Privacy Policy

1. Controller and contact

The data controller is Clickmagic Sp. z o.o., ul. św. Filipa 23, 31-150 Kraków, Poland, NIP 6762565212, REGON 383162042. Questions and data requests can be sent to kontakt@clickmagic.pl.

2. Data we process

We process your verified Google account identifier and email address, an encrypted Google OAuth refresh token, session security data, the Google Ads customer identifiers available to your account, the reporting data needed to run an audit, optional business context you submit, generated findings and reports, and limited technical logs used for security and reliability.

3. How Google user data is used

Google user data is used only to authenticate you, list Google Ads accounts you can access, read the selected account's configuration and reporting data, generate the audit you request, display or download that audit, and diagnose service failures. The service does not use Google Ads data to create or modify campaigns and does not sell Google user data.

Clickmagic Ads Audit's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Legal bases

We process data to provide the service you request, to protect the service and its users, to comply with legal obligations, and, where required, based on your consent. You can withdraw OAuth access at any time.

5. Storage, security and processors

Production data is hosted in Google Cloud. OAuth refresh tokens are encrypted at rest, sessions use secure cookies, reports are separated by user ownership, and access to infrastructure is limited to authorized operators. Google acts as a cloud infrastructure provider. We may use additional processors only when needed to operate the service and under appropriate data-protection terms.

6. Retention

Audit inputs, generated reports and related run metadata are retained for up to 90 days and then deleted, unless a shorter period is required by a valid deletion request or a longer period is required by law. Session records expire automatically. A stored Google connection remains until you disconnect it, revoke it through your Google Account, or request deletion.

7. Sharing and transfers

We do not sell Google user data or use it for advertising. Data is shared only with infrastructure providers necessary to operate the service, when you direct us to do so, or when legally required. Where data is transferred outside the European Economic Area, appropriate safeguards are used.

8. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and you may lodge a complaint with a competent supervisory authority. Send requests to kontakt@clickmagic.pl. See the data deletion instructions for operational details.

9. Changes

We may update this policy when the service or legal requirements change. The current version and its effective date will remain available on this page.