Application privacy policy

Google Ads Direct privacy policy

Effective date: October 21, 2026

This policy describes how Namhaha Media LLC operates Namhaha Media – Google Ads Direct, a private application for reviewing and managing authorized Google Ads accounts. It applies to this application, rather than all services or marketing activities on the company website.

1. Information we access

• Application identity: the signed-in ChatGPT user identifier and email used to associate the connection with its authorized owner.
• Google authorization information: OAuth client configuration and access and refresh tokens needed to maintain the Google Ads connection.
• Google Ads information: account identifiers, account and campaign settings, campaign and ad group information, ads and destination URLs, keywords and search terms, assets, targeting, policy and approval information, bids, budgets, performance reports, and related account data requested by an authorized operator.
• Operational records: connection checks, prepared change requests, validation results, expiry and execution states, and information needed to investigate errors and prevent duplicate or unauthorized actions.

The application requests the Google Ads OAuth scope because it supports both reporting and approved account-management operations. We do not request access to Gmail, Google Drive, Calendar or other unrelated Google services through this application's Google Ads connection.

2. How information is used

We use this information to authenticate and maintain the connection, retrieve requested reports, support campaign analysis, prepare and validate requested changes, execute approved operations, verify results, and maintain the application's reliability and security.

We do not sell Google user data. We do not use data obtained through this application for unrelated advertising or to develop or train generalized AI or machine-learning models.

3. Service providers and data flow

The application communicates directly with Google's OAuth and Google Ads APIs. It is hosted using OpenAI's ChatGPT Sites infrastructure and Cloudflare services. Requested Google Ads results and operations may be processed within the authorized user's ChatGPT session. These providers process the information required to deliver authentication, hosting, storage, application tools and the requested analysis.

Data processed in ChatGPT is also subject to the account's applicable OpenAI terms and data controls. This application does not override those settings. We do not share Google Ads information with unrelated parties, except when required by law or necessary to protect the service and address misuse.

4. Storage and security

OAuth credentials and tokens are stored on the server in encrypted, owner-associated records. Prepared change payloads are also encrypted and associated with their owner. Secret OAuth tokens are not intentionally included in browser code or normal tool responses. Google API communications use HTTPS.

Live changes require a concrete prepared request and an authorized operator's approval. Prepared requests are time-limited and checked before execution. No internet service or storage system can be guaranteed completely secure.

5. Retention

Connection information is retained while it is needed to operate the configured connection or until deletion is requested and processed. Prepared change requests expire after 15 minutes and cannot be executed after expiry; expiry does not itself mean that their stored audit records have been deleted. Operational records may be retained to support security, troubleshooting and verification.

To request deletion of application-stored information, contact us using the details below. We will verify the requester's authority and coordinate removal from active application storage. Information held independently by Google, ChatGPT, hosting providers or other authorized operators is governed by their applicable retention policies.

6. Revoke access or request deletion

You can revoke this application's Google access through the third-party connections page of your Google Account. Revoking access stops future authorized Google API calls once the revocation takes effect; it does not automatically delete records already stored by the application.

For application data access or deletion requests, email admin@namhahamediallc.com, with the subject “Google Ads Direct data request”. Do not email OAuth tokens, passwords or other secret credentials.

7. International processing and policy changes

Our hosting and service providers may process information in countries other than the operator's location. We may update this policy as the application changes. The current policy and effective date will be available on this page.

8. Contact

Namhaha Media LLC
admin@namhahamediallc.com
Google OAuth support: lcnamhaha@gmail.com