Privacy Policy

Effective November 6, 2026

This policy explains what information PaidCopilot ("PaidCopilot", "we", "us") collects when you use paidcopilot.com and the PaidCopilot app (the "Service"), how we use it, and the choices you have. Questions: [email protected].

The short version

• You sign in with Google so PaidCopilot can read reporting data from the Google Ads accounts you already have access to.
• We only read Google Ads data. We never create, change or delete anything in your Google Ads accounts.
• Google Ads data is fetched when you open a report and shown to you. We don't keep copies of your reports on our servers.
• We don't sell your information, show you ads, or use your data to train AI models.

Information we collect

When you sign in with Google

• Your email address, from Google, to show who is signed in.
• Google sign-in tokens (an access token and a refresh token) that let the Service request Google Ads data on your behalf.

Google Ads data, while you use the Service

When you open a module, the Service requests data for the account you pick, using the permission you granted. This can include account names and IDs, campaign and asset group names, ad text assets, search terms, and performance metrics such as impressions, clicks, cost, conversions and conversion value. This data is processed to build your report and is not stored on our servers afterwards.

Information you enter

• Website addresses you ask the brand scan to read. The Service fetches the public pages at that address (the home page and up to three key pages).
• Notes or copy you paste into the app, and files you upload, such as an asset report CSV. Uploaded files are read in your browser and not sent to our servers.

Technical information

Like any website, our hosting provider receives standard request information such as your IP address, browser type and the pages requested, to deliver the site and protect it from abuse. We don't use analytics or advertising trackers.

How we use information

• To sign you in and keep you signed in.
• To show the Google Ads accounts you can access and produce the reports and recommendations you ask for.
• To generate suggested ad copy with AI when you click a button that asks for it.
• To keep the Service secure, fix problems and respond to you.

We don't use your information for advertising, and we don't sell or rent it.

Google user data and Limited Use

PaidCopilot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We request the Google Ads permission (https://www.googleapis.com/auth/adwords) only to read reporting data for the features you use. Google describes this permission broadly, but PaidCopilot only makes read requests.
• We use Google user data only to provide and improve the user-facing features of the Service.
• We don't transfer Google user data to others except as needed to provide those features (see "Who we share information with"), to comply with law, or as part of a merger or acquisition with notice to you.
• We don't use Google user data for advertising, and no person reads it unless you ask us to (for example, for support), it's needed for security or legal reasons, or it has been aggregated and anonymized.
• We don't use Google user data to develop, improve or train generalized AI or machine learning models.

Who we share information with

We use a small number of service providers to run the Service. They process information only to provide their service to us:

• Google: sign-in and the Google Ads API. Pages also load fonts from Google Fonts, so Google receives your IP address when you visit.
• Cloudflare: hosting, security and storage of sign-in sessions.
• Anthropic: the AI model behind brand scans and suggested ad copy. When you run these features, we send Anthropic the text needed for the task: website text from the brand scan, notes you add, your brand profile, and the relevant campaign names, asset group names and ad text with the reason each asset was flagged. Anthropic's commercial terms don't allow this data to be used to train its models.

We may also disclose information if required by law, to protect the rights and safety of users or the public, or in connection with a merger, sale or reorganization (with notice to you).

Cookies and browser storage

• sid: one essential cookie that keeps you signed in. It lasts up to 30 days, or until you sign out.
• The app remembers the last Google Ads account you picked in your browser's local storage. Clearing site data removes it.

We don't use advertising or analytics cookies.

How long we keep information

• Sign-in session (your email and Google tokens): deleted when you sign out, or automatically after 30 days.
• Google Ads report data: not stored after it's shown to you.

Your choices and rights

• Sign out in the app to delete your session right away.
• Revoke access at any time from your Google Account's third-party connections page. PaidCopilot then can't read your Google Ads data.
• Access or delete your data by emailing [email protected]. We'll respond within 30 days.

Depending on where you live (for example California, the EU or the UK), you may have rights to access, correct, delete or port your personal information, or object to how it's used. Email us to use them; we won't treat you differently for doing so. Where the GDPR applies, we process your information to provide the Service you ask for (contract) and to keep it secure (legitimate interests). We don't sell or "share" personal information as defined by California law.

Security

Connections to the Service are encrypted (HTTPS). Sign-in sessions are stored server-side and referenced by a random cookie that scripts can't read. Secret keys are kept in encrypted server settings. No method of storage or transmission is completely secure, but we work to protect your information.

Where information is processed

PaidCopilot is operated from the United States, and our providers may process information in the United States and other countries.

Children

The Service is for business use and isn't directed to anyone under 18. We don't knowingly collect information from children.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change materially affects how we use your information, we'll give notice in the Service before it takes effect.

Contact

PaidCopilot · [email protected]