Privacy Policy

AdLeak is a product operated by Midwest Technology Solutions LLC (“we”, “us”, “our”), 2501 Chatham Rd Suite R, Springfield, IL 62704, United States. Phone: (217) 405-5141. This policy explains what data AdLeak collects, how it is used, how it is stored, and when it is shared.

• Account and authentication data — the email address and authentication records used to sign in to AdLeak.
• Google OAuth identity — the Google account identifier and email address associated with the authorization, if you grant it.
• Google Ads account metadata — the accounts accessible to your authorization, account names and customer IDs, and the customer ID you select for a scan.
• Read-only Google Ads reporting data used by the product — search terms, campaign and ad group names, impressions, clicks, cost, conversions and conversion value for the reporting periods analyzed.
• Scan and audit results — the normalized rows, findings, categories, health score and summary produced by a scan.
• Technical and security logs — basic request, error and job-processing records used to operate and secure the service.
• Payment status and references — if you use a paid feature, we store payment status and a transaction reference. We do not store your card details.

Google Ads data and Google account information obtained through your authorization are used only to provide the AdLeak features you request: running the audit you ask for, generating your report, showing your findings, and re-running a scan when you request it. We do not use this data for any other purpose.

We do not sell Google user data. We do not use Google user data for personalized or interest-based advertising. We do not transfer Google user data to data brokers.

AdLeak’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google OAuth tokens are handled server-side only. Refresh tokens are encrypted at rest. Tokens are not written to browser localStorage and are not exposed to client-side code.

The current Google Ads integration is read-only. AdLeak does not create or modify campaigns, bids, budgets, ads or keywords in your Google Ads account.

We use a limited set of service providers to operate AdLeak — for example hosting, database, and security infrastructure, and a payment provider if you purchase a paid feature. These providers process data on our behalf and only as necessary to provide their service to us. Our payment provider receives payment-related information only; it does not receive your Google Ads reporting data.

Your Google authorization remains in place until you disconnect it, you revoke it in your Google account, or it is otherwise invalidated by Google. Disconnecting in AdLeak removes our stored authorization capability for that account, after which we can no longer read your Google Ads data.

You can delete saved scans inside the product. Some legal, accounting and security records may be retained where we are required to keep them. We do not commit to a fixed retention period beyond what is described here.

We use access controls, per-account data isolation, encrypted storage for refresh tokens, and server-side handling of credentials. No system can be guaranteed to be free of risk, and we make no claim that our systems are impenetrable.

You choose whether to connect a Google Ads account and which account to analyze. You can disconnect at any time, delete saved scans, or contact us with questions about your data. You may also use the CSV upload path instead of connecting your account.

AdLeak is intended for business users. It is not directed to children and we do not knowingly collect data from children.

We may update this policy as the product changes. When we do, we will update the effective date above. Continued use of AdLeak after an update means you accept the revised policy.

Midwest Technology Solutions LLC
2501 Chatham Rd Suite R
Springfield, IL 62704
United States
Phone: (217) 405-5141

See also our Terms of Service and Contact page.