Privacy Policy

When you connect an account you authorize us through Google OAuth. We request three scopes and no others:

• .../auth/adwords — read your Google Ads data and, with your approval, add negative keywords.
• openid and email — identify you, so your connected ad accounts resolve to the right Search Term Pro account.

Using the Google Ads scope, we read only what a review needs:

• Account identity: customer ID, account name, currency, manager/child structure.
• Campaigns: ID, name, status, channel type.
• Search terms report for the review period: the search term text with its impressions, clicks, cost and conversions.
• Keywords and your existing negative keyword lists, so we never propose a duplicate.

We do not access Gmail, Drive, Calendar, Contacts, your billing details, or any Google product other than Google Ads.

Changes we make are limited to negative keywords and the lists that hold them:

• Adding negative keywords to a negative keyword list.
• Creating a new negative keyword list, where none of your existing lists suits a proposal, and attaching that new list to your enabled Search campaigns so it takes effect.
• Removing negative keywords we added, if you revert a change.

We never touch budgets, bids, ads, positive keywords, or your campaign settings beyond attaching a negative keyword list as described above.

Nothing is written without your approval, unless you explicitly switch on auto-apply for a scheduled review — in which case approved-by-policy negatives are applied automatically on the schedule you set. You can turn it off, and revert any applied change, at any time.

Solely to produce your review and apply what you approve. We do not use your Google user data for advertising, we do not sell it, we do not share it with data brokers, and we do not use it to train any machine learning or AI model.

Reviews are classified by a large language model. To do that, we send the model your candidate search terms and their spend metrics, together with your brand name, website, a summary of what you sell, and the names and sample contents of your existing negative lists. This is Google user data leaving our systems, so we want to be plain about it.

The model is run by OpenAI or Anthropic, whichever you select. Search Term Pro is bring-your-own-key: reviews run against your own API key, on your own account with that provider, and your use of it is governed by that provider's terms and privacy policy. Both OpenAI and Anthropic state that data submitted via their APIs is not used to train their models by default.

We share your Google user data with no other third party for any other purpose.

• Your OAuth tokens, encrypted at rest with AES-256-GCM under a key held outside the database. We store one grant per Google account you authorize — not one per ad account.
• Your Google account identifier and email address, to link your ad accounts to your Search Term Pro account.
• Your reviews: the proposed negatives, the search terms behind them, and the spend figures that justified them — so you can see why a term was flagged.
• A change log of every negative applied or reverted, so changes are auditable.
• Your AI provider API key, encrypted at rest with AES-256-GCM. It is used only to run your reviews.

Data is held in Postgres hosted by Supabase, and the application runs on Vercel. Email notifications about your reviews are sent via Resend. These providers process data on our behalf as subprocessors.

We keep your data for as long as your account is connected, because the review history is the product. You can remove it at any time:

• Revoke our access at myaccount.google.com/permissions. This immediately ends our ability to read or change your Google Ads account.
• Email michael@twospouts.com to have your account and all associated tokens, reviews and logs deleted. We action deletion requests within 30 days.

Revoking access via Google stops all future access but does not by itself erase reviews already stored — email us to delete those.

We protect your data — and especially sensitive data such as your Google OAuth tokens and the Google Ads search-term data we access on your behalf — with the following safeguards:

• Encrypted in transit. All traffic between you and the app, and between the app and Google's and our providers' APIs, is encrypted with TLS (HTTPS).
• Encrypted at rest. Sensitive credentials — your Google OAuth tokens and your AI provider API key — are encrypted with AES-256-GCM before they are stored, under a key held outside the database. The underlying database and storage are also encrypted at rest by our infrastructure providers.
• Restricted access. Your Google user data is accessed only by the application acting on your behalf to run the reviews you request. Access by our staff is limited to a small number of authorized personnel, only when needed to provide support or diagnose a problem.
• Secure infrastructure. Data is hosted on Supabase (Postgres) and Vercel, which maintain industry-standard security controls, and is processed by our subprocessors only under contract and on our instructions.
• Never used to train models. Your Google user data is never used to develop, improve or train any AI or machine-learning models. Reviews run on the provider you select (OpenAI or Anthropic), both of which state that data sent via their APIs is not used to train their models by default.

Search Term Pro's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Twospouts is the controller for this data under the UK GDPR and the Data Protection Act 2018. You have the right to access, correct, export or erase your personal data, and to object to or restrict its processing. Exercise any of these by emailing michael@twospouts.com. You may also complain to the UK Information Commissioner's Office.

If this policy changes materially we will update this page. Questions about privacy or this policy: michael@twospouts.com.