AdsDesk 是武汉得鹿网络科技有限公司（以下简称“我们”）运营的内部 Google Ads 管理工具。本政策说明：用户明确授权后，我们会访问哪些 Google Ads 数据、如何使用和保护这些数据，以及用户如何撤销授权或申请删除。
1. 我们访问哪些数据
授权用户连接 Google 账号后，AdsDesk 通过 Google OAuth 和 Google Ads API，使用 https://www.googleapis.com/auth/adwords 授权范围，访问投放管理所必需的数据：
- OAuth 授权信息，以及识别已授权账号所需的基本账户信息；
- 用户有权管理的 Google Ads 客户账号信息；
- 广告系列、广告组、广告、关键词、预算、出价和相关配置；
- 广告效果、搜索字词和报告数据；
- 关键词规划及账户管理所需的其他 Google Ads 数据。
AdsDesk 不会索取用户的 Google 账号密码。
2. 数据用于什么
这些数据仅用于用户授权范围内的 Google Ads 账号管理：创建和管理广告系列、生成报告、分析广告效果，以及规划关键词。凡是可能改变广告账号的操作，都须由有权人员在执行前审核确认。
我们不出售 Google 用户数据，也不将其用于个性化广告或与上述目的无关的用途。
3. 何时共享或披露数据
我们不会向第三方出售或出租 Google 用户数据。数据仅可能在以下必要情形下披露：
- 为提供服务，向受保密和数据保护义务约束的基础设施服务商披露必要数据；
- 根据法律法规，或应司法及监管机关的合法要求披露数据。
4. 数据如何存储和保护
我们只保存提供 AdsDesk 功能所必需的授权信息和业务记录。OAuth 访问令牌、刷新令牌、OAuth 客户端密钥和 Google Ads 开发者令牌不会显示在界面或报告中，也不会被有意写入应用日志。
Web 审核环境不请求或保存刷新令牌。短期访问令牌仅在服务端使用，以 AES-GCM 加密后，保存在带有 HttpOnly、Secure 和 SameSite=Lax 属性的会话 Cookie 中，最长保留 55 分钟。
桌面运行环境的长期凭据仅保存在本机配置目录，文件权限限于该系统用户读写。
Web OAuth 回调，以及与 Google OAuth、Google Ads API 的通信，全部使用 HTTPS。桌面演示在适用时使用本机回环回调（127.0.0.1）。
只有履行工作职责所需的授权人员可以访问 Google 用户数据。我们采用最小权限、访问控制和凭据隔离措施。
5. 如何撤销授权和删除数据
用户停止使用服务、撤销 Google OAuth 授权或提出删除请求后，我们将在 30 天内删除相关授权信息，以及受本政策约束的 Google 用户数据。法律法规要求保留的记录除外。
用户可以随时在 Google 账号的第三方应用访问设置中撤销 AdsDesk 授权，也可以发送邮件至 [email protected]，提出访问、更正或删除请求。
6. Google API 数据政策
AdsDesk 对从 Google API 获取的信息的使用，以及向其他应用的传输，将遵守 Google API Services User Data Policy，包括其中的 Limited Use 要求。
7. 本政策如何更新
本政策如有重大变化，我们会在本页面发布更新，并修改“最后更新日期”。
8. 联系我们
武汉得鹿网络科技有限公司
隐私与数据删除请求：[email protected]
AdsDesk Privacy Policy
返回中文内容AdsDesk is an internal Google Ads management tool operated by Wuhan Delu Network Technology Co., Ltd. (“we,” “us,” or “our”). This policy describes the Google Ads data we access with a user's explicit authorization, how we use and protect it, and how users can revoke access or request deletion.
Data we access
AdsDesk uses Google OAuth and the Google Ads API with the https://www.googleapis.com/auth/adwords scope. We access only data needed for advertising management: OAuth authorization information and basic information that identifies the authorized account; Google Ads customer accounts the user may manage; campaigns, ad groups, ads, keywords, budgets, bids and related settings; performance reports and search terms; and other Google Ads data needed for keyword planning and account management. AdsDesk does not ask for a user's Google account password.
How we use data
We use this data only to manage Google Ads accounts within the user's authorization, including creating and managing campaigns, preparing reports, analyzing performance and planning keywords. Any operation that may change an advertising account requires review and confirmation by an authorized person before execution. We do not sell Google user data or use it for personalized advertising or unrelated purposes.
Sharing and disclosure
We do not sell or rent Google user data to third parties. We may disclose necessary data to infrastructure providers that need it to deliver the service and are bound by confidentiality and data-protection obligations. We may also disclose data when required by law or by a lawful judicial or regulatory request.
Storage and security
We retain only the authorization information and operational records needed to provide AdsDesk. OAuth access tokens, refresh tokens, OAuth client secrets and Google Ads developer tokens are not shown in the interface or reports and are not intentionally written to application logs.
The web review environment does not request or store refresh tokens. Its short-lived access token is used only on the server and stored in an AES-GCM-encrypted session cookie with HttpOnly, Secure and SameSite=Lax attributes. The cookie is retained for no more than 55 minutes.
The desktop environment stores long-lived credentials only in a local configuration directory, with file permissions limited to that system user's read and write access.
The web OAuth callback and all communication with Google OAuth and Google Ads API endpoints use HTTPS. Where applicable, the desktop demonstration uses a local loopback callback (127.0.0.1). Google user data is accessible only to authorized personnel who need it for their work, with least-privilege access controls and credential isolation.
Revocation, retention and deletion
When a user stops using the service, revokes Google OAuth access or requests deletion, we delete the relevant authorization information and Google user data covered by this policy within 30 days, except for records we must retain by law.
Users can revoke AdsDesk access at any time in Google Account permissions. Requests to access, correct or delete data can be sent to [email protected].
Google API Services User Data Policy
AdsDesk's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Policy updates
If this policy changes materially, we will publish the update on this page and revise the last-updated date.
Contact
Wuhan Delu Network Technology Co., Ltd.
Privacy and deletion requests: [email protected]