Effective date: September 22, 2026  ·  Last updated: September 22, 2026

PopFabLab ("we", "our", or "the App"), operated at https://www.popfablab.com , is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, how it is stored, and the choices you have — in particular regarding data accessed through the Google Ads API and Google OAuth 2.0.

1. Information We Collect

We only collect the minimum information reasonably necessary to provide the App's features:

• Google account identity information — when you sign in with Google, we may receive basic profile information, such as your Google account ID and email address, solely to identify your account within the App.
• Google Ads data you explicitly authorize — through the Google Ads API, and only with your explicit OAuth consent, we may access data from Google Ads accounts that you are authorized to access, including account structure, campaigns, ad groups, ads, assets, keywords, audiences, bidding information, budgets, targeting settings, and performance metrics such as impressions, clicks, cost, conversions, and related statistics.
• Technical information — such as IP address, browser type, device type, operating system, access timestamps, and security or diagnostic logs, collected for service operation, security, troubleshooting, and abuse prevention.

We do not access Gmail, Google Drive, Google Photos, or other Google services beyond the Google permissions and scopes that you approve and that are necessary for the features you choose to use.

2. How We Use Your Data

Data accessed from your Google Ads account is used only to provide the App's core, user-facing features to you :

• Displaying your own advertising account data, campaigns, settings, and performance metrics back to you within the App;
• Enabling you to view reports and analyses of your own advertising data;
• Allowing you to review budgets, bids, targeting, ads, and other settings for Google Ads accounts that you are authorized to access;
• Applying changes to your own Google Ads account, such as adjusting bids, budgets, targeting, ad status, or other settings, only when you explicitly request or authorize those changes through the App;
• Maintaining the authorized connection to Google Ads and protecting the security and integrity of the Service.

We do not automatically modify your Google Ads account merely because it is connected. Your advertising data is visible only to you and other persons who are independently authorized to access the relevant account. Unrelated users of the App cannot see your data.

3. Google API Services — Limited Use Disclosure

PopFabLab's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements.

In particular:

• We use Google user data only to provide or improve the user-facing features described above;
• We do not transfer or disclose Google user data to third parties except as necessary to provide or improve these features, comply with applicable law, protect the Service, or as otherwise permitted by the Google API Services User Data Policy;
• We do not use Google user data for serving advertisements, including retargeting, personalized advertising, or interest-based advertising;
• We do not allow humans to read Google user data except with your affirmative consent, for security or abuse-prevention purposes, to comply with applicable law, or where the data has been aggregated and anonymized for internal operations consistent with applicable Google policies.

4. Data Sharing

We do not sell, rent, trade, or provide your Google Ads data to independent third parties for their own purposes. Your advertising data is not made available to advertisers, data brokers, unrelated analytics providers, or other external parties for their own marketing or commercial use.

We may disclose or permit processing of information only in limited circumstances:

• Service operation — infrastructure, hosting, security, or other service providers that process data on our behalf under confidentiality and data-protection obligations, and not for their own independent purposes;
• Legal requirements — where required by applicable law, regulation, legal process, or valid governmental request;
• Security and protection — where reasonably necessary to investigate fraud, abuse, or security incidents or to protect users, the Service, or legal rights.

5. Data Storage and Security

• Communication between the App and Google APIs is protected using HTTPS/TLS;
• OAuth access and refresh tokens are treated as confidential credentials and are stored using reasonable security controls;
• Access to stored data is restricted to authorized personnel on a need-to-know basis;
• We retain Google Ads data only for as long as reasonably necessary to provide the features you use, maintain security, comply with legal obligations, or resolve disputes;
• When Google Ads data is no longer required, we delete or anonymize it within a reasonable period, except where retention is required by law or necessary for security logs or backups.

6. Your Choices and Data Deletion

You remain in control of your Google data:

• Revoke access at any time — you can review or remove the App's access to your Google account at https://myaccount.google.com/permissions . Once access is revoked, we can no longer use the revoked authorization to access your Google Ads data.
• Delete your data — you may request deletion of your account and associated stored data, including cached Google Ads data, using the contact method listed below. Unless a longer period is required by law or reasonably necessary for security or backup processes, we aim to complete eligible deletion requests within 30 days.
• Changes to your ads — any modification to your Google Ads account made through the App is performed only at your explicit request or authorization and is submitted directly to Google Ads through the Google Ads API.

8. Cookies

We may use cookies and similar technologies that are necessary for the website and App to function, including session, authentication, security, and preference cookies. We may also use limited analytics necessary to understand and improve service operation. Google Ads API data is not used for cross-site behavioral advertising.

9. Children's Privacy

The App is intended for adult or business users and is not directed to children under 13. We do not knowingly collect personally identifiable information from children under 13. If you believe a child has provided us data in violation of applicable law, please contact us and we will take appropriate steps to delete it.

10. Third-Party Links

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices or content of those third parties, and we encourage you to review their privacy policies before providing information to them.

11. Changes to This Policy

If we make material changes to this Privacy Policy, we will update the "Last updated" date above and, where appropriate, provide additional notice through the Service or other reasonable means before the changes take effect.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, or wish to exercise your rights (access, correction, or deletion), please contact us:

• Email: partnership@popfablab.com
• Website: https://www.popfablab.com