Privacy Policy

Last updated: 19 May 2026

UsonaTech builds and operates internal software tools that connect to the Google Ads API on behalf of client advertising accounts. This policy describes what data those tools access, how that data is handled, and how to reach us with any questions.

1. Who we are

UsonaTech is a technology consultancy based in Lahore, Pakistan. Our primary service is managing Google Ads campaigns for a small number of business clients. We do not operate any public-facing advertising platform or consumer-facing application.

2. What data our tools access

Our internal tools access Google Ads accounts through the Google Ads API. The data falls into three categories:

• OAuth 2.0 refresh tokens - issued by Google to authorise our software to read and manage campaign data on behalf of account owners. Stored in a configuration file on our internal servers with restricted access.
• Google Ads account data - campaign names and settings, ad group structures, keywords, ad copy, bid strategies, budgets, and performance metrics (impressions, clicks, spend, conversions). This data belongs to the advertisers whose accounts we manage.
• Account identifiers - Google Ads customer IDs linked to client accounts under our Manager Account (MCC).

We do not collect, store, or process any personal data from people who see or interact with advertisements. No consumer browsing data, no remarketing lists, and no personally identifiable information from ad viewers pass through our systems.

3. How we use this data

All data accessed through our tools serves one purpose: operating and reporting on the Google Ads campaigns we manage for clients. We use it to:

• Read campaign performance reports and share them with account owners
• Adjust keywords, bids, and ad group settings as part of campaign management
• Identify search terms to add as negative keywords
• Monitor the approval status of running ads

We do not use this data for marketing, profiling, or any purpose beyond operating those campaigns.

4. Data we do not collect

• Data from website visitors or ad viewers
• Audience segments or remarketing lists
• Personal data of any end consumer
• Payment information

5. Third-party services

• Google Ads API - used to read and modify Google Ads account data for the accounts we manage. Google processes this data under their own privacy policies.
• Google OAuth 2.0 - used to authenticate access to Google Ads accounts. We do not receive or store Google account passwords.

We do not use any other third-party analytics, advertising, or tracking services on our website or in our tools.

6. Data retention

OAuth tokens are stored for as long as we actively manage the associated Google Ads account. When a client relationship ends, we revoke the token via the Google API and delete the configuration within 30 days.

We do not store campaign performance data in a separate database. Our tools query the Google Ads API in real time and display results directly to our team.

7. Data sharing and selling

We do not sell, rent, license, or share data with any third party. The only parties with access to a client's campaign data are that client's own team and UsonaTech staff working on the account. We will disclose data if required by law, and will notify the account owner where permitted.

8. Security

OAuth tokens and API credentials are stored with restricted read permissions. They are never committed to version control, never transmitted over unencrypted connections, and never shared in plaintext. Access to our internal tooling is limited to UsonaTech staff.

9. Your rights (GDPR and CCPA)

Our tools handle advertiser account data rather than consumer personal data. If you are a client and want to review, correct, or delete data we hold - or revoke our access to your Google Ads account - contact us at [email protected]. We respond within 30 days.

You can also revoke our access directly at myaccount.google.com/permissions by removing the UsonaTech Ads application.

10. Cookies

Our website does not use tracking cookies or third-party advertising cookies. Standard server access logs may record IP addresses for security purposes.

11. Changes to this policy

If we change how we handle data in a material way we will update this page and revise the date at the top.

12. Contact