Privacy Policy for Pepperland GSC MCP

Pepperland Marketing ("Pepperland," "we," "us," or "our") operates Pepperland GSC MCP and related internal Google API reporting components (collectively, the "Tool"). This Privacy Policy explains how the Tool accesses, uses, stores, shares, and deletes information obtained through Google APIs.

The Tool is an internal business reporting and analysis service. It is not a public, self-service application. Access is limited to authorized Pepperland employees and contractors acting for Pepperland and to Google accounts or properties that have expressly authorized access.

## Information the Tool accesses

Depending on the Google services and permissions an authorized user or account owner enables, the Tool may access the following information:

- **Google authorization information:** OAuth access tokens, refresh tokens, customer or property identifiers, and related authentication metadata needed to connect to Google services.
- **Google Ads data:** accessible customer-account relationships and identifiers; campaign, ad group, ad, asset, keyword, search-term, audience, budget, bid, conversion, and performance data; and other fields specifically requested for reporting through the Google Ads API.
- **Google Search Console data:** for properties that separately grant access to Pepperland's service account, property identifiers, search-performance data, URL inspection and indexing results, and sitemap information.
- **Tool activity and derived information:** user prompts, requested report parameters, diagnostic logs, summaries, analyses, recommendations, and reports produced from authorized Google data.

The Google OAuth permissions currently used by the Tool include the Google Ads permission (`https://www.googleapis.com/auth/adwords`) and the Google Cloud Platform permission (`https://www.googleapis.com/auth/cloud-platform`). The Google Ads permission is used only to run authorized, read-only reporting queries. The Google Cloud Platform permission is used only for the Google Cloud project, authentication, and quota context needed to operate the Tool; the Tool does not use it to retrieve unrelated Google Cloud content.

The Google Ads component is read-only. It retrieves data for reporting and analysis and does not create Google Ads accounts or create, edit, pause, or delete campaigns, ads, keywords, budgets, or other Google Ads resources.

## How we use Google data

We use Google data only to provide and improve the Tool's authorized, user-facing functions, including:

- authenticating authorized connections to Google services;
- generating requested reports and performance summaries;
- analyzing campaign, keyword, search-term, conversion, budget, and account performance;
- performing diagnostics, quality checks, budget pacing, and optimization analysis;
- preparing recommendations for human review;
- maintaining the security, reliability, and integrity of the Tool; and
- complying with applicable law and enforcing our agreements.

We do not use Google user data for unrelated advertising, retargeting, personalized advertising, credit or lending decisions, surveillance, or the creation or sale of audience profiles.

## How information is processed and shared

We do not sell or rent Google user data.

We may disclose or process information only as needed for the purposes described above:

- **Within Pepperland:** Authorized Pepperland employees and contractors may access data when necessary to provide reporting, analysis, support, security, or client services. They are required to protect the information and use it only for authorized purposes.
- **Google:** Information is exchanged with Google as necessary to authenticate and use the Google Ads API, Google Search Console API, and related Google services, subject to Google's applicable terms and privacy policies.
- **OpenAI Codex:** When an authorized user asks the Tool to analyze, summarize, or report on Google data, selected data and prompts may be processed through Pepperland's configured OpenAI Codex environment to produce the requested output. OpenAI processes that information as a service provider under Pepperland's applicable account agreement and organizational settings.
- **Operational service providers:** We may use approved providers for hosting, security, authentication, logging, or information-technology support. Such providers may process information only to perform services for Pepperland and are subject to appropriate confidentiality and data-protection obligations.
- **Legal and safety disclosures:** We may disclose information when required by law or when reasonably necessary to protect users, Pepperland, Google, or others from fraud, abuse, security threats, or violations of law.
- **Business transfers:** If Pepperland is involved in a merger, acquisition, or sale of assets, Google user data will be transferred only as permitted by applicable law and Google's policies and, when required, with prior user consent.

Pepperland's use and transfer of information received from Google APIs adheres to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including its Limited Use requirements.

## Storage and retention

The Tool does not continuously synchronize Google Ads or Search Console data into a separate advertising database. It retrieves information in response to authorized requests.

- OAuth credentials are stored in access-controlled configuration locations and retained only while needed to maintain an authorized connection. When OAuth access is revoked, the Tool is disconnected, or a valid deletion request is completed, Pepperland will delete the affected OAuth credentials under its control within 30 days.
- Search Console service-account credentials may remain active for other separately authorized properties. Removing the service account from a particular Search Console property immediately prevents future access to that property; Pepperland will separately delete retained data for that property as described below.
- Google API data and derived reports may be retained in authorized Codex task history, local workspaces, client reports, or business records while needed to provide the requested service, maintain security, meet contractual obligations, or comply with law.
- Pepperland reviews retained Google API data at least annually. Data that is no longer needed for an authorized business purpose will be deleted or de-identified. Following a valid deletion request or the end of the applicable engagement, Pepperland will delete Google API data under its control within 90 days unless retention is required by law, needed to resolve a security or contractual matter, or requested by the relevant account owner.
- Residual copies may remain temporarily in provider-managed backups or security logs and will expire according to the applicable provider's ordinary retention cycle.

## Security

We use reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These measures include access controls, least-privilege permissions, encrypted network connections, protected credential storage, and restrictions on who may operate the Tool. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

## Your choices, revocation, and deletion

You may revoke the Tool's access to your Google Account at any time through [Google Account third-party connections](https://myaccount.google.com/connections). Revoking access prevents future API requests but does not automatically delete reports or records previously created from authorized data.

To request access to, correction of, or deletion of Google data under Pepperland's control, email **sales@pepperlandmarketing.com** with the subject line **Google API Privacy Request**. Please identify the Google Ads customer ID or Search Console property involved and the scope of the request. We may need to verify your identity and authority over the relevant account or property before completing the request.

Where applicable, you may also have privacy rights under local law. Pepperland will respond within the time required by applicable law.

## International processing

Pepperland and its approved service providers may process information in the United States and other locations where they operate. We use appropriate contractual and organizational safeguards where required by applicable law.

## Children

The Tool is a business service and is not directed to children under 13 or intended for use by minors. We do not knowingly use the Tool to collect Google Account data from children.

## Changes to this policy

We may update this Privacy Policy to reflect changes to the Tool, legal requirements, or our data practices. We will post the updated policy with a new effective date. If a change materially expands how Google user data is used or shared, we will provide notice and obtain consent when required before applying the new practice to that data.

## Contact us

Pepperland Marketing  
120 Elm St  
Cheshire, Connecticut, United States  
Email: **sales@pepperlandmarketing.com**  
Phone: **+1 860-362-2778**