Privacy Policy
This Privacy Policy explains how Zalnative ("we", "us") collects, uses, stores, shares and protects data when you use Zalnative Ads Manager (the "App"). The App is an internal tool that connects to the Google Ads API so that Zalnative and the businesses whose Google Ads accounts we manage can analyze and manage their advertising through an AI assistant.
1. Who can use the App
The App is used only by Zalnative staff and by clients who have granted Zalnative access to their Google Ads accounts through a Google Ads manager (MCC) account. It is not offered to the general public and is not intended for children under 18.
2. Data we access from Google
When an authorized user signs in with Google and grants permission, the App requests the Google Ads scope (https://www.googleapis.com/auth/adwords). With it, the App can access only the Google Ads accounts that the signed-in Google account is already allowed to manage. This data can include:
- Account information: customer IDs, account names, currency and time zone.
- Campaign structure and settings: campaigns, ad groups, budgets, bidding strategies, locations, languages and network settings.
- Keywords, negative keywords, search terms, ads and ad assets (headlines, descriptions, sitelinks, callouts, landing page URLs).
- Performance metrics: impressions, clicks, cost, conversions, conversion value, impression share and Quality Score.
- Conversion action settings and account change history.
- Keyword Planner data: keyword ideas, search volumes, competition and bid estimates.
The App does not request access to Gmail, Google Drive, Contacts, Calendar or any other Google service. Through the OAuth process, Google issues the App an access token and a refresh token. These tokens allow the App to call the Google Ads API on the authorized user's behalf.
3. How we use the data
We use Google Ads data only to provide the App's features to the authorized user who requested them:
- Generating reports and audits of Google Ads account performance.
- Doing keyword research and campaign planning.
- Making changes to campaigns, budgets, keywords, negative keywords, bids and ad status. These changes are made only after the authorized user reviews and explicitly approves each one.
We do not:
- sell Google user data, or use it for advertising, retargeting or interest-based ads;
- use Google user data to build or train generalized artificial intelligence or machine learning models;
- use Google user data to determine creditworthiness or for lending purposes;
- allow humans to read the data, except where (a) the user has given affirmative consent for specific data, (b) it is necessary for security purposes such as investigating abuse, (c) it is required by law, or (d) the data is aggregated and anonymized for internal operations.
4. AI assistant processing
The App works as a connector for an AI assistant (Claude, provided by Anthropic). When an authorized user asks a question or requests a change, the App retrieves the relevant Google Ads data and returns it to that user's own AI assistant session so the assistant can answer. The data is transferred only to provide the feature the user requested, and only to that user. Processing by the AI assistant is governed by the assistant provider's terms and privacy policy. Google user data is not used by Zalnative to train AI models.
5. Storage and retention
| Data | Where | Retention |
|---|---|---|
| OAuth refresh token and API credentials | Encrypted environment variables on our hosting provider (Railway) | Until access is revoked or the App is discontinued |
| Google Ads report data | Processed in memory to answer a request. Not written to a database | Not retained after the request completes |
| Change and security logs (action type, account ID, date/time, the change requested) | Hosting provider's application logs | Up to 90 days, then deleted |
6. Sharing
We share Google user data only:
- with the authorized user who requested it, through their AI assistant session;
- with service providers that host or operate the App (Railway for hosting, and the AI assistant provider as described in Section 4), only as needed to provide the App;
- when required by law, or to protect the rights, safety or security of users, Zalnative or others;
- as part of a merger, acquisition or sale of assets, with notice to affected users.
7. Security
All traffic to and from the App uses HTTPS (TLS). Access to the App requires a secret credential. Repeated failed login attempts are blocked automatically. Credentials are stored as encrypted environment variables and are never shown in reports. Write actions are disabled unless explicitly enabled, and each change must be confirmed by the user before it is applied.
8. Your choices and rights
- Revoke access at any time at myaccount.google.com/permissions. You can also remove Zalnative's manager access from your Google Ads account.
- Request deletion of any logs related to your account by emailing us. We respond within 30 days.
- You can ask what data we hold about you, or ask us to correct it.
9. Changes to this policy
If we change this policy, we will update the effective date above. If a change materially affects how Google user data is used, we will notify authorized users and ask for consent again where required.
10. Contact
Zalnative
Jl. Pendidikan Gang Baja No. 8, Denpasar Selatan, Bali, Indonesia
Website: zalnative.com
Email: hello@zalnative.com