White Light Agency Privacy Policy
Effective date: 12 November 2026
This Privacy Policy describes how the White Light Agency application (the "App"), operated by White Light Agency ("we", "us"), accesses, uses, shares, stores, protects, retains and deletes Google user data that it receives through the Google Ads API. It also covers this website, digitalsecurity004.com.
1. About the App
The App is an internal keyword research and reporting tool of White Light Agency. Its only purpose is to help our team plan and analyse search advertising campaigns in Google Ads. With the explicit permission of a Google Ads account owner, it uses the Google Ads API to retrieve:
- keyword search volume estimates, seasonality, competition and bid ranges (Google Ads keyword planning);
- keyword ideas generated from seed phrases or web pages;
- read-only performance reports of the Google Ads accounts we own or manage.
The App is used only by White Light Agency staff. It is not offered to the public and has no public sign-up. It works only with advertising data and text keywords and does not create, edit or process images, video or audio.
2. Google user data the App accesses
When a user signs in with Google and approves access on Google's consent screen, the App requests one OAuth scope: https://www.googleapis.com/auth/adwords (Google Ads API). Through it the App accesses only:
- OAuth tokens issued by Google (an access token and a refresh token) that let the App call the Google Ads API on behalf of the user who granted access;
- Google Ads account information: account IDs and names, currency, time zone, account status and manager–client links of the accounts the user can access;
- Keyword planning data: search volume estimates, monthly search trends, competition levels and bid ranges for keywords we submit;
- Advertising reports: campaign, ad group, keyword and search term statistics of the connected accounts, such as impressions, clicks, cost and conversions.
The App does not access Gmail, Google Drive, Contacts, Calendar, Photos or any other Google service, does not request the user's Google profile, email address or contacts, and does not access billing or payment details.
3. How the App uses Google user data
Google user data is used only to provide the App's features to the user who granted access: to show keyword research results and advertising reports, and to help that user plan and improve their own search campaigns. The App currently uses its access read-only and does not create, modify or delete campaigns, ads, budgets or billing settings.
We do not:
- sell Google user data;
- use or transfer it for serving ads, including retargeting, personalized or interest-based advertising;
- use it to determine creditworthiness or for lending purposes;
- use it to develop, improve or train generalized or non-personalized artificial intelligence or machine learning models;
- allow humans to read it, except our own staff working on the connected accounts with the user's consent, for security purposes (such as investigating abuse), to comply with applicable law, or when the data is aggregated and anonymized for internal operations.
4. How Google user data is shared
We do not share, transfer or disclose Google user data to third parties, except:
- Google, which provides the Google Ads API itself;
- an AI text assistant (Anthropic Claude) that our authorized staff use to run the App and to analyse keyword and report data in text form; data is passed to it only to produce the answer the user requested, and not for advertising;
- when required by applicable law, a court order or a competent authority, or to protect our rights and the security of users;
- as part of a merger, acquisition or sale of assets, with the same protections and after notice to affected users.
5. How Google user data is stored and protected
- The App has no server and no database. It runs only on our own work computer.
- The OAuth refresh token is stored on that computer in a configuration file readable only by the operating-system user who runs the App. It is never published, logged or sent anywhere except to Google's authorization servers.
- Data returned by the Google Ads API is processed in memory to answer each request and is not kept by the App after the request is completed.
- Reports that our staff decide to save are kept in our internal files with restricted access and treated as confidential.
- All communication with Google APIs is encrypted with HTTPS (TLS). Access to the computer and to the connected Google accounts is limited to authorized staff.
6. Data retention and deletion
- You can revoke the App's access at any time at myaccount.google.com/permissions. Revoking access immediately invalidates the tokens, and we then delete the stored refresh token.
- You can ask us to delete the stored token and any saved reports related to your account by writing to andre08642135790@gmail.com. We complete such requests within 30 days and confirm by email.
- Saved reports are kept only as long as needed for the analysis they were made for, and no longer than 24 months; after that they are deleted.
7. Data collected through this website
digitalsecurity004.com is an informational website. It has no login, forms or user accounts, uses no analytics and sets no cookies, and does not collect personal information from visitors. Our hosting and network provider (Cloudflare) processes technical request data such as IP addresses to deliver and protect the site, and page fonts are loaded from Google Fonts, which receives the visitor's IP address to serve them.
8. Children
The App and this website are not directed to children under 16, and we do not knowingly collect their data.
9. Changes to this policy
We may update this Privacy Policy. The current version is always published at this address with its effective date. Material changes affecting Google user data will be communicated to connected users before they take effect.
10. Contact
White Light Agency
Email: andre08642135790@gmail.com