Privacy Policy

Last updated: October 28, 2026  |  Application: Q Keyword Tool

This Privacy Policy explains how the Q Keyword Tool ("the Application", "we", "us") collects, uses, and safeguards information when you use the Application. The Application is a private, in-house tool used by its developer to manage their own Google Ads accounts. It is not a public service.

1. Data Controller

The developer of the Application is the data controller. Contact: fabrianehutchinson@gmail.com.

2. Information We Collect

We collect only the minimum information required to operate the Application:

• Google account identity: When you sign in via Google OAuth 2.0, we receive your Google account's email address and display name. We do not collect or store your Google account password.
• OAuth credentials: An OAuth access token and a refresh token are issued by Google. The refresh token is stored privately on the developer's own infrastructure and is used solely to authenticate Google Ads API requests on your behalf.
• Keyword seeds: The seed keywords or URLs you enter into the Application are sent to the Google Ads API to generate keyword ideas.
• Google Ads API data: The Application receives keyword ideas, average monthly search volumes, competition levels, and top-of-page bid ranges returned by the Google Ads API. This data is processed in-memory for display and is not written to any public or shared storage.

3. How We Collect Information

Information is collected through:

• Google OAuth 2.0 authorization, using the minimum scopes necessary (Google Ads API access).
• Direct input you provide (seed keywords / URLs).
• Responses from the Google Ads API resulting from your queries.

4. Purpose of Collection

All collected information is used exclusively to:

• Authenticate and authorize Google Ads API requests for the account owner;
• Retrieve and display keyword research metrics for the account owner's own advertising decisions;
• Operate and maintain the Application.

We do not use the data for advertising, resale, profiling, or any purpose other than the above.

5. Legal Basis

We process personal data on the basis of your consent (granted through the OAuth consent screen) and our legitimate interest in operating the Application for the account owner's own account management.

6. Data Sharing and Disclosure

We do not sell, rent, or share any personal data with third parties. The only external party that receives data is Google LLC, solely as the provider of the Google Ads API, acting as a data processor under your Google account agreement. We may disclose data only where required by law.

7. Data Retention

• OAuth refresh tokens are retained only as long as the Application is in use and are deleted upon revocation of access in your Google account.
• Keyword seeds and API responses are processed transiently and are not persistently stored.

8. Data Security

Refresh tokens and configuration are stored on private infrastructure with access restricted to the developer. Communications with Google occur over encrypted (HTTPS/TLS) channels. We apply reasonable administrative and technical safeguards appropriate to the scope of data handled.

9. Your Rights

Depending on your jurisdiction, you have the right to access, rectify, or delete your personal data, and to withdraw consent. You may revoke the Application's access at any time via your Google Account → Security → Third-party apps with account access. To exercise any right, contact fabrianehutchinson@gmail.com.

10. Children's Privacy

The Application is not directed to and does not knowingly collect data from children under the age of 13 (or the equivalent minimum age in your jurisdiction).

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date above.

12. Contact

For any questions about this Privacy Policy, contact: fabrianehutchinson@gmail.com.