Privacy Policy

Last updated: 5 August 2026 · Applies to https://gam.algoria.digital (Algoria Ads Manager)

1. Scope

This Privacy Policy explains how ALGORIA IKE (“Algoria”, “we”) processes personal data when you use Algoria Ads Manager at https://gam.algoria.digital (the “Service”). The Service is a Google Ads management and reporting platform used by Algoria staff and authorised client users.

2. Data we process

• Account data: name, email address, organisation name, role, password hash.
• Google Ads connection data: Google Ads customer IDs, OAuth tokens/credentials you provide to link accounts, campaign and performance metrics retrieved via the Google Ads API.
• Service content: reports, notes, optimization suggestions, audit logs of approved changes, campaign drafts.
• Technical data: IP address, browser type, timestamps, and basic server logs needed for security and troubleshooting.
• Billing data (if enabled): subscription status and Stripe customer/subscription identifiers. Payment card details are processed by Stripe, not stored on our servers.

Google Ads performance data processed through the Service is primarily business/advertising metrics. We do not intentionally collect end-consumer personal profiles from Google Ads beyond what the Google Ads API returns for authorised accounts.

3. Purposes and legal bases (GDPR)

• Provide the Service (account access, reports, optimization inbox, campaign creation) — performance of a contract / legitimate interests in operating our agency tools.
• Secure the Service (authentication, audit logs, abuse prevention) — legitimate interests / legal obligation.
• Improve AI-assisted features (ad copy and report notes via OpenAI or similar providers) — legitimate interests / steps necessary to provide requested features. Do not submit unnecessary personal data into AI prompts.
• Billing (if Stripe is used) — performance of a contract / legal obligation.
• Respond to requests — legitimate interests / legal obligation.

4. Google OAuth and Google Ads API

When you connect a Google account or Google Ads credentials, we access Google Ads data only as needed to provide the Service (reporting, diagnostics, approved optimizations, and campaign creation). Use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell Google user data. We do not use Google user data for serving ads to end users outside the Service’s advertising-account management purpose.

5. Processors / subprocessors

• Hosting / infrastructure providers operating the Service servers and database.
• Google (Google Ads API / OAuth) for advertising-account access you authorise.
• OpenAI (or equivalent AI provider), when AI features are used, to generate ad copy or report notes from the prompts/content you submit.
• Stripe, when paid subscriptions are enabled, for payment processing.

6. Retention

We retain account and Service data while your organisation uses the Service and for a reasonable period thereafter for backups, dispute resolution, and legal compliance. You may request deletion of your user account by contacting us. Google Ads API tokens can be disconnected/removed by authorised managers.

7. Security

We apply appropriate technical and organisational measures, including access controls, encrypted transport (HTTPS), hashed passwords, and audit logging of sensitive change actions. No method of transmission or storage is 100% secure.

8. Your rights

If you are in the EEA/UK/Switzerland (or otherwise entitled under applicable law), you may have rights to access, rectify, erase, restrict, object, or port your personal data, and to lodge a complaint with a supervisory authority. In Greece, the authority is the Hellenic Data Protection Authority (www.dpa.gr). Contact us at info@algoria.digital.

9. International transfers

Some processors (e.g. AI or cloud providers) may process data outside the EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or the provider’s applicable transfer mechanisms.

10. Children

The Service is not directed to children under 16 and is intended for business users.

11. Changes

We may update this Policy. The “Last updated” date will change when we do. Material changes may be communicated in the Service or by email where appropriate.

12. Contact

ALGORIA IKE · Proteos 54, Palaio Faliro 17561 · info@algoria.digital