Google Ads API Use

Last updated: May 26, 2026

Who we are

Kivolaro is a custom software and AI-automation studio. We help our clients (and ourselves) replace spreadsheet-driven operations with integrated tooling. The Kivolaro Studio is our internal admin application at studio.kivolaro.com, used only by Kivolaro staff — there is no public sign-up and no third-party access.

How we use the Google Ads API

The Studio integrates with the Google Ads API for one purpose only: to read the daily performance metrics of Google Ads campaigns we run on our own ad account (impressions, clicks, cost, conversions, lead counts), and to push back first-party offline conversions when a lead generated through a Google Ads campaign closes into a paying customer.

The integration does NOT:

Manage campaigns or budgets on behalf of any third party.
Provide reporting to external customers.
Resell access to the API or expose endpoints to anyone outside Kivolaro.
Use the data for advertising other than our own marketing analytics.

OAuth scopes requested

https://www.googleapis.com/auth/adwords — required to call the Google Ads API. Used in read mode to fetch campaign metrics and in write mode strictly to upload offline conversions to our own account.

Data we read

From our own Google Ads account, on a daily schedule:

Campaign id, name, status, daily budget.
Per-day per-campaign impressions, clicks, cost (USD).
Conversion counts attributed to each campaign.

Nothing personally identifying about end-users is requested. Lead-level attribution lives in our own first-party CRM (Firestore) keyed by anonymous gclid / wbraid / gbraid identifiers that Google provides for measurement.

Data we write

Offline conversion uploads via conversionUploadService when a Kivolaro proposal closes into a paid project. Payload includes conversion_action, conversion_date_time, conversion_value (USD), and the gclid that originated the lead. No PII.

Where the data lives

Stored in Google Cloud Firestore (project kivolaro-studio) under collections growth_campaigns, growth_campaign_daily_metrics, and growth_offline_conversion_queue.
Retention: indefinite while the campaign is active. Archived rows are kept for audit.
Access control: read/write restricted to authorised Kivolaro operators, authenticated via Firebase Auth + an email allow-list (currently: facundoluism@gmail.com — the operating Google account of Kivolaro's operator). Service-account credentials are held in Google Secret Manager, never committed to source control.

Security

HTTPS-only with HSTS, X-Frame-Options DENY, strict Referrer-Policy.
OAuth refresh tokens stored in Google Secret Manager (project-scoped).
No data is shared with third parties, brokers, or resold.
Incident response: report to hello@kivolaro.com.

User rights

The Studio is operated exclusively by Kivolaro staff. Any data subject rights (access, deletion, correction) over campaign metrics that originate from Google Ads are governed by Google's own platform terms; over leads or business contacts stored in our CRM, by our Privacy Policy and the GDPR/CCPA rights enumerated there.

Compliance contact

Questions about this integration: hello@kivolaro.com.