Privacy Policy

Last updated: June 24, 2026

1. Introduction

PPC Sherpa ("we," "us," "our") operates ppcsherpa.com and the PPC Sherpa service. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.

PPC Sherpa is an AI-powered Google Ads management tool. It connects to your Google Ads account via OAuth, analyzes your account data to identify optimization opportunities, quantifies the dollar impact of each issue, and applies changes that you explicitly approve. This Privacy Policy applies to all users of the PPC Sherpa website and service, including users on the waitlist prior to launch.

By using PPC Sherpa or registering for our waitlist, you agree to the collection and use of information as described in this policy. If you do not agree with this policy, do not use our service.

2. Information We Collect

Account Information

When you sign up for PPC Sherpa or join our waitlist, we collect personal information you provide directly, including:

  • Your name
  • Your email address
  • Your phone number, if provided
  • Your company or business name, if provided
  • Billing information processed through our payment provider (Stripe) when you subscribe to a paid plan

Google Ads Account Data

When you connect your Google Ads account to PPC Sherpa, we access and analyze the following data through the Google Ads API:

  • Campaign structure, settings, and configuration
  • Ad groups, keywords, and match types
  • Search term reports and query data
  • Ad copy, including headlines, descriptions, and responsive search ad assets
  • Bid strategies and bid settings
  • Quality Score data, including expected CTR, ad relevance, and landing page experience components
  • Performance metrics including impressions, clicks, conversions, conversion value, cost, CPC, CPA, and ROAS
  • Ad assets, including sitelinks, callouts, structured snippets, call extensions, and image assets
  • Budget settings and pacing data
  • Conversion tracking configuration and conversion action settings
  • Account-level and campaign-level settings

We access only the data necessary to provide the analysis, optimization, and reporting features described in this policy. We do not access data outside your Google Ads account or use your ad account data for any purpose other than providing the PPC Sherpa service to you.

Usage Data

We collect information about how you interact with PPC Sherpa, including:

  • Pages visited and features used within the service
  • Actions taken, such as approving or skipping recommended fixes
  • Time and duration of your sessions
  • Audit reports generated and fixes applied

Device and Browser Information

We automatically collect certain technical information when you visit our website or use our service, including:

  • IP address
  • Browser type and version
  • Operating system
  • Referring URLs
  • Date and time of requests

This information is collected through server logs and is used for security monitoring, troubleshooting, and service improvement. It is not used to build individual advertising profiles or sold to third parties.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To analyze your Google Ads accounts and identify optimization opportunities, including wasted spend, bid strategy mismatches, quality score issues, missing ad assets, and other issues described in our audit checks
  • To generate audit reports with quantified dollar impact estimates for each issue identified
  • To recommend specific fixes for identified issues and present them to you for review
  • To apply changes to your Google Ads account that you have explicitly approved through the PPC Sherpa interface
  • To generate weekly performance summaries and client-ready reports
  • To send you notifications about audit results, pending approvals, and account performance alerts
  • To respond to your questions and provide customer support
  • To process payments for subscription plans
  • To improve our service, develop new features, and train and refine our AI analysis systems using aggregated, anonymized patterns
  • To comply with legal obligations and protect against fraud, abuse, or unauthorized use of the service

We never sell, rent, or share your personal information or Google Ads account data with third parties for marketing, advertising, or any purpose unrelated to providing the PPC Sherpa service.

4. Google API Services User Data Policy

PPC Sherpa's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, with respect to data obtained through Google APIs:

  • We only request access to Google Ads data that is necessary to provide the analysis, optimization, and reporting features described in this Privacy Policy
  • We do not use Google Ads data to develop, improve, or train generalized AI or machine learning models that are used for purposes other than providing the PPC Sherpa service to you
  • We do not use Google Ads data for advertising or marketing purposes unrelated to the service you subscribed to
  • We do not sell, license, or otherwise monetize Google Ads data obtained through the API
  • We do not use Google Ads data for surveillance, tracking, or monitoring of individuals for purposes unrelated to the service
  • We do not transfer, disclose, or use Google Ads data for use by a human unless it is necessary to provide the service, to comply with applicable law, or with your explicit consent
  • We store Google Ads data securely and only for as long as necessary to provide the service or as required by law

You can revoke PPC Sherpa's access to your Google Ads data at any time by visiting your Google Account permissions page at myaccount.google.com/permissions and removing PPC Sherpa's access, or by disconnecting the integration from within your PPC Sherpa account settings.

5. Data Storage and Security

We take the security of your data seriously and implement industry-standard technical and organizational measures to protect it.

Encryption

  • All data is encrypted at rest using AES-256 encryption
  • All data in transit is protected using TLS 1.2 or higher
  • OAuth tokens used to access your Google Ads account are encrypted at rest and never exposed in plaintext

Infrastructure

  • PPC Sherpa is hosted on Google Cloud Platform infrastructure located in the United States
  • Access to production systems and databases is restricted to authorized personnel only, using role-based access controls and multi-factor authentication
  • We conduct regular security reviews of our infrastructure and practices

Limitations

Despite these measures, no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee the absolute security of your data. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

6. Data Retention

We retain your data only for as long as necessary to provide the service or as required by applicable law.

  • Account information and Google Ads account data are retained while your PPC Sherpa subscription is active
  • Upon cancellation of your subscription, your account data and associated Google Ads data are deleted within 30 days
  • You may request immediate deletion of your data at any time by contacting us at contact@ppcsherpa.com. We will complete the deletion within 7 business days of receiving your request and confirm when it is done
  • Waitlist registration data is retained until the service launches and you either create an account or request deletion
  • Aggregated, anonymized data that cannot reasonably be used to identify you or your specific account may be retained indefinitely for analytics and service improvement purposes

7. Cookies

PPC Sherpa uses cookies to operate the service. We do not use third-party advertising or tracking cookies.

Cookies We Use

  • Session cookies: Used for authentication and maintaining your login state while you use the service. These expire when you close your browser or log out.
  • Functionality cookies: Used for essential site functionality, including remembering your preferences and protecting against cross-site request forgery (CSRF).

Cookies We Do Not Use

  • We do not use third-party advertising cookies
  • We do not use behavioral tracking cookies
  • We do not allow third-party advertising networks to place cookies on our website

You can disable cookies in your browser settings. If you disable cookies, you will not be able to log in to PPC Sherpa, and some features of the website may not function properly.

8. Your Rights

You have the following rights with respect to your personal data:

  • Access: You may request a copy of the personal data we hold about you, including information about how it is used and with whom it has been shared.
  • Correction: You may request correction of any inaccurate or incomplete personal data we hold about you.
  • Deletion: You may request deletion of your personal data and your Google Ads account data held by PPC Sherpa. See the Data Retention section above for timelines.
  • Data portability: You may request an export of the data we hold about you in a structured, machine-readable format (JSON or CSV).
  • Revoke API access: You may disconnect PPC Sherpa from your Google Ads account at any time. You can do this through your Google Account permissions page at myaccount.google.com/permissions, or through the PPC Sherpa account settings page. Revoking access stops all future data access but does not automatically delete data already collected. Submit a separate deletion request if you also want your data removed.
  • Opt out of communications: You may opt out of non-essential email communications by clicking the unsubscribe link in any email we send, or by contacting us directly. We will still send you emails essential to the operation of your account, such as security alerts and subscription receipts.

To exercise any of these rights, contact us at contact@ppcsherpa.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

9. GDPR Compliance (EU/EEA Users)

If you are located in the European Union (EU) or European Economic Area (EEA), the General Data Protection Regulation (GDPR) provides you with additional rights and protections.

Legal Basis for Processing

We process your personal data on the following legal bases:

  • Consent: When you connect your Google Ads account to PPC Sherpa, you consent to our access and processing of your account data for the purposes described in this policy. You may withdraw this consent at any time by revoking API access.
  • Contract performance: We process your data as necessary to perform our contract with you and provide the service you subscribed to.
  • Legitimate interests: We may process certain data for our legitimate business interests, such as fraud prevention and service improvement, where these interests are not overridden by your rights.
  • Legal obligation: We may process your data where required by applicable law.

Additional Rights Under GDPR

  • Right to be forgotten: You have the right to request complete erasure of your personal data under the conditions set out in Article 17 of the GDPR.
  • Right to restrict processing: You have the right to request that we restrict the processing of your personal data under certain circumstances, such as while a correction request is being verified.
  • Right to object: You have the right to object to processing of your personal data for certain purposes, including direct marketing or processing based on legitimate interests.
  • Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
  • Right to lodge a complaint: You have the right to lodge a complaint with the data protection supervisory authority in your EU or EEA member state if you believe we have not handled your data in accordance with the GDPR.
  • Rights related to automated decision-making: You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you. PPC Sherpa's analysis and recommendations are presented to you for human review and approval; no automated changes are applied to your account without your explicit action.

International Data Transfers

PPC Sherpa stores and processes data in the United States. If you are located in the EU or EEA, your data is transferred to and processed in the United States, which may not provide the same level of data protection as your home country. We implement appropriate safeguards for international transfers as required by GDPR.

Data Protection Contact

For GDPR-related inquiries, contact us at contact@ppcsherpa.com.

10. Children

PPC Sherpa is a business-to-business service intended for use by marketing professionals, business owners, and advertising agencies. It is not directed at anyone under the age of 18.

We do not knowingly collect personal information from individuals under the age of 18. If you are under 18, do not use PPC Sherpa or submit any personal information to us.

If we become aware that we have collected personal information from a child under the age of 18, we will take immediate steps to delete that information from our systems. If you believe we may have inadvertently collected data from a minor, please contact us at contact@ppcsherpa.com.

11. Third-Party Services

PPC Sherpa uses the following third-party services to operate the product. Each of these services may process your data according to their own privacy policies.

  • Google (Google Ads API): We use the Google Ads API to access, analyze, and apply approved changes to your Google Ads account. Google's use of your data is governed by the Google Privacy Policy and the Google API Services User Data Policy.
  • Google Cloud Platform: Our service infrastructure, including servers, databases, and storage, runs on Google Cloud Platform. Your data is stored and processed within Google Cloud infrastructure located in the United States. Google Cloud's data processing practices are governed by the Google Cloud Data Processing Addendum.
  • Stripe (payment processing, planned): When paid subscriptions are available, we will use Stripe to process subscription payments. Stripe will collect and process your payment card information directly. We do not store your payment card details. Stripe's practices are governed by the Stripe Privacy Policy.
  • Formidable Forms: During the pre-launch phase, we use Formidable Forms (a WordPress plugin) to process waitlist registrations. Information submitted through our waitlist form is stored in our WordPress database. This data is used solely to notify you when PPC Sherpa launches.

We evaluate third-party services for their data handling practices before integrating them. We do not use third-party advertising platforms, analytics services that track individual users across sites, or social media tracking pixels on our service.

12. Changes to This Policy

We may update this Privacy Policy from time to time as the service evolves or as required by changes in applicable law.

If we make material changes to this policy, including changes to how we collect, use, or share your data, we will:

  • Update the "Last updated" date at the top of this page
  • Send an email notification to the address associated with your account at least 14 days before the changes take effect
  • In some cases, request your renewed consent where required by law

For minor, non-material changes such as clarifications, corrections of typographical errors, or reorganization of existing content without substantive change in meaning, we will update the "Last updated" date but may not send a separate email notification.

Your continued use of PPC Sherpa after the effective date of the revised policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you must stop using the service and may request deletion of your data.

Previous versions of this Privacy Policy are available upon request by contacting us at contact@ppcsherpa.com.

13. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or the way we handle your data, please contact us:

We will respond to all inquiries within 30 days. For data deletion or export requests, we will confirm receipt within 5 business days and complete the request within 30 days.