OpenAdManager ("OpenAdManager", "we", "us", or "our") is an AI-powered ad management service at openadmanager.com. It lets you connect your Google Ads and Meta (Facebook) ad accounts, see campaign performance in one place, and create, edit, pause, and optimize campaigns with AI assistance.

OpenAdManager is operated by CloudWish LLC, 1509 Coffeen Ave Ste 1200, Sheridan, WY 82801, USA. CloudWish LLC is the data controller for the information described in this policy.

OpenAdManager is also the Google Ads connection used by Krypton (krypton.bot), another CloudWish LLC product. When you connect Google Ads from Krypton, the Google consent screen shows "OpenAdManager", and this policy, including section 3, applies to that data as well.

1. Information We Collect

Account information: When you sign in with Google or Facebook, we receive your name, email address, and profile picture. Google sign-in requests only the email and profile scopes.
Google Ads data: Only if you choose to connect Google Ads (the https://www.googleapis.com/auth/adwords scope). This includes the ad accounts you can access, and their campaigns, ad groups, ads, keywords, audiences, budgets, performance metrics (such as impressions, clicks, spend, and conversions), and lead form submissions you route to us.
Meta (Facebook) ads data: Only if you connect Facebook Ads. This includes ad accounts, campaigns, ad sets, ads, Pages, pixels, performance metrics, and leads, as authorized by you.
OAuth tokens: The access and refresh tokens Google and Meta issue so we can act on your behalf. We never see or store your Google or Facebook password.
Content you give us: Prompts, business descriptions, website URLs (and the public page content we read from them to draft ads), templates, alert rules, and support tickets.
Usage and device data: Pages and features used, activity history inside your account, browser type, and IP address, for security and to operate the service.

2. How We Use Information

To sign you in and keep your account secure
To show, create, edit, pause, and report on the ad campaigns you manage, only when you ask us to
To generate AI suggestions, ad copy, and optimizations that you request
To send the alerts and notifications you set up, and to answer support requests
To detect and prevent fraud, abuse, and security threats, and to meet legal obligations

3. Google User Data

This section describes how we handle data we receive from Google APIs, including Google Sign-In and the Google Ads API.

OpenAdManager's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we access: your name, email, and profile picture (sign-in), and, if you connect Google Ads, the account, campaign, ad, keyword, audience, budget, metric, and lead data described in section 1.
How we use it: only to provide and improve the user-facing ad management features you use: showing your accounts and performance, and making the changes you request or approve. We read or change your Google Ads data only in response to your actions or settings you configured, such as alert rules.
No AI or machine-learning training: Google user data is never used to train AI or machine-learning models, whether ours or anyone else's.
AI processing at your request: when you ask the AI assistant to analyze or build campaigns, we send the minimum relevant data to an AI model provider (such as OpenRouter or Anthropic) only to produce that response for you. It is not used to train any model.
No selling, no advertising use: we do not sell Google user data, and we do not use or transfer it for advertising, retargeting, interest-based ads, credit-worthiness, or lending decisions.
Transfers: we transfer Google user data only as needed to provide the features you use (for example to Krypton, when you connected Google Ads from Krypton, and to the infrastructure and AI providers listed in section 5), for security purposes, to comply with law, or as part of a merger or acquisition with notice to you.
Human access: no person reads your Google user data unless you give explicit permission (for example in a support request), it is needed for security purposes or to comply with law, or the data is aggregated and anonymized for internal operations.

4. Storage and Security

All traffic to and from OpenAdManager is encrypted in transit with TLS
OAuth tokens are kept only on our servers, in an access-controlled database, and are never sent to your browser
AI provider keys you add are encrypted at rest
Access to production systems is limited to authorized CloudWish LLC staff

5. Data Sharing

We do not sell your personal data. We share data only with:

Google and Meta: to read and manage your ad campaigns through their official APIs, as you authorize
AI model providers (such as OpenRouter and Anthropic): to generate the AI output you request, as described in section 3
Hosting and infrastructure providers: who run the servers that host the service
Krypton (CloudWish LLC): when you connected Google Ads from Krypton, so Krypton can show you that data
Legal requirements: when required by law, subpoena, or other legal process

6. Retention and Deletion

We keep your data only while your account is active and as needed to provide the service.
Disconnect any time: disconnecting Google Ads or Facebook Ads under Connections immediately deletes the stored access and refresh tokens for that connection. You can also revoke our access from your Google Account at myaccount.google.com/permissions.
Delete your account: email support@openadmanager.com from your account email. We delete your account and all associated data, including Google user data, within 30 days, except records we must keep by law.
Server logs and backups are overwritten on a rolling basis and are not kept longer than needed for security and recovery.

When you connect Google Ads from Krypton

Storage: Krypton stores the Google refresh token encrypted (AES-256-GCM) and keeps the short-lived access token only in server memory. It also keeps a label for the connection, who added it and when, and a hashed list of the Google Ads account IDs it reaches.
Use: data is read or changed only when you ask your Krypton bot. Results go to the AI model provider you chose for that bot (your own key or OpenRouter) only to answer you, and stay in that workspace's chat history, encrypted at rest, until you delete them.
Removal: removing the Google sign-in in Krypton under Integrations deletes its token and revokes it at Google. Closing your Krypton account revokes it and deletes the workspace data within 30 days.

7. Your Rights

Depending on where you live, you may have the right to:

Access: request a copy of the data we hold about you
Correction: request correction of inaccurate data
Deletion: request deletion of your account and associated data
Disconnect: revoke OpenAdManager's access to your Google or Facebook account at any time
Data portability: request your data in a machine-readable format

To exercise any of these rights, contact us at support@openadmanager.com.

8. Children

OpenAdManager is a business tool for people 18 and older. We do not knowingly collect data from children.

9. Changes to This Policy

We will post any changes on this page and update the date above. If a change materially affects how we use Google user data, we will ask for your consent first.

10. Contact Us

CloudWish LLC
1509 Coffeen Ave Ste 1200, Sheridan, WY 82801, USA
support@openadmanager.com

Privacy Policy