Privacy Policy
Last updated: 27 May 2026
1. Introduction
Addy ("we", "our", "us"), operated by Concept by Hannah Ltd (UK Company Number 15280150), registered with the Information Commissioner's Office (ICO registration reference: ZB832621), operates the website www.addy0.com and provides keyword intelligence services for Google Ads management. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and Google's API Services User Data Policy.
2. Information We Collect
2.1 Account Information
- Name and email address (via Google OAuth or email signup)
- Payment information (processed securely by Stripe)
- Company/brand profile information you provide
2.2 Google Ads Data
When you connect your Google Ads account via OAuth, we request the Google Ads API scope (https://www.googleapis.com/auth/adwords) which allows us to:
Read access:
- Campaign, ad group, and keyword performance data
- Search term reports and keyword metrics
- Account structure, settings, and hierarchy
- Ad copy and creative content
Write access (with your explicit approval):
- Create, update, or pause campaigns and ad groups
- Add or modify keywords and negative keywords
- Update ad copy and bidding settings
All write operations require your explicit approval through our human-in-the-loop interface before any changes are made to your Google Ads account. We access this data solely to provide our keyword intelligence and campaign management service. We do not sell, share, or use your Google Ads data for any purpose other than delivering our service to you.
2.3 AI Processing and Chat Data
Our service uses AI (powered by Anthropic's Claude) to analyse your Google Ads data and provide recommendations. When you interact with our AI assistant:
- Chat conversations are encrypted at rest using AES-256 encryption
- Your Google Ads data is processed to generate insights and recommendations
- AI responses are generated in real-time and not stored by Anthropic for training
- Chat history is retained to provide context for future conversations
2.3A Free Tools
Some Addy tools (such as the Markdown to PDF Converter) are available without an account. When you use these tools:
- Document conversion runs entirely in your browser. Your content is not sent to our servers or any third party for this processing
- Optional AI features (such as executive summary generation) send the content you provide to Anthropic for processing. This data is processed transiently and is not stored by Anthropic or used for model training
- We do not require or collect personal data to use free tools. Standard usage data (Section 2.4) may still apply
2.4 Usage Data
- Log data (IP address, browser type, pages visited)
- Device information
- Analytics data (via cookies, with your consent)
2.5 Prospect and Marketing Contact Data
When you receive a cold outreach email from us, we have sourced your contact details from publicly available sources such as business directories, Companies House, professional profiles, or company websites where business contact information is publicly listed.
We process this data on the lawful basis of legitimate interests under UK GDPR Article 6(1)(f), specifically to introduce Addy's services to UK businesses in roles and verticals where the service may be relevant.
We collect publicly available business contact information, including name, business email address, role, firm name, and location, as typically found on company websites and professional profiles.
Retention: Prospect data is retained for a maximum of 24 months from the last meaningful interaction (sent email, recipient reply, link click). If you unsubscribe, or if you do not respond after the outreach sequence completes, your email address is moved to a suppression list (email address only, retained to ensure we do not contact you again) for the remainder of that period and then permanently deleted.
Your rights:You may object to this processing at any time. Replying "unsubscribe" or "stop" to any of our emails removes you from active sending within 24 hours. You may also use our Privacy & Data Request form to request access, correction, or erasure of any personal data we hold about you.
3. How We Use Your Information
We use your information to:
- Provide and maintain our keyword intelligence service
- Process your subscription payments
- Analyse your Google Ads data to generate insights and recommendations
- Send service-related communications
- Improve our service and develop new features
- Comply with legal obligations
4. Data Security
We implement enterprise-grade security measures to protect your data:
- All data transmitted via 256-bit TLS/SSL encryption
- Google Ads API credentials encrypted at rest using AES-256
- Database hosted on secure, SOC 2 compliant infrastructure (Neon)
- OAuth tokens stored securely and never exposed to client-side code
- Regular security audits and monitoring
5. Data Sharing
We do not sell your personal data or Google Ads data. We may share data with:
- Service providers: Stripe (payments), Neon (database), Vercel (hosting), Anthropic (AI processing)
- AI processing:Your queries and relevant Google Ads data are processed by Anthropic's Claude AI to generate recommendations. Anthropic does not use your data for model training.
- Legal requirements: When required by law or to protect our rights
We will obtain your explicit written consent before sharing your Google Ads data with any third party for purposes beyond service delivery, as required by Google's API Terms of Service.
6. Data Retention
We retain your data for as long as your account is active. Upon account deletion or disconnection:
- Google Ads data is deleted within 30 days
- Account information retained for 7 years for legal/tax purposes
- Anonymised analytics may be retained indefinitely
- Prospect data: retained for up to 24 months from last interaction, then deleted. See Section 2.5 for the prospect-data lifecycle.
7. Your Rights (UK GDPR)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Portability: Receive your data in a structured format
- Object: Object to processing for marketing purposes
- Withdraw consent: Withdraw consent at any time
- Lodge a complaint:You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have processed your data unlawfully.
To exercise these rights, contact us via our Privacy & Data Request form.
8. Google Ads Account Disconnection
You may disconnect your Google Ads account at any time via Settings → Ad Accounts. Upon disconnection:
- OAuth access tokens are immediately revoked
- Disconnection is processed within 3 business days
- All Google Ads data is deleted within 30 days
- You will receive email confirmation
9. Cookies
We use cookies for essential functionality and, with your consent, for analytics and marketing. You can manage your cookie preferences via our cookie banner. See our cookie categories:
- Essential: Required for the service to function
- Analytics: Help us understand how you use our service
- Marketing: Used for relevant advertising
10. Third-Party Disclaimer
Addy is an independent company and is not affiliated with, endorsed by, or sponsored by Google LLC. Google Ads is a trademark of Google LLC.
11. Contact Us
For privacy-related enquiries, please contact us and select "Privacy & Data Request" as the category.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice on our website. Your continued use of the service after changes constitutes acceptance of the updated policy.