Privacy Policy
How we protect and handle your data at 365SoftLabs
Last Updated: December 2023 | Effective Date: December 2023
Table of Contents
- 1. Introduction & Overview
- 2. Information We Collect
- 3. How We Use Your Information
- 4. Data Protection & Security
- 5. Google Ads API Integration
- 6. Data Sharing & Third Parties
- 7. Cookies & Tracking Technologies
- 8. Your Rights & Choices
- 9. Data Retention Policy
- 10. Children’s Privacy
- 11. International Data Transfers
- 12. Changes to This Policy
- 13. Contact Information
1. Introduction & Overview
At 365SoftLabs, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Google Ads Optimizer software (“the Service”).
This policy applies to information we collect when you:
- Visit our website at 365softlabs.com
- Use our Google Ads Optimizer software
- Register for an account with us
- Contact us for support or inquiries
- Subscribe to our newsletters or marketing materials
By using our Service, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Service.
2. Information We Collect
2.1 Information You Provide to Us
We collect information you provide directly to us, including:
- Account Information: Name, email address, company name, and contact details when you create an account
- Payment Information: Billing address and payment details (processed securely through our payment processor)
- Communication Data: Messages, support requests, and feedback you send to us
- Google Account Information: When you connect your Google Ads account, we receive your Google account email and profile picture (with your permission)
2.2 Information Collected Automatically
When you use our Service, we automatically collect:
- Usage Data: How you interact with our software, features used, and time spent
- Technical Data: IP address, browser type, device information, and operating system
- Google Ads Data: Campaign performance data, ad metrics, and optimization insights (via secure Google Ads API)
- Cookies and Tracking Data: Information collected through cookies and similar technologies
2.3 Google Ads API Data Collection
When you authorize our Service to access your Google Ads account, we collect:
- Campaign performance metrics (clicks, impressions, conversions, costs)
- Ad group and keyword performance data
- Budget and bidding information
- Account structure and settings
Important: We never collect sensitive personal data such as race, religion, political opinions, health information, or sexual orientation. We only access Google Ads data necessary to provide our optimization services.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To Provide and Maintain Our Service: Deliver the Google Ads Optimizer features and functionality
- To Improve and Optimize: Enhance algorithm performance and develop new features
- To Communicate With You: Send service updates, security alerts, and support messages
- To Process Payments: Handle subscription fees and billing
- To Ensure Security: Detect and prevent fraud, abuse, and security incidents
- To Comply With Legal Obligations: Meet regulatory requirements and respond to legal requests
- For Analytics: Understand how users interact with our Service to improve user experience
- For Marketing: With your consent, send promotional materials about our services
We process your data based on the following legal grounds:
- Performance of Contract: To provide the services you requested
- Legitimate Interests: To improve our services and ensure security
- Consent: For marketing communications and specific data processing
- Legal Obligation: When required by law
4. Data Protection & Security
We implement comprehensive security measures to protect your data:
- Encryption: All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption
- Access Controls: Strict role-based access controls and authentication mechanisms
- Secure Infrastructure: Our services are hosted on secure cloud infrastructure with regular security updates
- Regular Audits: Security assessments and penetration testing conducted regularly
- Employee Training: All staff receive data protection and security training
- Incident Response: Established procedures for responding to data security incidents
Security Note: While we implement industry-standard security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but we continuously work to maintain the highest standards of data protection.
5. Google Ads API Integration
Our Service integrates with Google Ads API to provide optimization services. This integration is governed by:
- Google API Services User Data Policy: We comply with all Google requirements for API usage
- Limited Scope Access: We only request the minimum permissions needed to provide our services
- User Consent: We only access your Google Ads data with your explicit authorization
- Data Minimization: We only collect data necessary for optimization purposes
- Google’s Terms of Service: Our use of Google Ads API complies with Google’s terms
Your Google Data Rights: You can revoke our access to your Google Ads data at any time through your Google Account settings. Revoking access will limit our ability to provide optimization services.
6. Data Sharing & Third Parties
We do not sell, rent, or trade your personal information. We may share data in the following circumstances:
6.1 Service Providers
We engage trusted third-party providers to assist with:
- Payment Processing: Stripe, PayPal (payment information is handled directly by them)
- Hosting & Infrastructure: AWS, Google Cloud Platform
- Analytics: Google Analytics (anonymized data only)
- Communication: Email service providers for transactional emails
- Customer Support: Help desk software providers
All service providers are contractually bound to protect your data and use it only for the services they provide to us.
6.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
7. Cookies & Tracking Technologies
We use cookies and similar tracking technologies to:
- Remember your preferences and settings
- Authenticate users and maintain sessions
- Analyze service usage and performance
- Deliver relevant advertisements (with consent)
Types of Cookies We Use:
- Essential Cookies: Required for the Service to function properly
- Performance Cookies: Help us understand how users interact with our Service
- Functionality Cookies: Remember your preferences and settings
- Advertising Cookies: Used to deliver relevant ads (only with consent)
You can control cookies through your browser settings. However, disabling essential cookies may affect the functionality of our Service.
8. Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal data:
- Right to Access: Request a copy of your personal data we hold
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data (“right to be forgotten”)
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to certain types of processing
- Right to Withdraw Consent: Withdraw consent for processing based on consent
- Right to Opt-Out of Marketing: Unsubscribe from marketing communications
To exercise these rights, please contact us using the information in Section 13. We will respond to your request within 30 days.
9. Data Retention Policy
We retain your personal data only for as long as necessary:
- Account Data: Retained while your account is active and for 3 years after deactivation for legal compliance
- Google Ads Data: Processed data is retained for 2 years to provide historical insights
- Financial Records: Retained for 7 years for tax and accounting purposes
- Communication Data: Retained for 3 years for customer service and legal purposes
- Inactive Accounts: Data from accounts inactive for 2 years may be anonymized or deleted
We regularly review our data retention practices and delete data that is no longer needed.
10. Children’s Privacy
Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16.
If you become aware that a child has provided us with personal information without parental consent, please contact us immediately. We will take steps to remove such information and terminate the child’s account.
11. International Data Transfers
365SoftLabs is based in the United Kingdom, but we may transfer and process data in other countries where our service providers operate.
When we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by relevant authorities
- Adequacy decisions for the recipient country
- Other legally recognized transfer mechanisms
12. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements.
When we make material changes, we will:
- Post the updated policy on our website with a new “Last Updated” date
- Notify registered users via email (for significant changes)
- Provide advance notice when required by law
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
13. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
365SoftLabs Data Protection
Email: privacy@365softlabs.com
Address: 365SoftLabs Ltd, Innovation Centre, Tech Street, London, United Kingdom
Website: https://365softlabs.com/privacy
Response Time: We aim to respond to all privacy-related inquiries within 14 business days.
You also have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately.