Privacy Policy

Effective date: 10 October 2026

This policy explains how Alphacom HN ("we", "us") handles information in Alphacom Ad, our internal application used only by Alphacom HN staff to report on our own Google Ads accounts.

1. Information we access from Google

When a staff member connects a Google account that belongs to Alphacom HN, we request the following permissions:

• openid and email — the Google account's email address and a stable account identifier, used to confirm that the connected Google account is the one registered in our system;
• https://www.googleapis.com/auth/adwords (Google Ads API) — used only to read the Google Ads accounts that the connected Google account can access: account hierarchy, daily campaign performance (cost, clicks, impressions, conversions) and account information (status, currency, time zone, billing setup, account budget, user access).

We never create, modify or delete any Google Ads data, and we do not access Gmail, Drive, contacts or any other Google service through this application.

2. How we use the information

Google Ads data is used solely to display advertising spend and account status in our internal dashboard and to reconcile advertising spend with our affiliate revenue. We do not use Google user data for advertising, profiling, resale, or to train artificial intelligence or machine learning models.

3. Limited Use

Alphacom Ad's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Sharing

We do not sell, rent or share Google user data with third parties. Data is accessible only to authorised Alphacom HN staff according to their role. We disclose information only if required by law.

5. Storage and security

• Data is stored in our own database on servers we control, accessible only through authenticated, access-controlled connections.
• OAuth refresh and access tokens are encrypted at rest (AES-256-GCM) and are never shown to users or written to logs.
• Every access to sensitive information is recorded in an audit log.

6. Retention and deletion

• OAuth tokens are kept only while a Google account is connected. Disconnecting the account in the application, or removing access at myaccount.google.com/permissions, deletes or invalidates the stored tokens.
• Reporting data (spend and account information) is kept for our accounting records and can be deleted on request.

7. Your choices

You can revoke the application's access at any time at myaccount.google.com/permissions, or ask us to delete data related to your Google account by emailing us.

8. Changes

We may update this policy; the effective date above will change accordingly.

9. Contact

Alphacom HN · Hanoi, Vietnam · alphacomadmin@gmail.com