Data & Privacy
Privacy Policy
Last updated: July 2026
OrbiAds is an automation tool for Google Ad Manager. This policy explains what data we collect — and more importantly, what we never collect.
Your GAM data — minimal retention
OrbiAds does not copy the content of your Google Ad Manager network into a permanent archive. Data created through OrbiAds (campaign specs, creatives, operations log) is automatically deleted after 30 days at most, by an expiry policy executed by Google Firestore.
- ✓ Advertisers, orders and line items already in GAM: never copied
- ✓ Inventory and targeting: 24-hour technical cache, switchable off in one click from your settings
- ✓ Programmatic data and audiences: never stored
Your GAM data passes through our servers only to execute the requested command. Campaign specs created via OrbiAds are retained for 30 days at most to enable rollback and operation traceability, then automatically deleted. Job results expire within 7 days, report history within 90 days. On request, we can shorten these windows for your account.
GAM OAuth Tokens
To act in GAM on your behalf, OrbiAds stores a Google OAuth token. This token is:
- — Encrypted via Google Cloud KMS before any storage in Firestore
- — Never accessible in plain text by our team or application code
- — Used exclusively to execute your operations
- — Deleted when you disconnect your GAM account
What we collect
- — Your Google email address (Firebase Authentication) — to identify you
- — Operation logs: action type, timestamp, credits consumed — for billing
- — Your account preferences and OrbiAds settings
Product usage data and support
OrbiAds analyses product usage by its clients — GAM connection dates, operation volumes, technical error codes — in order to adapt its support and communication. These data never concern the content of your GAM network (advertisers, campaigns, inventory, revenues).
In the event of a technical error, OrbiAds may proactively reach out to offer assistance. The legal basis for this processing is legitimate interest (Art. 6(1)(f) GDPR): improving support for its own professional clients (B2B).
You have the right to object at any time: each support email contains an unsubscribe link, or contact us at contact@orbiads.com.
Stripe Payments
Payment information (card, IBAN) is managed exclusively by Stripe. OrbiAds never accesses banking data.
Data retention
Your account data (email, encrypted GAM token, settings) is retained while your account is active. Operational data expires automatically before that: 30 days for campaigns, jobs and audit logs, 7 days for job results, 90 days for report history, 24 hours for the inventory cache. Account deletion is available directly in the interface (Settings → Account → Profile) and executes immediately, not within 30 days. Only usage records are retained, anonymised, to satisfy our accounting obligations.
Your rights (GDPR)
You have the right to access, rectify, delete and port your data. To exercise these rights, contact us via the contact form.
Contact us →Hosting
All data is hosted in the European Union — Google Cloud, region europe-west1 (Belgium).
Cookie preferences
You can change or reset your cookie preferences at any time. The consent banner will reappear on the next page load.
