易好用内部应用隐私权政策Privacy Policy for Yihaoyong Internal App

Complete English policy

Privacy Policy for Yihaoyong Internal App

1. Scope and operator

Yihaoyong Internal App is operated by Yihaoyong for pre-authorized administrators to manage Google Ads accounts, text-search campaigns and promotional tracking links they are permitted to access. There is no public registration. The app is not affiliated with Google.

2. Google user data we access

After authorization of https://www.googleapis.com/auth/adwords, the app accesses MCC and customer identifiers, names, manager relationships, status, currency and time zone; campaigns, ad groups, text ads, keywords, budgets, bids, locations, languages, status, landing pages and tracking settings; Google-reported impressions, clicks, costs, average CPC, CTR, ad strength, policy status and served text combinations; and OAuth access tokens, refresh tokens, expiry and temporary state. It does not request a Google password, Gmail, Drive, Contacts or Google Workspace document access.

3. How we use Google user data

Google user data is used only to discover and verify authorized accounts; display settings, performance and policy information; perform administrator-confirmed Google Ads operations; rotate promotional parameters under configured rules; pause or resume managed campaigns; refresh authorization; reconcile uncertain operations; and recover interrupted tasks. It is not used for unrelated profiling, personalized or retargeted advertisements or audiences, credit or lending decisions, sale or resale, commercial datasets, or generalized AI/ML model development or training.

4. How we share Google user data

Necessary processing involves Google for OAuth and Google Ads API operations, Tencent Cloud infrastructure used for hosting, and limited administrator-approved maintenance, security or legally required processing. Google user data is not sent to Semrush or affiliate networks, sold, or provided to data brokers, information resellers or third-party marketers.

5. How we protect Google user data

HTTPS protects communications. OAuth client secrets and tokens are encrypted at rest with a key managed separately from the data files. Business APIs require an administrator session. Backups are encrypted. Ordinary logs exclude OAuth secrets, tokens and complete promotional links. Business records are held in an access-controlled database; we do not claim every business-data field is individually encrypted.

6. Retention

• OAuth state: 10 minutes.
• Administrator session: up to 12 hours.
• Access token: normally about one hour and replaced when refreshed.
• Refresh token: until authorization is disconnected, the identity is deleted, or Google revokes it.
• Google Ads account, configuration and report records: until the related identity is deleted.
• Operation logs: 90 days.
• Upload previews: 24 hours.
• Encrypted backups: rolling seven days.

7. Revocation and deletion

The administrator can use “Disconnect authorization and delete local data” in Account Management. The app shows affected records, requires typed confirmation, attempts to pause managed remote campaigns and read back their status, revokes OAuth authorization, and deletes the identity's local credentials and related records. Access can also be revoked at Google Account third-party connections, or deletion can be requested at heanrry@gmail.com. Revocation alone does not pause Google Ads campaigns or delete local records.

8. Limited Use and prohibited uses

Yihaoyong Internal App's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The app has no image, video or generative-AI functionality and does not use Google APIs to create, process, promote or distribute AI-generated Non-Consensual Intimate Imagery.