Privacy Policy
How Avesta Agency collects, uses, stores and protects your information — including any data accessed through Google APIs.
Last updated: July 30, 2026
1. Who we are
Avesta Agency operates an online advertising management platform that lets advertisers view campaign performance, fund their advertising balance and manage campaign settings for the Google Ads accounts they own or manage. This policy applies to the platform and to every page on this domain.
2. Information we collect
2.1 Information you give us
- Account details: name, mobile number, email address and the password or one-time code used to sign in.
- Business details you enter for invoicing, such as company name and tax identifiers.
- Payment records: the amounts you pay, the method used and the receipts you upload. Card numbers are handled by the payment provider and are never stored by us.
- Anything you write in a support ticket.
2.2 Information from Google APIs
When you authorise Avesta Agency through Google's OAuth consent screen, we receive an access token for the
https://www.googleapis.com/auth/adwords scope and use it to read from and write to the Google Ads
accounts you selected:
- Read: account, campaign, ad group, ad and keyword structure; performance metrics such as impressions, clicks, cost, conversions and their daily breakdown; account currency, time zone and billing status.
- Write: only the changes you explicitly request in the interface — updating a campaign's daily budget, and pausing or resuming a campaign.
We do not read your Gmail, Drive, Contacts, Calendar or any other Google service. We request no scope beyond the one named above.
2.3 Information collected automatically
Server logs record the IP address, browser user agent, requested page and timestamp of each request, and we keep an audit log of security-relevant actions (sign-in, budget change, campaign pause, payment). These are used to operate the service, investigate abuse and meet our record-keeping obligations.
3. How we use information
- To display your advertising reports and dashboards.
- To apply the campaign changes you request.
- To process top-ups, keep your balance accurate and issue invoices.
- To notify you about low balance, stopped campaigns or unusual spend.
- To answer your support requests.
- To detect and prevent fraud and abuse, and to comply with applicable law.
4. Limited use of Google user data
Avesta Agency's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We use Google user data only to provide and improve the user-facing features described on this site.
- We do not transfer Google user data to others except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition with your consent.
- We do not use Google user data for advertising purposes.
- We do not allow humans to read Google user data unless we have your explicit consent, it is necessary for security or to comply with the law, or the data has been aggregated and anonymised.
- We do not use Google user data to develop, improve or train generalised or generative artificial intelligence or machine-learning models.
5. Sharing
We do not sell or rent your data. We share it only with:
- Google, when we call the Google Ads API on your behalf.
- Payment providers, to process the transactions you initiate.
- Our hosting provider, which stores the data on our behalf under contract.
- Authorities, where we are legally required to do so.
6. Storage, retention and security
Data is stored on servers we control, and access is limited to the members of our team who need it to operate the service. Traffic is served over HTTPS, passwords are stored only as salted hashes, and OAuth refresh tokens are kept in restricted storage and used only to call the Google Ads API on your behalf.
We keep account, transaction and invoice records for as long as your account is active and afterwards for the period required by tax and accounting law. Performance data cached from the Google Ads API is kept only as long as it is useful for reporting, and is deleted when you disconnect the account or close your account.
7. Your choices and rights
- Revoke Google access at any time from your Google Account permissions page, or by asking us to disconnect the account. Once revoked, we stop calling the API and delete the stored token.
- Request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete your account and the data associated with it, subject to records we must retain by law.
- Opt out of non-essential notifications from within the dashboard.
To exercise any of these, contact us using the details in section 10.
8. Cookies
We set a session cookie so you stay signed in, and a preference cookie that remembers your interface settings. We do not use advertising or cross-site tracking cookies on this platform.
9. Changes to this policy
If we change this policy we will update the date at the top of this page, and for material changes we will notify signed-in users inside the dashboard.
10. Contact us
- Email: admin@app.avesta-agency.com
- Phone: +98 21 6656 5000
- Address: Unit 34, No. 139, Enghelab Sq., Tehran, Iran
- Website: app.avesta-agency.com