Privacy policy

Last updated: 16 September 2026. This policy covers Story9 AdOps Reporting, an internal application operated by Story9 Ltd, United Kingdom ("we", "us"). It explains what data the application accesses through Google APIs, how we use it, how long we keep it, and who can see it.

1. Who we are

Story9 Ltd is a digital agency in the United Kingdom. The application is used by our staff to manage Google Ads campaigns for accounts under our own Google Ads manager account, currently the ORTOO account operated by ORTOO Management Limited, a Story9 company. Contact for anything in this policy: Rob Llewellyn, rllewellyn@story9.agency.

2. What the application is and who uses it

Story9 AdOps Reporting is a command-line tool with no public users, no sign-up and no user interface. Only authorised Story9 staff run it. It signs in to Google with Google Cloud service accounts, not with an individual's Google account, so no Google user is ever asked to grant it access to their own data.

3. Google user data we access

The application uses one Google API scope, https://www.googleapis.com/auth/adwords, which allows it to read and manage Google Ads accounts. Through that scope it accesses:

• Aggregate advertising performance data for our own accounts: impressions, clicks, cost, conversions, impression share, quality scores and similar metrics, by campaign, ad group, keyword, search term, asset and date.
• The configuration of our own campaigns: campaign settings, budgets, ad groups, keywords, ad text, assets, location targets and labels.
• Search terms that triggered our ads, as aggregate query text with counts. These are not linked to any individual.

It does not access any personal data about the people who see or click our ads. It does not access Google accounts, Gmail, Drive, contacts, or any Google service other than Google Ads. It does not access advertising accounts outside our manager account.

4. How we use that data

• To report on and compare the performance of our own campaigns.
• To create and update our own campaigns, ad groups, keywords, ads and assets from a master list we maintain, with every new object created in a paused state for staff review.
• Planned: to import conversions for website registrations that the browser tag missed. Those uploads will contain only a Google click identifier, a conversion name, a time and an optional value, and only for website visitors who accepted marketing cookies through our consent banner.

We do not use Google user data for advertising to anyone, for building profiles of individuals, for training machine learning models, or for any purpose other than managing our own advertising.

5. Storage and retention

Performance reports are stored in our internal reporting files and in our admin dashboard for as long as they are useful for comparing campaigns, and are deleted when no longer needed. Campaign configuration is held in our source repository as the master list. Google click identifiers collected on our website for the planned conversion import are deleted no later than 90 days after the click. Service account keys and the developer token are stored on a staff workstation in a protected folder and in the operating system keychain; they are never placed in public code or shared outside Story9.

6. Sharing

We do not sell Google user data. We do not share it with third parties, except with Google itself when we send campaign changes or conversion uploads back through the Google Ads API. Staff at Story9 and at the advertiser whose account it is (ORTOO Management Limited) can see the reports.

7. Security

Access to the application is limited to named staff. Credentials are held outside source control. The application makes changes only through the official Google Ads API client libraries, records every change it makes, and can remove exactly the objects it created.

8. Google API Services User Data Policy

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

9. Your rights and how to contact us

The application does not hold personal data about members of the public. If you believe it holds data about you, or you have any question about this policy, email rllewellyn@story9.agency and we will respond within 30 days. You also have the right to complain to the Information Commissioner's Office in the United Kingdom.

10. Changes to this policy

We will update this page when the application changes what it accesses or how it uses data, and change the date at the top.