Privacy policy
Last updated: 8 October 2026
PPCagent is a service of NedDev BV (Chamber of Commerce 65641922), established in Rotterdam, the Netherlands ("we"). We are the data controller for the personal data described here, under the General Data Protection Regulation (GDPR). Questions: support@ppcagent.io.
What we process
| Data | Why |
|---|---|
| Your name, email address and password (stored as a hash) | To give you an account and sign you in. |
| Your Google account email and a refresh token for the Google Ads API | To access the Google Ads account you connected. The token is stored encrypted. |
| Data from your Google Ads account: campaigns, budgets, keywords, search terms, ads, landing page URLs, conversion and cost figures, change history | To monitor the account, write analyses and proposals, and apply the changes you approve. |
| What you tell us about your business and what you write to the assistant | To make proposals that fit your business. |
| Technical logs (IP address, time of a request) | Security and troubleshooting. Kept for a limited period and then deleted automatically. |
Google user data
PPCagent requests access to the Google Ads API (scope https://www.googleapis.com/auth/adwords) and to your basic Google profile (email address) only after you choose to connect your account. We use this data solely to provide the PPCagent features you can see in the app: monitoring, analyses, proposals and the changes you approve.
PPCagent's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we do not sell Google user data, we do not use it for advertising, we do not use it to train general AI models, and people at NedDev only look at it when you ask us to, for security reasons, or when the law requires it. Data from one customer's account is never used for another customer.
You can revoke PPCagent's access at any time in the app (Settings, disconnect) or in your Google account at myaccount.google.com/permissions.
Who else processes data
| Processor | What and why |
|---|---|
| Hetzner Online (Germany) | Hosting of the application and database, in Falkenstein, Germany. |
| OpenAI (United States) | Writing analyses, proposals, ad texts and assistant answers. We send summarised account figures and the texts needed for the task, not your password or tokens. OpenAI does not use data sent through its API to train its models. |
| DataForSEO | Public Google search results and Google's Ads Transparency Center, for the competitor overview. We send keywords and competitor domains, no personal data. |
| Brevo (France) | Sending emails such as alerts and the monthly report. |
Transfers outside the EU are covered by the EU Standard Contractual Clauses or an adequacy decision.
How long we keep data
Account data is kept as long as you use PPCagent. When you disconnect your Google Ads account we revoke and delete the token immediately. When you end your subscription we delete your account and the Google Ads data we stored within 30 days, except where the law requires us to keep invoices. Encrypted backups are overwritten within 30 days.
Security
Tokens are stored encrypted, every customer's data is separated in the database, connections are encrypted, and access is limited to the people who need it.
Your rights
You may ask us for access to, correction or deletion of your personal data, restriction of or objection to processing, and a copy of your data. Email support@ppcagent.io; we answer within a month. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
If we change this policy in a way that matters to you, we tell you by email before the change takes effect.