Privacy Policy

Infinite Scaling ("we", "our", "us") is a performance marketing agency specialised in Google Ads for eCommerce and Dropshipping businesses. Your privacy is important to us. This policy explains what data we collect, why we collect it, and how we protect it.

This policy applies to clients of Infinite Scaling who use our reporting dashboard at infinitescalingads.com. We do not collect data about our clients' own customers — only about the clients who contract with us directly.

1. How Our Service Works

When a client engages Infinite Scaling to manage their Google Ads campaigns, their Google Ads account is linked to our Google Ads Manager Account (MCC). This is the standard model for Google Ads agencies and is approved by Google.

Through this MCC relationship, we use the Google Ads API with our own agency-level credentials to retrieve campaign performance data. Clients do not need to share passwords or perform an OAuth flow — access is managed through the MCC link approved during onboarding.

Our dashboard presents this data to clients in a clear, controlled interface. This is particularly important because accounts managed under an MCC may have restricted visibility in the native Google Ads interface; our dashboard ensures clients have full transparency into their key metrics.

2. Data We Collect

We collect the following categories of data:

• Account data: name and email address provided during account creation on our platform.
• Google Ads performance data: campaign metrics including impressions, clicks, spend, conversions, ROAS, CPC, and breakdowns by device, age range, gender, and geography. This data is retrieved via the Google Ads API using our MCC credentials.
• Usage data: standard server logs including IP address, browser type, operating system, pages visited, and access times — used for security and performance monitoring only.
• Session cookies: essential cookies required for authentication. See the Cookies section below.

3. How We Use Your Data

We use your data exclusively to:

• Display your Google Ads campaign performance metrics in your personal dashboard.
• Provide transparency into campaigns managed by Infinite Scaling on your behalf.
• Send account-related transactional emails (account activation, password reset).
• Maintain the security and integrity of our platform.
• Comply with legal obligations.

We do not sell, rent, or share your personal data or Google Ads data with any third parties for marketing or advertising purposes.

4. Restricted Use of Google Ads Data

Data retrieved through the Google Ads API is used solely to power your reporting dashboard. We explicitly prohibit and do not engage in any of the following:

• Using Google Ads data to serve advertisements, including retargeting or personalised advertising.
• Transferring or selling Google Ads data to advertising platforms, data brokers, or resellers.
• Using Google Ads data for credit assessment, lending decisions, or any financial determination.
• Allowing human access to your Google Ads data except when you have explicitly requested support, when required for security or legal compliance, or when data is fully anonymised and aggregated for internal analysis.

These restrictions are consistent with the Google API Services User Data Policy.

5. Google Ads API Usage

Our platform uses the Google Ads API to retrieve campaign data for accounts managed under our MCC. Access is performed using Infinite Scaling's own agency credentials — no client-side OAuth authorisation is required. All data retrieved is used solely to power the client reporting dashboard and for no other purpose.

You may revoke our access to your Google Ads account at any time by removing the MCC link from within your Google Ads account settings. Upon revocation, we will no longer be able to retrieve your campaign data.

Our use of the Google Ads API is subject to the Google Ads API Terms of Service and the Google Privacy Policy.

6. Sharing with Third Parties

We use a small number of trusted service providers to operate our platform. These providers are restricted from using your data for any purpose other than the specific service they provide:

• Vercel — cloud hosting and infrastructure.
• Neon — serverless PostgreSQL database where account data (name, email, hashed password) is stored.
• Brevo (Sendinblue) — transactional email delivery (account activation, password reset).
• Google Ads API — campaign data retrieval via our MCC credentials.

We may also disclose your personal data to third parties if required by law, to enforce our Terms of Service, or in connection with a business transfer or acquisition.

7. Cookies

We use only essential session cookies required for authentication. A session cookie is placed on your device when you log in so our system knows you are authenticated. Without this cookie, the password-protected dashboard cannot function.

We do not use advertising cookies, remarketing cookies, or third-party analytics tracking cookies on the dashboard. You can disable cookies in your browser settings, but doing so will prevent you from accessing the dashboard.

8. Security

We implement industry-standard security measures including 128-bit SSL encrypted connections (HTTPS), hashed passwords, and restricted access controls. API credentials and session tokens are stored securely and never exposed in client-side code or logs. Advertiser data is maintained in a secure environment consistent with enterprise security standards. Only authorised Infinite Scaling personnel have access to production systems.

9. Data Retention

We retain your account data for as long as your account is active or as needed to provide our services. Google Ads performance data is retrieved in real time and may be cached temporarily to improve dashboard performance. Upon account deletion or service termination, all associated personal data is removed within 30 days.

10. International Data Transfers

Your data may be stored and processed in the European Union or other countries where our hosting providers operate, including the United States. By using our platform, you consent to the transfer of your data to these locations. We ensure that any such transfers are subject to appropriate safeguards in accordance with applicable data protection law.

11. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

• Access the personal data we hold about you (Subject Access Request).
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing of your data.
• Request a portable copy of your data.

To exercise any of these rights, contact us at support@infinitescalingads.com. When composing your request, please include "Privacy Request" in the subject line and the email address associated with your account.

12. Links to Other Websites

Our platform may contain links to external websites. These sites are not subject to this Privacy Policy. We recommend reviewing the privacy policy of any external site you visit.

13. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice in your dashboard. Continued use of the platform after changes constitutes acceptance of the updated policy.

14. Contact

For questions about this policy or to make a data request, contact us at: support@infinitescalingads.com