How Scaletrics handles your data

Last updated: May 3, 2026

What we collect

When you connect your Google Ads account, Scaletrics receives an OAuth credential issued by Google. We use this credential to read your campaign structure, performance metrics, and search-term reports, and to apply changes that you have explicitly approved within the platform. We never request, receive, or store your Google account password.

How we use it

Campaign data is used solely to surface optimization opportunities to you and your assigned operator within the Scaletrics platform. Approved changes are applied to your Google Ads account on your behalf. We do not sell, rent, or share your Google Ads data with any third party.

How we store it

Refresh tokens are encrypted at rest using AES-256-GCM with keys held in our production secret store. Campaign and search-term data is stored in Supabase Postgres with row-level security policies that prevent cross-tenant access.

Your control

You can revoke Scaletrics' access to your Google Ads account at any time from your Google account settings (myaccount.google.com → Security → Third-party access). Once revoked, Scaletrics will lose the ability to read your campaigns or apply changes on the next sync attempt.

Who is responsible

The data controller for this site is Scaletrics, a company registered in the United Kingdom. You can ask us what we hold about you and why, ask for a copy, and have it corrected or erased — your rights under the UK GDPR, which we apply the same way wherever you are. If you think we have handled your data badly, tell us first so we can put it right; you can also complain to the Information Commissioner's Office at ico.org.uk. See our cookie policy for what our own page measurement records and what changes if you decline.

Contact

Questions about this policy or your data? Email system@scaletrics.com and we will answer within 30 days.