← zahar.st

Privacy Policy

Effective date: October 3, 2026

This Privacy Policy explains how site zahar.st ("we", "us", "our") collects, uses, stores and shares information when you use the website and the zahar.st Google Ads application, an internal tool that connects to the Google Ads API on behalf of the Google Ads accounts it is authorized for (together, the "Service").

1. Google user data we access

When you authorize the Service with your Google account, it requests the following OAuth scope:

  • https://www.googleapis.com/auth/adwords — access to the Google Ads accounts you manage, through the Google Ads API.

Through this scope the Service may access:

  • the list of Google Ads customer accounts available to you;
  • account structure and settings: campaigns, ad groups, ads, keywords, budgets, bidding strategies and conversion actions;
  • performance and reporting data: impressions, clicks, cost, conversions and related metrics;
  • keyword and search term data returned by Google Ads reports.

The Service does not request access to your Gmail, Drive, Contacts or any other Google product, and it does not read your Google account password.

2. How we use Google user data

Google Ads data is used only to provide user-facing features of the Service:

  • building performance reports and analytics for the authorized Google Ads accounts;
  • reviewing campaign structure and suggesting optimizations;
  • making changes to campaigns, budgets or keywords only when the authorized user explicitly requests them.

Requests may be processed with the help of an AI assistant (Anthropic Claude) acting on the authorized user's instructions. Data passed to it is used only to answer that request and is not used to train AI or machine-learning models.

3. Storage and retention

  • OAuth refresh tokens are stored only on the operator's own infrastructure, with access restricted to the operator, and are never published or shared.
  • Google Ads data is fetched on demand and is not stored in a separate database. Reports exported at the user's request are kept only as long as the user needs them.
  • You can request deletion of any stored data at any time; it will be deleted within 30 days.

4. Sharing and disclosure

We do not sell Google user data and do not share it with third parties, except:

  • service providers needed to run the Service (hosting and the AI assistant described above), only to the extent required to provide the requested feature;
  • when required by law;
  • with your explicit consent.

Google user data is never used for advertising, ad targeting or profiling.

5. Limited Use

The use and transfer of information received from Google APIs to any other app by zahar.st will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Website data

The website itself collects only data you submit through its contact form (name, email, phone number and message) and standard server logs (IP address, browser type, pages visited, timestamps). This data is used only to respond to you and to keep the website secure.

7. Security

Data is transmitted over HTTPS, and access to tokens and data is restricted to what is necessary to operate the Service.

8. Your rights and revoking access

You may request access to, correction of, or deletion of your data. You can revoke the Service's access to your Google account at any time at myaccount.google.com/permissions; after that the Service can no longer access your Google Ads data.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information.

10. Changes

We may update this policy from time to time. The effective date at the top of this page shows when it was last revised.

11. Contact

Questions or requests regarding this policy: i@zahar.st.