Privacy Policy
This Privacy Policy explains what information Search Ad Spy ("the app", "we") collects, how it is used, stored and shared, and what choices you have. Search Ad Spy is a private ad intelligence workspace available at https://search.dimkar.com. It is used by invited members of a media buying team.
1. Information we collect
Account information
Accounts are created by the workspace administrator. For each account we store a username, an optional display name, a role (buyer, team lead or administrator), and a salted password hash. We never store passwords in plain text.
Session and technical data
When you sign in we set a session cookie and store a hashed session token on the server. For security and audit purposes we record the IP address and browser user agent of sign-ins and of administrative actions.
Activity inside the app
We store what you create in the workspace: tags, feedback, saved preferences such as interface language and theme, and a log of creative downloads.
Google user data
Using Search Ad Spy does not require a Google account. If you choose to connect a Google Ads account, Google asks you to grant the app access to the Google Ads API (the https://www.googleapis.com/auth/adwords scope). With that permission the app accesses:
- the identifiers and names of the Google Ads accounts you can access, so that you can choose which one to use;
- Keyword Planner data requested through that account: keyword ideas, average monthly searches, competition level and bid estimates;
- the OAuth access and refresh tokens issued by Google, which let the app make these requests on your behalf.
The app does not access Gmail, Drive, contacts, calendar or any other Google service.
Public advertising data
The ads shown in the app come from publicly available sources such as the Meta Ad Library. This is advertiser content, not personal information about the app's users.
2. How we use information
- To sign you in, keep your session, and apply the permissions of your role.
- To provide the features of the workspace: browsing and filtering ads, tagging, feedback, and downloads.
- To keep the service secure, investigate abuse, and audit administrative changes.
- To operate, maintain and back up the service.
We do not use your information for advertising, we do not sell it, and we do not build marketing profiles of users.
3. Google user data
How it is used. Google Ads data is used only to show keyword research to you and the members of your workspace, so that the team can plan campaigns. The app does not create, edit or delete campaigns, ads, budgets or billing settings in your Google Ads account.
How it is stored and protected. Google user data is transmitted only over HTTPS and stored on access-restricted servers. OAuth tokens are stored on the app's server; they are never shown in the interface and never shared. Keyword research results you request are kept in your workspace so that you and your team can refer to them later, and are available only to signed-in members of the workspace.
How it is shared. Google user data is visible only to members of your own workspace. It is not sold and is not passed to third parties other than the infrastructure providers that host the service.
How long it is kept. OAuth tokens are kept only while the Google Ads account stays connected, and are deleted as soon as you disconnect it or withdraw access in your Google Account. Saved keyword research results are kept until you ask us to delete them or the account that connected Google Ads is removed.
Search Ad Spy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google user data only to provide and improve the user-facing features described in this policy.
- We do not sell Google user data and do not transfer it to third parties, except as needed to provide those features, to comply with applicable law, or as part of a merger or acquisition with equivalent protections.
- We do not use Google user data for serving advertisements, including retargeting or interest-based advertising.
- We do not provide Google user data to data brokers or information resellers, and we do not use it to determine credit-worthiness or for lending purposes.
- We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.
- No person reads Google user data unless you give explicit permission for specific items, it is necessary for security purposes such as investigating abuse, or it is required by law.
You can withdraw the app's access at any time in your Google Account at myaccount.google.com/permissions. When access is withdrawn or you disconnect your Google account in the app, we delete the stored access credentials.
4. Cookies
The app uses only cookies that are necessary for it to work: a session cookie that keeps you signed in for up to 14 days, and a cookie that remembers your interface language. We do not use advertising or third-party analytics cookies, and the app loads no third-party tracking scripts.
5. Sharing and disclosure
We do not sell personal information. We share it only in these cases:
- Infrastructure providers. The service runs on rented servers and keeps backups in cloud storage. These providers process data on our behalf to host and back up the service.
- Legal requirements. We may disclose information if required by law or to protect the security of the service and its users.
Public ad content is processed by third-party AI services to classify it. Account information and Google user data are not sent to those services.
6. Storage, retention and deletion
Account information and workspace activity are kept for as long as the account exists. Sessions expire after 14 days or when you sign out. When an account is removed, its data is deleted from the live service; backup copies may persist for a limited period, typically up to 30 days, before they are overwritten.
You can ask us to delete your account and associated data, including any Google user data, by writing to support@dimkar.com. We act on such requests within 30 days.
7. Security
All traffic to the app is encrypted with HTTPS. Access requires an individual account and is limited by role. Passwords are stored only as salted hashes, and session tokens are stored hashed. No method of transmission or storage is completely secure, but we work to protect your information and limit access to it.
8. Your choices and rights
You may request access to, correction of, or deletion of your personal information, and you may withdraw Google access at any time as described above. To exercise these rights, contact us at support@dimkar.com.
9. Children
Search Ad Spy is a professional tool and is not directed to children. We do not knowingly collect personal information from anyone under 18.
10. Changes to this policy
We may update this policy as the app changes. The effective date at the top of the page shows when it was last revised. Material changes to how Google user data is handled will be announced inside the app before they take effect.
11. Contact
Questions about this policy or about your data: support@dimkar.com.