Legal

Privacy Policy

Last updated: 17 June 2026

1. Who we are

Bidvern is a Google Ads audit & reporting tool operated by Shimon Haliwa, a registered sole proprietor (Osek Murshe) based in Israel. Contact: contact@bidvern.com. This policy explains what data we access through the Google Ads API, how we use it, and the choices you have.

2. Data we access (read-only)

With your explicit authorization (Google OAuth 2.0, scope adwords), we read data from the Google Ads accounts you connect: campaign, ad group, keyword, search-term and ad configuration, budgets, and performance metrics (impressions, clicks, cost, conversions, conversion value, quality score). We access this data on a read-only basis to produce an audit and reports. We do not collect data from accounts you have not connected, and we do not access unrelated Google services.

3. How we use it

We use Google Ads data solely to: (a) analyze the connected account, (b) detect wasted spend, structural issues and growth opportunities, and (c) generate reports and evidence-based recommendations. Bidvern does not modify your account automatically; any optimization would only ever be prepared for your explicit, per-action approval. We do not use your data for advertising, we do not sell it, and we do not build profiles unrelated to optimizing your own account.

4. Google Ads API & Limited Use

Our access to and use of data obtained through the Google Ads API complies with the Google Ads API Terms of Service and the Google API Services User Data Policy, including its Limited Use requirements. Google Ads data is used only to provide the features described above for the advertiser who authorized access, and is not transferred to others except as required to provide those features or by law.

5. AI processing

To generate plain-language explanations and translated reports, limited, job-specific account data (e.g. a finding's metrics and the affected campaign/keyword names) may be sent to a third-party large-language-model provider acting as our processor, solely to produce that output. Where such an option is available to us, this data is not used to train their models.

6. Storage & security

OAuth tokens are stored server-side only, never exposed to the browser and never committed to source control, and used only to call the Google Ads API on your behalf. We retain only the data needed to provide the service and apply reasonable technical measures to protect it.

7. Your choices & data deletion

You can revoke our access at any time from your Google Account permissions or your Google Ads account's access settings. You may request deletion of any data we hold about your account by emailing contact@bidvern.com; we will delete it promptly unless retention is required by law.

8. Changes

We may update this policy as the product evolves. Material changes will be reflected here with a new « last updated » date.