myr logomyr

Privacy Policy

Last updated: June 15, 2026

Overview

myr (“we”, “us”) operates myr.ad and provides AI-assisted tools for Google Ads campaign management. This Privacy Policy explains what information we collect, how we use it, and your choices.

Information we collect

  • Account information — email address and authentication details when you create an account (via email/password or Google sign-in through our auth provider).
  • Google Ads data — when you connect Google Ads, we access campaign, ad group, keyword, performance, and account metadata needed to analyze and optimize your advertising, as authorized by you during OAuth.
  • Usage data — how you interact with the product (pages visited, features used, agent runs, errors) to improve reliability and support.
  • Billing information — subscription and payment details are processed by our payment provider; we do not store full card numbers on our servers.

How we use your information

We use collected information to:

  • Provide, operate, and maintain the myr service
  • Sync and analyze your Google Ads accounts and campaigns
  • Run AI agents and generate recommendations or apply approved changes
  • Process subscriptions, trials, and billing
  • Respond to support requests and send service-related communications
  • Improve security, prevent abuse, and debug issues

Sharing and disclosure of Google user data

This section describes how myr shares, transfers, or discloses data obtained from Google services (including Google sign-in and the Google Ads API). “Google user data” includes your Google account identifier, email address, OAuth tokens, and Google Ads account, campaign, and performance data.

We do not sell Google user data. We do not share, transfer, or disclose Google user data to third parties for their independent advertising, marketing, or data-broker purposes.

We share, transfer, or disclose Google user data only with the parties below, and only as needed to operate myr for you:

  • Supabase (authentication and database hosting) — stores your account email, profile information from Google sign-in, encrypted Google Ads OAuth tokens, and synced Google Ads data so the service can function.
  • Google AI / Gemini (AI model provider) — receives relevant Google Ads metrics and campaign context when you run agents, analyses, chat, or reports, solely to generate outputs you request. We do not send Google user data to AI providers for unrelated training or advertising.
  • Cloud hosting providers — process encrypted data on our infrastructure to run the application. They act as processors and do not use Google user data for their own purposes.
  • Stripe (payments) — receives billing and subscription information only. Stripe does not receive Google Ads performance data or Google OAuth tokens.
  • Email delivery providers — receive your email address and message content for service-related emails (e.g. reports you enable). They do not receive Google Ads account data unless you explicitly include it in a message you send us.

We may also disclose Google user data if required by law, regulation, legal process, or to protect the rights, safety, and security of myr, our users, or others. We may share data in connection with a merger, acquisition, or sale of assets, subject to this policy.

myr employees may access Google user data only on a need-to-know basis for support, security, and product operations, under confidentiality obligations.

You can revoke myr’s access to Google data at any time by disconnecting Google Ads in the app or removing the app’s access in your Google Account permissions.

Google OAuth tokens

Google Ads access and refresh tokens are stored encrypted. We use them solely to perform actions you authorize — syncing account data, running analyses, and applying changes when autonomous mode or approvals allow. You can disconnect Google Ads at any time from your account settings.

Other third-party services

The providers listed above also appear in our general service stack. In addition, we may use analytics and monitoring tools that collect usage data about the myr application itself (not your Google Ads campaign content), according to those providers’ policies and our agreements with them.

Data retention

We retain account and Google Ads data while your account is active. If you delete your account or disconnect an ad account, we delete or anonymize associated data within a reasonable period, except where retention is required for legal, security, or billing purposes.

Security

We use industry-standard measures including encryption in transit (HTTPS), encrypted storage of sensitive tokens, access controls, and least-privilege internal access. No method of transmission or storage is 100% secure.

Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, or to object to certain processing. Contact us to make a request.

Changes

We may update this policy from time to time. We will post the revised version on this page and update the “Last updated” date above.

Contact

Questions about this Privacy Policy: support@myr.ad