本服务（下称"本服务"）是一个通过 MCP（Model Context Protocol）协议，让使用者用自己的 AI 助手查询和 管理其自有 Google Ads 广告账户的工具。使用者通过本服务授权后，本服务方可代表该使用者调用 Google Ads API 读取或修改该使用者有权访问的广告账户数据。
经使用者明确授权后，本服务通过 Google OAuth 2.0 申请并使用下列权限：
https://www.googleapis.com/auth/adwords（Google Ads API）——用于访问该使用者有权访问的
Google Ads 账户的广告数据，包括账户信息、投放计划、广告组、广告、关键词、素材、转化设置与效果报表指标。本服务不申请、也无法访问使用者的 Gmail、Drive、通讯录、日历等其它 Google 服务数据。
除以下情形外，我们不向任何第三方披露 Google 用户数据：
令牌加密存储、按使用者隔离访问权限、全链路 HTTPS、最小权限原则（仅申请 adwords 一个权限）、
调用审计留痕、并发刷新加锁以避免令牌互相失效。
数据控制者：清峦云（Qingluan Cloud）
联系邮箱：support@qly.ltd
服务地址：https://googleads.mcp.qly.ltd/
我们可能不时更新本政策；如有重大变更，将在本页面更新"最后更新"日期。
1. What this service is. This service lets a user query and manage their own Google Ads accounts through an MCP-enabled AI assistant. After the user grants authorization, the service calls the Google Ads API on the user's behalf, strictly limited to the accounts that user can already access.
2. Google data we access. With the user's explicit consent we request the OAuth scope
https://www.googleapis.com/auth/adwords to read and modify advertising data (accounts, campaigns,
ad groups, ads, keywords, assets, conversion settings, and performance metrics). We do not request or access
Gmail, Drive, Contacts, Calendar, or any other Google service data.
3. How we use it. Solely to perform the queries and operations the user initiates, to return results to that user, and to keep the minimum audit records required for billing, troubleshooting, and security. We do not use Google user data for advertising, profiling, resale, or any machine-learning/AI model training, and we do not allow humans to read it except with the user's explicit consent, for security purposes, to comply with law, or where the data has been aggregated and anonymized.
4. What we store. OAuth refresh/access tokens (encrypted with AES-256-GCM), authorized Google Ads customer IDs with basic account metadata (name, currency, time zone), and call logs (tool name, argument summary, result status, latency). We never see or store the user's Google account password.
5. Retention and deletion. Tokens are kept while the authorization is active and deleted within 30 days after revocation. Call logs are retained for 180 days. Users may revoke access at any time at myaccount.google.com/permissions or by contacting us.
6. Google API Services User Data Policy — Limited Use disclosure.
Our use and transfer to any other app of information received from Google APIs will adhere to the
Google API Services User Data Policy,
including the Limited Use requirements.
7. Contact. Data controller: Qingluan Cloud — support@qly.ltd — Service URL: https://googleads.mcp.qly.ltd/
8. Compliance. This service complies with the Google APIs Terms of Service and the Google API Services User Data Policy (including the Limited Use requirements). It is used solely to help a user query and manage the Google Ads accounts that user is authorized to access, and does not use Google APIs to create or distribute AI-generated Non-Consensual Intimate Imagery (AI NCII) or for any other purpose prohibited by the Google APIs Terms of Service.