Privacy Policy

Last Updated: April 29, 2026

1. Introduction

CoveAuto AI ("CoveAuto AI", "we", "us", or "our") respects your privacy and is committed to protecting personal data and Google user data processed through our website, web application, and related services available through https://coveauto.ai/ and related pages (collectively, the "Service").

This Privacy Policy explains how we collect, use, store, disclose, and protect information when you use the Service, including when you connect a Google account and authorize access to Google Ads data.

2. Scope of This Policy

This Privacy Policy applies to information we collect:

• directly from you;
• automatically through your use of the Service;
• from third-party platforms you choose to connect, including Google; and
• from communications, support requests, and account activity related to the Service.

3. Information We Collect

3.1 Information You Provide Directly

We may collect information you choose to provide, such as:

• name;
• email address;
• company name;
• phone number;
• billing or business contact information;
• prompts, campaign notes, landing page content, or files you upload;
• support messages and other communications with us; and
• account preferences, settings, and workflow configurations.

3.2 Information Collected Automatically

When you use the Service, we may automatically collect:

• IP address;
• browser type, browser version, and device identifiers;
• operating system and approximate location derived from IP address;
• referring URLs, pages visited, session timestamps, and clickstream data;
• log data, diagnostics, crash reports, and performance metrics; and
• cookie, local storage, or similar technology data.

3.3 Google Account and Google Ads Data

If you choose to connect your Google account, we may collect and process the Google user data and Google Ads data that are necessary to provide the features you request. Depending on the permissions granted and the features used, this may include:

• Google account identifiers and basic account connection metadata;
• Google Ads customer account identifiers and account hierarchy information;
• campaigns, ad groups, ads, assets, keywords, search terms, audiences, budgets, bidding settings, and other account configuration data made available through the Google Ads API;
• reporting and performance data such as impressions, clicks, conversions, cost, and related metrics;
• landing page URLs and page-related metadata associated with ads or campaigns; and
• OAuth authorization metadata needed to maintain your connection.

We do not access Google user data beyond the scope of the permissions you grant.

3.4 Cookies and Similar Technologies

We may use cookies and similar technologies to:

• keep you signed in;
• remember preferences;
• improve security;
• understand Service usage; and
• maintain and improve performance.

You can control cookies through your browser settings, but disabling cookies may affect Service functionality.

4. How We Use Information

We may use information we collect to:

• provide, operate, maintain, and secure the Service;
• create and manage user accounts;
• connect to authorized third-party services such as Google Ads;
• retrieve, analyze, organize, and display advertising and landing-page related data at your direction;
• generate reports, recommendations, summaries, content, and other user-facing outputs;
• support workflow automation and account-linked features requested by you;
• provide customer support and respond to inquiries;
• troubleshoot issues, detect abuse, and protect against fraud or security incidents;
• improve the reliability, usability, and performance of the Service;
• comply with legal obligations and enforce our agreements; and
• communicate with you about updates, operational notices, and support matters.

5. Google User Data and Google Ads Data

5.1 Why We Access Google User Data

If you authorize Google access, CoveAuto AI may access Google Ads account data necessary to provide campaign analysis, landing-page alignment analysis, reporting, optimization recommendations, workflow automation, and related user-facing features of the Service.

5.2 How We Use Google User Data

We use Google user data only for the limited purposes disclosed in this Privacy Policy and only to provide or improve the user-facing features you request from the Service.

In particular:

• we do not sell Google user data;
• we do not use Google user data for serving advertisements;
• we do not use Google user data for purposes unrelated to the user-facing features you request;
• we do not disclose Google user data to third parties except as described in this Privacy Policy; and
• we limit our access to the data necessary to operate the requested features.

5.3 Storage of OAuth Tokens and Connection Metadata

If persistent account connectivity is required for a feature you enable, we may store OAuth refresh tokens, account identifiers, authorization status, and related integration metadata on our systems so that we can maintain your connection and make authorized API requests on your behalf.

Short-lived access tokens may be processed temporarily as part of authentication and API request handling.

5.4 Sharing of Google User Data

We do not sell, rent, or trade Google user data.

We may share Google user data only in the following limited circumstances:

• with service providers who process data on our behalf and under contractual confidentiality and security obligations;
• when necessary to comply with applicable law, regulation, legal process, or enforceable governmental request;
• when necessary to detect, prevent, or address fraud, security, or technical issues; or
• as part of a merger, acquisition, financing, or sale of all or part of our business, subject to appropriate confidentiality and legal safeguards.

5.5 Human Access

Access to Google user data and related account data is limited to authorized personnel and only when reasonably necessary for support, security, maintenance, legal compliance, or troubleshooting.

6. Legal Bases for Processing

Where required by applicable law, we rely on one or more of the following legal bases:

• performance of a contract with you;
• your consent;
• our legitimate interests in operating, securing, and improving the Service; and
• compliance with legal obligations.

7. Data Retention

We retain personal data and Google user data for as long as reasonably necessary to provide the Service, maintain your account, fulfill the purposes described in this Privacy Policy, resolve disputes, enforce agreements, and comply with legal obligations.

If you disconnect a Google account, revoke OAuth permissions, close your account, or request deletion, we will stop collecting new Google user data through that connection and will delete or de-identify stored data within a commercially reasonable period, except where retention is required for legal, security, fraud-prevention, backup, or dispute-resolution purposes.

8. International Data Transfers

Your information may be processed and stored in jurisdictions other than your own, including China, where data protection laws may differ from those in your jurisdiction.

Where required, we will take reasonable steps designed to ensure that transferred data receives an appropriate level of protection.

9. Your Rights and Choices

Depending on applicable law, you may have the right to:

• access personal data we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of your information;
• object to or restrict certain processing;
• request portability of certain data; and
• withdraw consent where processing is based on consent.

You may also:

• revoke Google access at any time through your Google account permissions settings;
• disconnect an integration through the Service, if that option is available; and
• contact us to request deletion of account data or connected Google data.

10. Service Providers

We may use third-party service providers to host infrastructure, store data, provide analytics, manage support operations, and support security and Service delivery. These providers may access information only as necessary to perform services for us and are contractually restricted from using it for unrelated purposes.

11. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal data and Google user data against unauthorized access, disclosure, alteration, and destruction.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children's Privacy

The Service is not intended for individuals under 18 years of age, and we do not knowingly collect personal data from children under 18.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version and revise the "Last Updated" date. Your continued use of the Service after the updated version becomes effective means you accept the revised Privacy Policy, to the extent permitted by law.

14. Contact Us