Privacy Policy
Who we are
Orchadstrate is a budget pacing tool for Google Ads. This policy explains what
we collect, why, and what we do not do with it.
Contact: carlo@thethirdway.com.au
What we collect
Your account details. Your name, email address, and the organisation you
say you belong to. We use these to sign you in and to contact you about the
service.
Google Ads data, when you connect an account. With your authorisation we
read, from the Google Ads accounts you choose to connect:
- campaigns, their names and status
- campaign budgets and their amounts
- performance metrics: cost, clicks, impressions, conversions, conversion value
- the account's time zone and currency
We read this so we can learn how each campaign spends through the day and pace
its budget. We do not read your ads, your keywords, your audiences, your
billing information, or anything about the people who see your ads.
What we write back. The only change we ever make to a Google Ads account is
adjusting a campaign's daily budget amount, within limits you set. Every change
is logged and visible to you.
Payment details. Handled entirely by Stripe. We never see or store your card
number.
Ordinary technical logs. IP address, browser, and pages viewed, kept for
security and to diagnose faults.
What we do NOT do
- We do not sell your data, and we never will.
- We do not share it with advertisers, data brokers, or anyone else for their
own purposes.
- We do not use your Google Ads data to train machine learning models that serve
any customer but you. What we learn about your campaigns stays yours.
- We do not use Google user data for advertising.
Limited Use disclosure
Orchadstrate's use and transfer of information received from Google APIs adheres
to the Google API Services User Data Policy,
including the Limited Use requirements.
Specifically: we use Google Ads data only to provide and improve the budget
pacing features you signed up for; we do not transfer it to others except as
necessary to provide the service, to comply with the law, or as part of a merger
or acquisition; we do not use it for advertising; and we do not allow humans to
read it except with your explicit permission, for security purposes, to comply
with the law, or where the data has been aggregated and anonymised.
Where your data lives and how it is protected
Data is stored in Google Cloud in Australia (australia-southeast1).
Google Ads refresh tokens are held in Google Secret Manager, never in our
application database and never written to logs. Access is restricted to the
services that need it.
How long we keep it
- While you are a customer: for as long as your account is open.
- When you disconnect a Google Ads account: the data we learned from it is
deleted.
- When you close your account: your data is deleted within 30 days, except
records we are legally required to retain, such as invoices.
Your rights
You can ask us to show you the data we hold about you, correct it, delete it, or
export it. Email carlo@thethirdway.com.au and we will respond within 30 days.
You can disconnect a Google Ads account at any time from within the product, and
you can revoke our access directly at
myaccount.google.com/permissions.
If you are in the EU or UK you have rights under GDPR, including the right to
complain to your local supervisory authority. If you are in Australia, the
Privacy Act 1988 applies.
Changes
If we change this policy materially we will email you before it takes effect.
Last updated 2 September 2026. Questions: carlo@thethirdway.com.au