regulation (GDPR). Questions: support@ppcagent.io.
This is a translation of the Dutch privacy policy. If the two differ, the Dutch version applies.
What we process
| Data | Why |
|---|---|
| Your name, email address and password (stored as a hash) | To give you an account and sign you in. |
| Your Google account email and a refresh token for the Google Ads API | To access the Google Ads account you connected. The token is stored encrypted. |
| Data from your Google Ads account: campaigns, budgets, keywords, search terms, ads, landing page URLs, conversion and cost figures, change history | To monitor the account, write analyses and recommendations, and apply the changes you approve. |
| What you tell us about your business and what you write to Co-pilot | To make recommendations that fit your business. |
| Technical logs (IP address, time of a request) | Security and troubleshooting. Kept for a limited period and then deleted automatically. |
Google user data
PPCagent requests access to the Google Ads API (scope https://www.googleapis.com/auth/adwords) and to your basic Google profile (email address) only after you choose to connect your account. We use this data solely to provide the PPCagent features you can see in the app: monitoring, analyses, recommendations and the changes you approve.
PPCagent's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we do not sell Google user data, we do not use it for advertising, we do not use it to train general AI models, and people at NedDev only look at it when you ask us to, for security reasons, or when the law requires it. Data from one customer's account is never used for another customer.
You can revoke PPCagent's access at any time in the app (Settings, disconnect) or in your Google account at myaccount.google.com/permissions.
Who else processes data
| Processor | What and why |
|---|---|
| Hetzner Online (Germany) | Hosting of the application and database, in Falkenstein, Germany. |
| OpenAI (United States) | Writing analyses, recommendations, ad copy and Co-pilot's answers. We send summarized account figures and the text needed for the task, not your password or tokens. OpenAI does not use data sent through its API to train its models. |
| DataForSEO | Public Google search results and Google's Ads Transparency Center, for the competitor overview. We send keywords and competitor domains, no personal data. |
| Brevo (France) | Sending emails such as alerts and the monthly report. |
Transfers outside the EU are covered by the EU Standard Contractual Clauses or an adequacy decision.
How long we keep data
Account data is kept for as long as you use PPCagent. When you disconnect your Google Ads account, we revoke and delete the token immediately. When you end your subscription, we delete your account and the Google Ads data we stored within 30 days, except where the law requires us to keep invoices. Encrypted backups are overwritten within 30 days. If you have a free account without a subscription, we delete your account and your data 30 days after you signed up if you haven't connected a Google Ads account, and 90 days after connecting if you have. You get an email seven days beforehand.
Security
Tokens are stored encrypted, every customer's data is separated in the database, connections are encrypted, and access is limited to the people who need it.
Your rights
You may ask us for access to, correction or deletion of your personal data, restriction of or objection to processing, and a copy of your data. Email support@ppcagent.io; we answer within a month. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Website language and cookies
To show the website in the right language, we use your IP address to see which country you're visiting from. This happens on our own server, using a country list from DB-IP; your IP address isn't shared with anyone for this. If you pick a language yourself, we remember that choice for a year in a cookie named taal. That cookie does nothing else: it doesn't track you and isn't used for advertising.
Changes
If we change this policy in a way that matters to you, we tell you by email before the change takes effect.