Privacy Policy

This policy explains how Touch Stone Ads Technology Limited (触石互动广告（深圳）有限公司, “we”, “us”, or “our”) handles information in connection with Touch Stone AI Ads Editor, its website, and related support services.

We operate independently. Google and Google Ads are referenced only to describe compatibility; Google does not sponsor, certify, or endorse this service.

The current public build supports Google Sign-In for user authentication when configured. The separate Google Ads connector can request explicit account authorization, discover accessible accounts, and read data from the client account selected by the user. Its only current write is a user-confirmed Enabled/Paused campaign status change.

Strategy projects and campaign drafts are stored in your browser using local storage. They are not written to the Audience Guard database. When Shopify Audience Guard is enabled, its PostgreSQL database stores agency organization, membership, and client records under server-enforced tenant authorization. Website analysis can retrieve limited public pages from a URL you submit. If the optional OpenAI analysis mode is configured and you request it, extracted public website content and the related analysis input are sent to OpenAI to generate the requested result.

Depending on the feature you choose, the service may handle:

• website URLs and limited text retrieved from publicly accessible pages;
• business descriptions, target markets, budgets, keywords, and campaign drafts;
• CSV data you import for local campaign analysis;
• a consent cookie recording “essential only”, “analytics only”, or “accept all” for up to 12 months;
• Google Analytics 4 measurements such as page views, approximate device and browser information, and interaction events when you choose “analytics only” or “accept all”;
• consent-state signals, including denied states, and limited cookieless measurement pings that Google tags may send; advertising storage, consented advertising data sharing, and personalization are enabled only after a new, explicit “accept all” choice;
• if you choose Google Sign-In, your Google account identifier, verified email address, name, profile image, and an application session cookie used only for authentication;
• messages and contact details you voluntarily submit through our contact form or send to our support email; and
• if you use Shopify Audience Guard, agency organization names, membership roles, client names, and optional client website URLs;
• if you connect Google Ads, encrypted OAuth tokens, account identifiers and names, campaign summaries, user-list and audience-binding summaries, refresh history, approved status-change drafts, provider request identifiers, and audit records;
• if you purchase a plan, your account email, selected plan, order identifiers, amount, currency, payment method type, payment status, and provider transaction identifiers;
• basic security and diagnostic records produced by hosting infrastructure.
• if you choose the appeal materials workspace, your business name, website, contact email, Google account identifiers, suspension notice, explanations and corrective actions, and documents you explicitly upload, such as a business license;

We do not intentionally request payment-card data, account passwords, OAuth client secrets, developer tokens, or Google refresh tokens through ordinary page forms.

Google Sign-In requests only the standard OpenID, email, and profile information needed to authenticate you; it does not grant Google Ads access. Google Ads uses a separate OAuth authorization that requires your explicit approval and remains limited by your existing Google Ads permissions. You may connect only accounts that you own, manage, or are authorized to access.

For the connected account workflow, the service may process:

• customer account identifiers, names, status, currency, and time-zone summaries;
• campaign identifiers, names, channel types, dates, and Enabled/Paused status;
• user-list and audience-binding summaries used for requested audience diagnostics; and
• approval and audit data for user-confirmed campaign status publishing.

Google user data will be used only to provide the feature you request, maintain security, respond to support needs, and satisfy applicable legal obligations. We will not sell or rent it, use one customer’s data to benefit another customer, or disclose it for an independent advertising or profiling purpose.

We use information to operate requested workflows, validate inputs, generate customer- directed analysis, provide support, protect the service, prevent abuse, and comply with law. We do not perform hidden campaign deployments or unrelated account changes.

Infrastructure, email, security, and AI service providers may process only the data needed to perform services for us. Their access is limited by confidentiality, security, and purpose restrictions. We may also disclose information when legally required or when necessary to protect users, the public, or the service from fraud or abuse.

Antom processes Alipay and AlipayHK payments on its hosted checkout. We send only the order and buyer information needed to complete, verify, reconcile, prevent fraud, and support the transaction. Payment credentials are entered with the payment provider and are not stored by this application.

Appeal draft text is stored in our application database and attachments in private Alibaba Cloud object storage to prepare the package you request. This workspace does not send these materials to Google or an AI provider. You review the downloaded package and choose what to submit through Google's official account workflow. Upload only documents you are authorized to use, and remove unrelated personal information.

The configured Google Analytics 4 tag measures website use. Analytics storage, advertising storage, sending user data to Google for advertising measurement, and advertising personalization default to denied until an applicable saved choice is applied. Denied does not mean zero network requests: Google tags may send limited cookieless consent-state or measurement pings without granting any of these four permissions. The cookie control provides three choices:

• “Essential only” keeps all four optional permissions denied.
• “Analytics only” allows analytics storage; advertising storage, advertising user data, and advertising personalization stay denied.
• “Accept all” explicitly allows analytics and advertising storage, sending website user data to Google for advertising measurement, and advertising personalization.

An earlier “accept all” choice retains only analytics permission. We ask again for an advertising choice and never automatically upgrade that earlier consent. You can change or withdraw permission at any time through Cookie settings. This changes future consent signals; it does not itself delete information already held by Google, which is subject to Google's retention settings and privacy controls. This consent control does not add a Google Ads conversion ID or authorize access to your Google Ads account.

We do not automatically send names, email addresses, or other personally identifying information to website analytics or advertising tags. Uploaded business licenses and appeal materials, and business data accessed through the Google account connector, are not automatically used for website advertising tracking.

• Browser projects, drafts, and imported CSV-derived data remain on that device until you delete them in the product or clear the site’s browser storage.
• The consent cookie expires after 12 months unless you replace or delete it sooner.
• Appeal materials remain in your account until you remove them or complete a verified deletion request. You can delete your saved materials in the appeal materials workspace even after a plan expires or is refunded. Deletion removes active copies; protected backups follow the hosting retention process and are not instantly erased. Downloaded copies remain under your control. Contact us for assistance with deletion or backup retention questions.
• The Google Sign-In application session expires after no more than 30 days. Signing out or clearing the site's cookies ends the local session sooner.
• Contact and support records are generally retained for up to 24 months after the last interaction, unless a longer period is required for security or legal reasons.
• Audience Guard organization and client records remain until an authorized deletion request is completed, subject to backup expiry and documented legal or security holds.
• For connected Google Ads records, verified deletion requests will be completed or irreversibly anonymized in active systems within 30 days. Protected backup copies will expire within 90 days unless law, fraud prevention, or security requires a documented exception.
• Payment and order records are retained for transaction support, fraud prevention, accounting, tax, dispute, and other legal obligations. Deletion requests remain subject to records we are legally required to retain.

You can clear local projects and drafts through the product or your browser settings. You can reopen the cookie control at any time, sign out of the application, and revoke Google Sign-In access through your Google Account. You can also disconnect Google Ads in the product and revoke the applicable Google Ads permission; revocation prevents new API access using that grant.

To request access, correction, deletion, or restriction, email earn@touchstoneads.com. We may verify that you control the relevant email address or account before acting.

We use secure transport, least-privilege access, credential separation, input validation, access logging, and incident-response procedures appropriate to the service. OAuth client secrets, developer tokens, refresh tokens, and access tokens must remain server-side and must not appear in customer reports or browser storage.

The multi-customer Google Ads integration logically separates customer records and verify account ownership or authorization before access. No security measure is perfect, so please contact us promptly if you suspect unauthorized use.

Service providers may process information in countries other than your own. Where required, we use appropriate contractual or legal safeguards for those transfers.

The service is intended for businesses and authorized account managers, not children. We do not knowingly collect personal information from children through this service.

We will update this policy before materially expanding Google Ads API functions or data use. The effective date above identifies the current version. Material changes may also be presented in the product where consent or notice is required.

Questions or privacy requests: Touch Stone Ads Technology Limited, earn@touchstoneads.com.