Devrika

Privacy Policy

The Audit Devrika application — Google Ads account analysis. Last updated: August 2026.

This policy explains how the Audit Devrika application handles data you authorize it to access when you connect your Google Ads account. It uses plain language so you can understand what happens to your business data.

Who we are

Devrika is a Romanian online marketing agency. The Audit Devrika application described here runs on audit.devrika.io and is operated by the same company. You can contact us at hello@devrika.ro.

What data we read from your Google account

With your explicit consent, the application requests one Google permission (adwords). The Google Ads OAuth permission is not read-only. The application reads the following data from your Google Ads account:

• The app reads the data required for the audit: accessible Google Ads accounts, including their identifier, name, manager status, and currency, the selected account time zone, products and their Shopping performance, conversion tracking configuration, campaign structure, Performance Max campaigns, Shopping campaigns, Search campaigns, negative keywords, search terms, and account totals for the last 365 days.
• The application reads data, compares it with your business thresholds, and shows you the result immediately.

We do not request or obtain access to Gmail, Google Drive, contacts, calendars, or any other Google service. We cannot start or stop campaigns, change budgets, or spend money.

What we do with the data

We use these categories to generate the report you see on screen. The analysis runs when you request it on the site.

Your Google authorization remains in a secure cookie for one hour and is not stored with the lead. If you request the PDF, we store your name, email, phone number, store website, selected account identity, confirmed financial inputs, calculated break-even values, the report PDF, and its delivery status. We use this record only to generate, deliver, and support the requested audit. If optional monthly report delivery becomes available and you request it separately, the same limited purpose applies. We do not use this agreement for newsletters or general promotional messages. You may request deletion at any time.

How we protect Google user data

We use HTTPS to encrypt data in transit between your browser, our application, and Google. Your Google authorization is held in a signed session cookie that expires after one hour. In production, the cookie is sent only over HTTPS, cannot be read by page JavaScript, and uses SameSite protection to limit cross-site requests.

Google API requests and application secrets are handled on the server. We do not store your Google authorization token with your contact record. Pending reports are stored in private server directories, and report snapshot files have restricted filesystem permissions. We verify signed report snapshots before using them and check that saved reports belong to the portal link used to open them.

Access to Google user data is limited to providing and supporting the requested audit and report delivery, as described in this policy. You can revoke Google access or request deletion using the instructions below.

Compliance with Google policies

Our use and transfer to any other application of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. We do not use the data for advertising, sell it, transfer it, or allow people to read it except where strictly necessary to operate the application or comply with law.

Who we share data with

We do not sell, rent, or use this data for third-party advertising. When email delivery is configured, Resend processes the recipient address, message, and attached PDF solely to deliver the report. Infrastructure providers may process data only as required to operate the application.

How to revoke access

You can revoke access at any time without contacting us. Open myaccount.google.com/permissions, find Audit Devrika in the list, and select “Remove access.” The application can no longer read your account after access is removed.

Your rights

Under the GDPR, you may request a copy of the personal data we hold about you, request its correction or deletion, and object to processing. Email hello@devrika.ro; we will respond within 30 days.

Changes to this policy

If we materially change how we handle data, we will update this page and the date shown above.