Privacy — SPM Google Ads Read-Only Assistant
This notice describes how Sydney Pressed Metal Pty Ltd, ABN 18 605 810 197, trading as Sydney Pressed Metal, handles information through its internal SPM Google Ads Read-Only Assistant.
What we access and why
With the Google account holder’s authorisation, the tool accesses sign-in identity, accessible Google Ads account identifiers and the data needed for requested SPM reports and audits. This can include account and campaign details, ads, keywords, search-term reports, spend, impressions, clicks and conversion metrics. We use the information for reporting, auditing, identifying opportunities and making recommendations. Customer contact lists and raw lead records are not part of the current workflow.
Permissions and read-only controls
The connector currently exposes only read-only Google Ads tools, while the underlying Google OAuth permissions are technically broader and can permit changes when used through other tools, subject to the signed-in user’s account access. Read-only operation is enforced by the tools exposed by this connector, not by a read-only OAuth permission. The current sign-in workflow also requests identity/email and Google Cloud permissions for its authentication setup. SPM does not authorise this assistant to change advertising or operate unrelated Google services. Use is limited to authorised SPM reporting, auditing and recommendations.
AI processing and sharing
Requested Ads rows—not just the final summary—are supplied to OpenAI as tool output for AI-assisted analysis. Prompts, query parameters, relevant prior conversation, selected file contents and diagnostic output may also be included. The connector retrieves selected data rather than automatically uploading the entire Ads account. Results are not automatically anonymised.
SPM does not sell Google user data or intentionally disclose it for third parties’ independent marketing, data-broker or unrelated purposes. Google processes authentication and API requests, and OpenAI processes relevant task content to provide AI analysis. Authorised personnel may review reports for SPM’s internal business purposes. Necessary security or legally required disclosures may also occur. Data processing may take place outside Australia; specific provider locations and retention arrangements have not been verified for this account.
Storage and security
OAuth credentials and the Desktop client configuration are stored locally outside the project files with owner-only file permissions. They are used to authenticate to Google and are not normal reporting output. The sign-in helper disables authentication file and HTTP logging. Credentials must not be pasted into conversations or exposed in diagnostic output.
Local project notes, reports and task transcripts can retain reporting results. Query text and diagnostic information may also be logged. These records are not all protected by the same file permissions as the credentials. We do not represent this as a local-only, zero-retention or universally encrypted-at-rest service.
Model-improvement controls
The account’s “Improve the model for everyone” setting was observed Off on 14 September 2026. The availability and value of a separate Codex full-environment training control have not been established. We make no broader no-training assurance. Provider processing remains subject to applicable account settings and service terms. A training opt-out does not itself delete past submissions or stop processing needed to answer requests.
Retention, disconnection and deletion
Credentials remain until removed or replaced. Local reporting records and task history have no configured automatic deletion schedule. The account-specific OpenAI retention period has not been established, and immediate deletion from every system is not promised.
You can revoke this app’s authorisation through your Google Account. This stops its authorised access but does not erase previously saved reports. Deletion requires separate action on relevant local credentials and files, task history and provider-held content. Archiving is not deletion. Backups, saved memories, shared copies and legal or security retention may require separate handling.
Contact ethan@sydneypressedmetal.com.au to request access, correction, deletion or disconnection, or raise a privacy concern. We will assess the request and use the relevant local and provider controls.
Changes and Google data use
SPM’s intended Google-data use is limited to the reporting, auditing and recommendation functions described here and must meet applicable Google API Services User Data Policy requirements. This notice is not a certification of compliance or Google approval. We will update it and obtain any required consent before materially expanding data access or changing its purpose.
