Legal
Privacy Policy
This policy explains how Hermes AI handles information when an authorized user connects a Google Ads account or uses the service.
1. Information we process
Depending on the features used and permissions granted, Hermes AI may process:
- identifier and basic Google Account information required for authorization;
- accessible Google Ads account identifiers and account structure;
- campaigns, ad groups, ads and keywords;
- budgets, campaign settings, impressions, clicks, cost and conversion statistics;
- history and results of actions performed through Hermes AI;
- OAuth access and refresh tokens where required to maintain authorized access;
- limited technical and security logs needed to operate and protect the service.
2. Why we use information
We use this information for authentication; to provide Hermes AI features; to analyze advertising performance; to prepare reports and recommendations; to perform Google Ads operations confirmed or otherwise authorized by the user; and for security and technical diagnostics. We do not access an advertising account without user authorization.
3. Sharing and AI processing
We do not sell Google user data, transfer it to data brokers, or use it for third-party advertising. Information is shared only with infrastructure and service providers necessary to operate the service. Selected Google Ads data may be processed by a third-party AI model provider only as necessary to deliver the analysis, report, recommendation or campaign-management request.
Data obtained through Google APIs is not used to train general-purpose artificial intelligence or machine learning models.
4. Google API Limited Use
5. Storage and security
Information is stored in secure infrastructure used to operate the service. We do not claim a fixed storage region. Protections include HTTPS in transit, access controls limiting data to authorized users and necessary system components, and protected storage for OAuth tokens. Google Account passwords are never requested or stored. No method is completely risk-free, so we continually limit access and data use to what is necessary.
6. Retention
OAuth tokens and integration settings are kept only while access remains needed. Cached Google Ads data, generated reports and operational or security logs are retained only as needed for the service and security, normally no longer than 90 days. Records required by law or necessary to investigate security incidents may be retained for the applicable required period.
7. Your choices and deletion
You can revoke Hermes AI access at any time in Google Account settings. You may also request deletion of OAuth tokens, integration settings, stored Google Ads data and related reports or logs. We target completion within 30 calendar days, except for records we must retain by law or for legitimate security needs. See the Data Deletion instructions.
8. Contact
Veritas Consult, Kazakhstan. Privacy and deletion questions: support@vconsult.kz.