Privacy Policy

Account information. When you sign up we collect your name, email address and a password (stored only as a one-way hash), your organization's name, and the business details you enter during onboarding, such as your website address, what you sell and the markets you serve.

Google Ads data. If you connect a Google Ads account, you sign in with Google and grant Gexad access to the Google Ads API (scope https://www.googleapis.com/auth/adwords). Through it we read the accounts you can access and, for the account you select: campaigns, budgets, bidding settings, ad groups, keywords, search terms, ads and assets, targeting, conversion actions and their website tag snippets, and performance metrics such as impressions, clicks, cost and conversions. We store a refresh token for this connection, encrypted.

Your website. To analyze your landing pages and check your conversion tracking, Gexad fetches public pages of the website you enter (respecting its robots.txt) and stores their text, structure, image references and the tracking tags found in them.

What you create in Gexad. Campaign drafts, ad texts, settings, approvals and the history of changes made through Gexad.

Billing. If you subscribe to a paid plan, payments are handled by our payment processor, Stripe. Gexad receives your subscription status and billing contact details, never your full card number.

Technical data. Server logs (IP address, browser type, requested pages and errors) kept for security and troubleshooting.

• To provide the service: show your account's performance, diagnose conversion tracking, and generate recommendations for budgets, bids, keywords and ads.
• To make changes in your Google Ads account only when you ask for them — for example creating a campaign you reviewed, or applying a recommendation you approved or that falls under an automation level you turned on. Every change is recorded in your account's activity history.
• To generate content with AI, such as campaign plans and ad texts, from your business details, website content and account data (see section 4).
• To secure the service, prevent abuse, and fix problems.
• To contact you about your account and important changes to the service.

We do not sell your personal information, and we do not use your data for advertising to you or to anyone else.

Gexad's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google Ads data only to provide and improve the features you use in Gexad — the reporting, diagnosis, recommendations and changes described above.
• We do not sell Google user data, and we do not use it for advertising, credit-worthiness or lending purposes.
• We do not transfer it to others except as needed to provide the service (see section 4), to comply with law, or as part of a merger or acquisition with notice to you.
• People do not read it unless you give us permission (for example for support), it is needed for security or abuse investigations, or the law requires it.
• We do not use Google user data to develop, improve or train generalized AI or machine-learning models. When an AI feature uses it, it is sent only to produce the output you asked for.

You can disconnect Google Ads at any time in Gexad (Settings → Connections). Disconnecting revokes Gexad's access token with Google and deletes it from our systems. You can also remove Gexad's access from your Google Account at myaccount.google.com/permissions.

We share information only with providers that process it on our behalf to run Gexad:

• Anthropic — provides the AI model behind AI features. The relevant business details, website content and account data are sent to it to generate a response; under its commercial API terms it does not use this data to train its models.
• Stripe — processes subscription payments.
• Our hosting provider — runs the servers and database where Gexad and your data are stored.
• Google — the Google Ads API itself, for the reads and changes described above.

We may also disclose information when required by law or to protect the rights and safety of our users and the service.

Gexad uses only the cookies it needs to work: a sign-in session cookie (valid for up to 30 days), and short-lived cookies that protect the Google sign-in step. Your browser also stores a few preferences locally, such as the color theme, which sidebar groups are open and your progress in the demo tour. We do not use advertising or third-party tracking cookies.

Connections to Gexad are encrypted (HTTPS). Google access tokens are encrypted at rest, passwords are stored only as hashes, and access to your organization's data is limited to its members according to their roles. No system is perfectly secure, but we work to protect your information and will notify you of a breach affecting it as the law requires.

We keep your information while your account is active. Google Ads data is refreshed from Google while connected; when you disconnect, we stop reading it and delete the access token. To delete your account and your organization's data, email support@gexad.com from your account's email address — we delete it within 30 days, except records we must keep by law (such as invoices). Backups are overwritten on their normal cycle.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict its processing, and to complain to a data protection authority. To use any of these rights, email support@gexad.com. You can correct most account details yourself in Settings.

Gexad is a business tool and is not directed to anyone under 16. We do not knowingly collect information from children.

If we change this policy, we will update the date at the top of this page, and for significant changes we will tell you by email or in the app before they take effect.

Questions about this policy or your data: support@gexad.com. See also our Terms of Service.