Privacy Policy
Last updated: 30 October 2026
The short version
- We only read your Google Ads account. We never create, change or delete anything in it.
- We don't store your Google Ads access tokens. Each audit runs while you're connected, and access ends with that session.
- We keep your email address and the audit reports we produce for you, and nothing else from your ad account.
- We never sell your data, never use it for advertising and never use it to train AI models.
- You can ask us to delete everything at any time: hello@advizify.com.
1. Who we are
This policy applies to Advizify, the web application at advizify.com that produces read-only audits of Google Ads accounts for online stores. Advizify is operated by Noberi, MB (company code 306194611), registered at Lietaus g. 6-81, Vilnius, Lithuania ("Advizify", "we", "us"). Noberi, MB is the data controller for the data described here.
It explains what data Advizify accesses, how we use, share, protect and retain it, and how you can have it deleted. Contact: hello@advizify.com.
2. Google user data
Advizify uses a single Google sign-in. It identifies you and, in the same step, gives Advizify read-only access to your Google Ads account, which we use only when you run an audit. This section covers all data Advizify receives from Google APIs ("Google user data").
2.1 What Google user data we access
| When | Scope requested | Data we access |
|---|---|---|
| Sign in with Google | openid, email, https://www.googleapis.com/auth/adwords |
Your Google account ID (a stable identifier) and your email address. The Google Ads permission is granted here but not used until you run an audit. |
| When you run an audit | https://www.googleapis.com/auth/adwords |
The list of Google Ads accounts you can access (names and IDs), so you can choose one. For the account you choose: its settings and last-30-days performance, including campaigns, conversion actions and their settings, search terms, network and location settings, spend, clicks, conversions and the account's change history. |
Each time you run an audit, your browser asks Google for a fresh, short-lived access token for the account you are signed in with, usually without showing you anything. We use it for that audit and then discard it. You can revoke Advizify's access at any time in your Google Account settings, under Security, "Third-party apps with account access".
Advizify only reads Google Ads data. It never creates, edits, pauses or deletes anything in your Google Ads account.
2.2 How we use Google user data
We use Google user data only to provide the features you request in Advizify:
- Google account ID and email: to create your Advizify account, sign you in, show you your past audits, and email you about your audits and your account.
- Google Ads data: to run the audit checks you request, calculate wasted spend, and produce your audit report, which we show only to you.
We do not use Google user data for any other purpose. In particular, we do not:
- sell it, or transfer it to data brokers or information resellers,
- use it for advertising, including retargeting, personalised or interest-based ads,
- use it to determine creditworthiness or for lending,
- use it to develop, improve or train generalised or non-personalised AI or machine-learning models,
- let any person read it, except with your explicit consent (for example, when you ask us for support on a specific audit), when necessary for security purposes such as investigating abuse, to comply with the law, or in aggregated and anonymised form for internal operations.
2.3 How we share Google user data
We do not sell, rent, or share Google user data with third parties for their own purposes. The only disclosures are:
- Infrastructure providers that host Advizify's servers and database store data on our behalf. They process it only to run the service for us, under contractual confidentiality and data protection obligations, and may not use it for anything else.
- Legal requirements: we may disclose data if required by law, or to protect the rights, property or safety of our users, the public or Advizify.
- Business transfers: if Advizify is part of a merger or acquisition, we will notify you before your data is transferred, and it will stay subject to this policy.
Your audit reports are visible only to you. They are shared with others only if you choose to share them yourself.
2.4 How we protect Google user data
- Encryption in transit: all traffic to and from Advizify, and between Advizify and Google APIs, uses HTTPS (TLS).
- Encryption at rest: stored account data and audit reports are kept in a database that is encrypted at rest.
- No stored Google credentials: we request online access only. Your Google Ads access token is held only in memory while an audit runs and is then discarded. We never request or store refresh tokens.
- Minimal data: we store the audit report, not a copy of your Google Ads account data.
- Secure sessions: sign-in sessions use a cryptographically signed, HTTP-only, secure cookie that expires after 12 hours.
- Restricted access: access to production systems is limited to the people who operate Advizify and protected with multi-factor authentication.
2.5 How long we keep Google user data, and how to delete it
| Data | Retention |
|---|---|
| Google Ads access token | Never stored. Held in memory only for the duration of an audit. |
| Raw Google Ads data | Not stored. It is processed in memory to produce the audit report. |
| Audit reports (customer ID, account name, audit date, currency, wasted spend, and findings, which can include campaign names, search terms and spend figures) | Kept while your Advizify account exists, so you can review past audits. |
| Google account ID and email | Kept while your Advizify account exists. |
To delete your data, email hello@advizify.com from the address on your account. We permanently delete your account and all of its audit reports within 30 days and confirm by email.
To revoke Advizify's access to your Google account at any time, go to your Google Account's Third-party apps & services page. Advizify can no longer access your Google data after that.
2.6 Google API Services User Data Policy
Advizify's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3. Other data we collect
- Emails you send us: if you email us, for example with a question about an audit, we keep the conversation, including your email address, to reply and provide the service. We delete it when you ask us to, or once it is no longer needed.
- Your store's public pages: when you run an audit, Advizify opens the landing pages your ads spend the most on, your store's home page, and any public Google Tag Manager containers those pages load, the way any visitor's browser would. It checks that the pages load and reads their code to see which tracking tags and cookie banner are installed. It also opens your store's home page once in a real browser, run by our hosting provider Cloudflare and visiting as if from Germany: it lists the cookies the page sets, clicks "accept" on your cookie banner, and lists them again. Because that browser runs your page's scripts, this one visit may appear in your store's analytics. It only visits public pages: it doesn't sign in, place orders, keep cookie values or collect anything about your visitors. What it finds (such as page addresses, tag IDs, the name of the cookie banner and the names and settings of cookies) is saved in your audit report, and deleted with it.
- Payments: if you buy an audit, the payment is handled by Stripe on its own checkout page. We never see or store your card details. We receive and keep a record of the purchase (Stripe's checkout session ID, the amount, the currency and the date), linked to your account, to add the audit to your account and for our accounting obligations. Stripe processes your payment details under its own privacy policy (stripe.com/privacy).
- Account settings: how many audits you have available and, if you ask for it, that you want an email when paid audits open. We use this only to run your account and to send that email, and delete it with your account.
- Cookies in the app: the Advizify app sets one strictly necessary cookie,
advizify_session, which keeps you signed in and expires after 12 hours. The app uses no analytics, advertising or tracking cookies. - Visit statistics on our website: our website (advizify.com) uses Cloudflare Web Analytics to count visits. It sets no cookies and does not identify or track individual visitors across sites; it records aggregate data such as page views, referring sites, country and device type.
- Google Analytics on our website, only with your consent: if you click "Accept" on the cookie banner, our website loads Google Analytics, provided by Google LLC, which sets cookies (such as
_ga) to measure how visitors find and use the page, with IP addresses anonymised. If you decline, Google Analytics is not loaded and no analytics cookies are set. You can change your choice at any time with the "Cookie settings" link in the footer of our homepage. Google Analytics cookies are used only on the public website, never inside the app, and Google Analytics never receives your Google Ads data or other Google user data described in section 2. - Anonymous usage counts, without cookies: when someone clicks through from our website to the app, signs in, buys an audit or generates a report, our server sends Google Analytics an anonymous count of that action: its name, plus a detail such as which button was used, whether it was a first sign-in or a first report, or the amount and currency of a purchase. Each count uses a random, one-time identifier and contains no cookies, name, email address, Google account ID, Google Ads data or IP address, so it can't be linked to you or to your other actions. We use these counts only to see how many visitors move from the website to a finished report.
- Technical data: our hosting provider processes standard request data such as IP addresses and browser information to deliver and protect the website. We do not use it to profile visitors.
4. Your rights
If you are in the European Economic Area, the United Kingdom or another region with similar laws, you have the right to access, correct, delete, restrict or port your personal data, and to object to how we process it. Our legal bases are performance of our contract with you (running your audits), your consent (connecting Google Ads, and Google Analytics cookies on our website, both of which you can withdraw at any time) and our legitimate interests in keeping the service secure and counting website visits without cookies. To exercise these rights, email hello@advizify.com. You can also complain to your local data protection authority.
Our infrastructure providers may process data outside your country. Where that happens, transfers are protected by safeguards such as the European Commission's Standard Contractual Clauses.
5. Children
Advizify is a business service and is not directed at anyone under 16. We do not knowingly collect their data.
6. Changes to this policy
If we change this policy, we will update the date at the top. If we change how Advizify uses Google user data, we will notify you by email and, where required, ask for your consent before the change takes effect.
7. Contact
Questions or requests about your data: hello@advizify.com.