Privacy Policy

This policy explains how the free Strategic Advertising Audit at audit.hpanov-digital.com (the "tool") handles your data, including data received from Google APIs and Meta APIs. Last updated: 15 September 2026.

What the tool does

The tool prepares a one-time audit report of your advertising. You can connect a Google Ads account or a Meta (Facebook) ad account with read-only access. The tool never creates, edits, pauses or deletes anything in your accounts and has no access to payment methods or private messages.

Data you provide

• Company name, company ID, contact email and phone (optional).
• Your website and the competitor websites you enter.

Data we receive from Google (Google Ads API)

When you click "Connect Google", Google asks you to grant the scope https://www.googleapis.com/auth/adwords. This is the only scope Google offers for the Google Ads API; the tool uses it exclusively for read queries. We access:

• The list of Google Ads accounts you can access: customer ID, account name, currency, status and whether it is a manager account.
• For the account you choose: campaign names, status and channel type; keywords and match types; search terms; and cost, impressions, clicks, conversions and conversion value for the last 7, 14, 30 and 60 days.

Data we receive from Meta (Marketing API)

When you click "Connect Meta", Facebook asks you to grant the permission ads_read. We access:

• The list of ad accounts you can access: name, currency and status.
• For the account you choose: campaign names, status, objective and budget; and spend, impressions, reach, frequency, clicks, CPC, CTR, CPM, actions and purchase ROAS at account, campaign and ad level for the last 7, 14, 30 and 60 days.

How we use the data

Data received from Google and Meta is used only to generate the audit report that is shown to you on screen immediately after you connect. We do not use it for advertising, we do not sell it, and we do not use it to build profiles or to make decisions with legal effect.

Storage and retention

• Access tokens from Google and Meta are held in server memory only for the connection session and are never written to disk or to a database.
• Advertising account data is processed in memory to build your report and is not saved after the report is delivered.
• Data you provide in the form is stored in our lead database, hosted in the EU, for as long as needed to prepare the audit and follow up on it. We delete it within 30 days of your request.

Service providers

• Hetzner Online GmbH (Germany) — hosting of the tool and the lead database.
• Anthropic PBC — the AI model that analyses the advertising account data and writes the report text. Data is sent through the API for this purpose only.
• Apify — collects the public ads of the websites you enter from the Meta Ad Library and the Google Ads Transparency Center. No account data is sent to Apify.
• Klaviyo — sends the result and short advice by email, only if you opt in (email, company name and phone).
• Cloudflare — bot protection on the form (Turnstile).

Google API Services User Data Policy

Hpanov Digital's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Google user data is used only to provide the audit report you requested.
• It is transferred to others only as necessary to provide that report (the AI processor listed above), to comply with applicable law, or with your explicit consent.
• It is not used for serving advertisements and is not sold.
• It is not used to develop, improve or train generalized AI or machine learning models.
• No person reads it unless you give explicit consent, it is necessary for security purposes, or it is required by law.

Meta Platform Terms

Data received through Meta's APIs is processed in accordance with the Meta Platform Terms and Developer Policies and only for the purpose described above.

Revoking access

• Google: open myaccount.google.com/permissions, select Hpanov Digital and remove access.
• Meta: Facebook Settings and privacy → Settings → Business integrations → Hpanov-Digital → Remove.

Legal basis and your rights

We process your data on the basis of your explicit consent (Article 6(1)(a) GDPR). You have the right to access, rectify and erase your data, to restrict or object to processing, and to withdraw your consent at any time without affecting processing carried out before the withdrawal. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection.

To exercise a right or request deletion, email office@hpanov-digital.com with the subject "Data deletion" and state the email or website used for the audit. We delete the related data within 30 days.

Changes

We will update this page if the way the tool handles data changes. The date at the top shows the latest version.

Ecom Vision EOOD (Hpanov Digital) · Company ID BG208156804 · Back to the audit