bx_ad

Privacy Policy

Effective date: October 27, 2026

1. Who we are

bx_ad is operated by Hunan Xintui Technology Co., Ltd. (湖南新推科技有限公司), located in Hunan Province, China ("we", "us"). bx_ad is used by our advertising team and by the advertisers and agencies we invite ("users"). This policy explains what information bx_ad accesses, including data received from Google APIs, and how we use, store, share and delete it.

2. Information we access

User account information. For each user, we keep the name, email address, login account, role and activity logs inside bx_ad for security and auditing.

Google account authorization. When a user clicks "Connect Google Ads" and signs in with Google, bx_ad asks for these permissions:

  • the Google Ads API permission (https://www.googleapis.com/auth/adwords), to view and manage the Google Ads accounts that the Google account can access;
  • the email address of the Google account (openid and email), to show the user which Google account is connected.

Google then gives bx_ad OAuth access and refresh tokens for that connection.

Google Ads data. For the accounts that a user imports, bx_ad uses the Google Ads API to access:

  • account information: customer ID, account name, status, currency, time zone and manager account links;
  • campaign settings: campaigns, ad groups, ads and their assets, budgets, bidding, location and language targeting, and conversion actions;
  • performance data: impressions, clicks, cost, conversions and related metrics;
  • ad review results: policy status and disapproval reasons;
  • account budget information, where it is available.

bx_ad does not access Gmail, Google Drive, contacts or any other Google data beyond what is listed above.

3. How we use information

  • to show accounts, campaigns and reports to the user who connected them or to whom they were assigned;
  • to create, edit, pause, enable or remove campaigns, ad groups, ads, assets and conversion actions when a user requests it in bx_ad;
  • to monitor account status and ad review results and alert the responsible user;
  • for the accounts our company operates, to reconcile advertising spend with our billing and accounting records;
  • to secure the service, troubleshoot problems and keep audit logs.

Data from one user's Google Ads accounts is never shown to other advertisers or used for their campaigns. We do not use Google user data to serve ads, to build advertising or user profiles, to make credit or lending decisions, or to train generalized artificial intelligence or machine learning models. We do not use it for any purpose unrelated to the features above.

Our staff do not read Google user data unless the user has asked us for help with a specific issue, it is needed for security purposes such as investigating abuse, it is required by law, or the data has been aggregated and anonymized for internal operations.

4. Google API Services User Data Policy

bx_ad's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. How we share information

We do not sell information. We share it only in these cases:

  • with service providers that host or maintain our infrastructure, under confidentiality obligations and only as needed to run bx_ad;
  • for Google Ads accounts provided to our company by an authorized Google Ads reseller or agency, with that reseller or agency, limited to the account's spend and billing figures needed for reconciliation. Data from accounts connected by invited advertisers is not shared in this way;
  • when required by law, regulation or a valid legal process;
  • as part of a merger, acquisition or similar transaction, in which case this policy continues to apply to the transferred information.

6. Storage and security

  • Information is stored on servers operated by us or by our hosting providers, in the regions where those servers are located.
  • Access is limited to authorized personnel according to their role.
  • Data is transmitted over encrypted HTTPS/TLS connections.
  • OAuth refresh tokens are encrypted before they are stored. Tokens are kept on the server side only; they are not sent to browsers and are not written to logs.

7. Retention and deletion

A user can disconnect a Google account at any time:

  • in bx_ad, on the Connections page, by clicking "Disconnect". bx_ad revokes the authorization with Google, deletes the stored tokens immediately and stops retrieving data for that connection;
  • on the Google Account permissions page. bx_ad detects the revoked authorization the next time it tries to use it, then deletes the stored tokens and stops retrieving data.
  • For accounts connected by invited advertisers, the Google Ads data that bx_ad has stored for the connection is deleted within 30 days after the connection is removed or the user's bx_ad account is closed. Activity logs that record who made which change are kept for security and auditing.
  • For the accounts our company operates, spend and billing records are kept for as long as our accounting obligations require, and are then deleted or anonymized.
  • You can ask us to delete data related to you or your account by emailing caizi3574@gmail.com. We will confirm the request and complete it within 30 days, except for records we are required by law to keep.

8. Children

bx_ad is a business tool and is not directed to children. We do not knowingly collect information from children.

9. Changes to this policy

We may update this policy. The updated version will be posted on this page with a new effective date, and we will inform the users of bx_ad of significant changes.

10. Contact

Hunan Xintui Technology Co., Ltd.
Email: caizi3574@gmail.com