Privacy Policy

Last updated 25 June 2026

This policy explains what information AdsMaxx accesses, why it accesses it, how it is used and protected, and the choices you have. AdsMaxx is a read only monitoring and alerting tool for the Google Ads accounts that an agency or advertiser manages with permission. It is operated by Karl Benecke ("AdsMaxx", "we", "us"). For any question about this policy or your data, contact karl@karlbenecke.com.

1. Who this policy covers

This policy applies to the AdsMaxx web application and to anyone who connects a Google Ads account to it. It covers the data we access through the Google Ads API and the account information you give us when you use AdsMaxx.

2. What AdsMaxx does

AdsMaxx connects to the Google Ads accounts you choose, with read only access, and reads their performance data on a regular schedule. It compares each read against the account's recent history and a set of performance rules, and raises alerts about wasted spend and account health problems. AdsMaxx does not create, edit, pause or delete anything in any ad account. It has no write path to your accounts.

3. Information we access

3.1 Google Ads data, through the Google Ads API

When you connect a Google account and grant access, AdsMaxx reads the following from the Google Ads accounts you select, using the Google Ads API:

• Campaign settings, type and status, and budget configuration.
• Daily spend, clicks, impressions and impression share.
• Conversions and conversion value, and the conversion tracking configuration of the account.
• Search terms and product level performance for the connected accounts.
• The list of accounts your authorised Google user can access, so you can choose which ones to watch.

AdsMaxx requests Google's read only Google Ads scope. It does not request, and cannot use, any scope that would allow it to change your accounts.

3.2 Account and authentication data

To run your AdsMaxx account we store the email address and name you sign up with, a securely hashed password, and the OAuth credentials (a refresh token and related identifiers) that let AdsMaxx read the Google Ads accounts you connect. We do not receive or store your Google password; Google's own sign in handles that.

4. Google user data and the Google API Services User Data Policy

AdsMaxx's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice this means:

• We use Google Ads data only to provide and improve the read only monitoring and alerting features of AdsMaxx, the features you connected your account to use.
• We do not transfer or sell Google user data to third parties, data brokers, advertising platforms or anyone else, except as needed to provide the service, to comply with applicable law, or as part of a merger or acquisition where the data remains subject to this policy.
• We do not use Google user data for advertising, and we do not use it to train generalised or standalone artificial intelligence or machine learning models.
• We do not allow humans to read Google user data unless we have your explicit consent for specific data, it is necessary for security purposes such as investigating abuse, to comply with applicable law, or the data has been aggregated and anonymised.

5. How we use the information

• To read the Google Ads accounts you connect and compute alerts on wasted spend and account health.
• To keep a history of the metrics we read, so AdsMaxx can show you what changed and detect new problems.
• To authenticate you, run your account, and let you manage who on your team has access.
• To keep the service secure and to diagnose and fix problems.

We do not use your Google Ads data for any purpose other than providing AdsMaxx to you.

6. How we store and protect your data

AdsMaxx runs on a private server in the European Union. The OAuth credentials that let AdsMaxx read your Google Ads accounts (the refresh token and related secrets) are encrypted at rest using authenticated symmetric encryption (Fernet), with the encryption key held outside the database so that a copy of the database alone cannot reveal them. Account passwords are stored only as salted, iterated hashes, never in plain text. Access to the connected accounts is limited to the members of your organisation that you authorise.

7. Sharing and disclosure

We do not sell your data, and we do not share it with third parties for their own purposes. The only narrow exceptions are:

• Service providers strictly necessary to run AdsMaxx, such as the hosting provider, bound to protect the data and use it only to provide their service to us. We do not transfer Google Ads data to advertising or analytics providers.
• Legal requirements, where we are required by law to disclose information.
• Business transfer, where AdsMaxx or its assets are acquired, in which case the data remains subject to a policy at least as protective as this one.

8. Data retention

We keep the metrics history and alerts for a connected account while that account is connected, so the tool can show trends and detect changes. When you disconnect a Google Ads account or close your AdsMaxx account, we delete the stored OAuth credentials and delete or anonymise the associated Google Ads data within 30 days, except where we are required to retain limited records to comply with the law. You can ask us to delete your data sooner at any time.

9. Your choices and how to revoke access

• You can revoke AdsMaxx's access to your Google account at any time from your Google Account permissions page. Once revoked, AdsMaxx can no longer read your accounts.
• You can disconnect an account or delete your AdsMaxx account from within the app, or by contacting us.
• You can ask us what data we hold about you, ask us to correct it, or ask us to delete it, by emailing karl@karlbenecke.com.

10. International users

AdsMaxx is operated for business users and hosted in the European Union. If you access it from outside the European Union, you understand that the information you provide is processed on servers located in the European Union.

11. Changes to this policy

We may update this policy as AdsMaxx changes. When we make a material change, we will update the date at the top of this page and, where appropriate, notify you in the app. Continued use of AdsMaxx after a change means you accept the updated policy.

12. Contact

AdsMaxx is operated by Karl Benecke. For any question about this policy, your data, or to make a data request, contact us at karl@karlbenecke.com.