Kupilica Ads Manager Privacy Policy

Srpski sažetak: ova politika privatnosti odnosi se isključivo na interni alat Kupilica Ads Manager. Alat pristupa samo podacima naših sopstvenih Google Ads naloga, ne prikuplja podatke kupaca niti drugih Google korisnika, podatke ne prodaje i ne deli sa trećim stranama. Politika privatnosti prodavnice kupilica.com nalazi se ovde.

Last updated: 11 October 2026

1. Scope

This privacy policy applies to Kupilica Ads Manager (the "Application"), an internal software application operated by Empire Global DOO, Serbia ("we", "us"). The Application uses Google OAuth and the Google Ads API to manage the Google Ads accounts owned by Empire Global DOO. This policy explains what data the Application accesses, how it is used, stored and protected. The privacy policy of the online store kupilica.com (customer data, orders, cookies) is a separate document available at kupilica.com/policies/privacy-policy.

2. Who uses the Application

Only employees of Empire Global DOO use the Application. The Application is not available to the public and no external user can connect a Google account to it.

3. Data the Application accesses through Google APIs

With the OAuth scope https://www.googleapis.com/auth/adwords the Application accesses, for the Google Ads accounts owned by Empire Global DOO only:

  • account structure and settings: campaigns, ad groups, ads, keywords, negative keywords, budgets, bidding strategies, audiences, feeds and assets;
  • aggregated performance statistics: impressions, clicks, cost, conversions, conversion value, search terms;
  • an OAuth refresh token for the single company Google account that authorized the Application.

The Application does not access Gmail, Google Drive, Contacts, Calendar or any other Google service, and it does not access the Google account or data of any other person.

4. How the data is used

The data is used exclusively to create, monitor and optimize our own advertising campaigns in Google Ads (reporting, budget and bid management, keyword and negative keyword management, feed updates). It is not used for advertising to third parties, profiling of individuals, or any purpose unrelated to managing our own Google Ads accounts.

5. Storage and security

  • The OAuth refresh token is stored in a local configuration file on company computers with encrypted disks. It is never committed to source control or published.
  • Reports generated from Google Ads data are stored locally on company computers and are accessible only to our staff.
  • Data is transmitted only between the Application and Google's APIs over encrypted (HTTPS/TLS) connections.

6. Sharing of data

We do not sell, rent or share data obtained through Google APIs with any third party. The only recipient of data is Google itself, when the Application sends campaign changes or report requests to the Google Ads API. We may disclose data if required by law.

7. Retention and deletion

Google Ads data is retained only as long as needed for managing our advertising. The OAuth token can be revoked at any time from the company Google account at myaccount.google.com/permissions, after which the Application loses all access. Locally stored reports are deleted when no longer needed, and on request.

8. Google API Services User Data Policy

Kupilica Ads Manager's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

9. Changes to this policy

If we change this policy we will publish the new version on this page and update the "Last updated" date.

10. Contact

Empire Global DOO, Serbia. E-mail: info@kupilica.com. Phone: 062/966-41-79.