Privacy Policy

Effective 5 November 2026

This policy explains how Fehu Marketing Limited, Hong Kong ("we") handles data in RudderAds, the Google Ads management service at rudderads.com. Questions and requests: [email protected].

Data we collect

• Account data: your username, name, email address, a hash of your password, your role and your access levels.
• Google Ads data: when you connect an account, we read through the Google Ads API its account and campaign structure, settings, ads and assets, keywords, search terms, performance metrics, conversion data, placement data and click data, including click identifiers (GCLID).
• Partner data: if you connect an affiliate or partner program, we process its reports, such as registrations, deposits and commissions, to match them to clicks.
• Content you create: campaign notes, algorithm settings, decisions on recommendations, drafts, generated images and copilot conversations.
• Activity and technical data: a log of changes made through the service, which records who made each change and when, and the server logs of requests, including IP addresses.

How we use data

We use this data only to provide RudderAds to you: showing reports, producing recommendations, carrying out the changes you approve, keeping the change history, securing the service and supporting you. We read Google Ads data on your behalf and change your account only when an authorized user approves the change.

Data received from Google APIs

RudderAds' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the user-facing features of RudderAds.
• We do not sell Google user data, and we do not use or transfer it for advertising to you or anyone else.
• We do not use Google user data to train generalized artificial intelligence or machine learning models.
• Our staff read Google user data only with your agreement, for example for support, or where security or the law requires it.

Service providers we share data with

We do not sell personal data. We share data with providers only as far as they need it to run the service:

• Cloudflare: network delivery and protection for all traffic to the site.
• Our server hosting provider: storage and processing of the service.
• Anthropic: when you use the AI copilot, the builder or AI analysis, the relevant campaign data and your instructions are sent to its API to generate a response.
• OpenAI or Google (Gemini): when you generate ad images, the prompts are sent to the provider selected in the settings.
• Bunny.net: storage and delivery of ad images, where image storage is enabled.
• Google Fonts and jsDelivr: this website and the application load fonts from Google Fonts, and the signed-in application loads scripts from jsDelivr. These networks receive your IP address when they serve those files.

We may also disclose data if the law requires it, or to protect the rights and safety of users and of the service.

Cookies

The application uses one essential session cookie to keep you signed in, for up to 30 days. It also stores interface preferences, such as filters and the selected account, in your browser. We do not use advertising cookies, and the public site does not use analytics cookies.

Retention

We keep your data while your account is active, because historical campaign and click data is what the analysis relies on. When you ask us to delete your account or disconnect your data, we delete it from the live service within 30 days unless the law requires us to keep it longer. Server logs are kept for a limited period for security.

Security

Traffic is encrypted in transit. Passwords are stored only as hashes. Credentials and service data are kept outside the public web directory with access restricted on the server. Every application action is checked against your role and account access. No system is perfectly secure, so please tell us at once if you suspect unauthorized access.

Revoking access

You can stop our access at any time by removing the manager link in Google Ads. If you connected through Google sign-in, you can also remove RudderAds in your Google Account permissions. To have your data deleted as well, email us.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict its processing, and to complain to a data protection authority. To use these rights, email us and we will respond as the applicable law requires.

International transfers

Our providers may process data in countries other than yours. Where the law requires it, we use appropriate safeguards for these transfers.

Children

RudderAds is a business tool and is not intended for anyone under 18.

Changes

We will publish any update on this page with a new effective date, and we will notify users by email or in the application about material changes.