Privacy Policy
Last updated October 11, 2026
This policy explains what PPC Master (operated by Digiwolves, “we”) collects, why, and the choices you have. PPC Master helps businesses and agencies review and manage their Google Ads accounts.
What we collect
- Account details: your email address and name when you sign in (directly or with Google).
- Google Ads data you connect: when you authorise access, we read campaign, ad group, keyword, search term, budget, conversion, change-history and recommendation data for the accounts you choose, through the Google Ads API.
- Google access tokens: an OAuth refresh token for each Google login you connect, stored encrypted (AES-256-GCM).
- Optional lead data: if you connect CallRail or upload a booked-jobs file, we store call outcomes, job dates, job values and Google click IDs. Phone numbers and emails from uploaded files are stored only as one-way SHA-256 hashes, never in readable form.
- Settings you enter: project names, target costs, report recipients and similar.
- Billing: if you subscribe, payments are handled by Stripe. We store your Stripe customer and subscription IDs and plan status, never card numbers.
How we use it
- To show you dashboards, audits, alerts, recommendations and reports about your own accounts.
- To make changes in Google Ads that you explicitly approve (for example pausing an ad group, adding negative keywords or creating a paused campaign), and to keep a log of those changes so you can undo them.
- To send emails you ask for, such as weekly reports to the recipients you choose.
- For AI features you start yourself (AI analyst, AI ad copy): a summary of the relevant account numbers, campaign and ad group names, search terms, or the business details you typed is sent to Anthropic's API to generate the result. Access tokens, emails and payment details are never sent. Anthropic does not use API data to train its models, and we never use your Google Ads data to train any AI model.
- To run the service: security, debugging and preventing abuse.
We do not sell your data, use it for advertising, or share Google Ads data with other customers. Aggregated, anonymised benchmarks (for example an industry's average cost per conversion) may be computed in future without identifying any account.
Google user data
PPC Master's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request only the Google Ads scope needed to read and, with your permission, manage the accounts you connect. Google data is used only to provide the features you see in PPC Master; it is not used for advertising, sold, or read by people except where you ask for support, it's needed for security, or the law requires it.
Who processes data for us
- Supabase: database and sign-in.
- Vercel: hosting.
- Stripe: payments (if you subscribe).
- Resend: sending report emails (if you use reports).
- Anthropic: AI analysis and ad copy (only when you use those features).
- Google and CallRail: the services you choose to connect.
Security
Data is encrypted in transit (HTTPS). Google and CallRail credentials are additionally encrypted at rest. Each customer's data is isolated with database row-level security. New accounts connect read-only unless you choose otherwise.
How long we keep it
We keep the 10 most recent data snapshots per connected account and your change log while your account is active. When you remove a project or a Google login, its data is deleted. When you close your account in Settings, we revoke Google access and delete your data immediately; backups roll off within 30 days. Billing records are kept where the law requires.
Your choices
- Disconnect a Google login in Settings, or revoke access at any time at myaccount.google.com → Security → Third-party access.
- Remove an account in its Account settings to remove its data.
- Download a copy of your data, or close your account and delete it, in Settings → Your data. You can also email support@digiwolves.com.
Contact
Digiwolves · support@digiwolves.com
This policy is a starting point written to match how PPC Master works today. Have it reviewed by a lawyer for the countries you operate in.