Last updated: September 29, 2026
1. General information
This privacy policy applies to the application (hereinafter: the Application) operated by Vortex Virtual Reality, a business of Vortex Consulting Przemysław Daniel Wardzyński (hereinafter: the Operator or Administrator). The Application enables analysis, monitoring and management of advertising campaigns in the Google Ads system.
A Polish-language version of this policy is available at https://vortexvr.pl/pages/polityka-prywatnosci-aplikacji-vortexvr.
2. Data controller
The controller of personal data processed in connection with the use of the Application is:
Vortex Consulting Przemysław Daniel Wardzyński
ul. Paczkowska 42, 04-693 Warszawa, Poland
Tax ID (NIP): 5262261767
Business registry (REGON): 386084236
Email: support@vortexvr.pl
Phone: (+48) 516 530 153
3. Scope and purpose of data processing
The Application accesses data from the Google Ads system for the following purposes:
- Analysis of the effectiveness of advertising campaigns running on Google Ads accounts owned by the Operator and accounts to which the Operator has obtained authorized access;
- Optimization of campaign structure, budgets, bidding strategies, and product feeds;
- Automation of analytical and reporting tasks;
- Generation of internal reports for the purpose of conducting the Operator's e-commerce activities.
The Application does not collect personal data of natural persons other than users authorizing access to Google Ads accounts. The Application does not use data for marketing purposes and does not share it with third parties.
4. Legal basis for processing
The legal basis for data processing is:
- Art. 6(1)(b) GDPR, processing is necessary for the performance of a contract or to take steps at the request of the data subject;
- Art. 6(1)(f) GDPR, the legitimate interest of the Administrator related to conducting and optimizing business activities.
5. Data recipients
Data processed by the Application may be shared with the following categories of recipients:
- Google LLC and Google Ireland Limited, as the operator of the Google Ads system;
- Authorized employees, associates, and subcontractors of the Operator, to the extent necessary for the execution of analytical tasks;
- State authorities, if required by law.
Data is not transferred outside the European Economic Area, except for transfers resulting from the use of Google services, which take place on the basis of the European Commission's standard contractual clauses.
6. Data retention period
Data is processed for a period:
- Necessary for the fulfillment of the purposes for which it was collected;
- Required by law (e.g., accounting and bookkeeping regulations);
- Not longer than the duration of authorization to access the Google Ads account.
After the processing period ends, data is deleted or anonymized.
7. User rights
Persons whose data is processed have the right to:
- Access their data;
- Rectify their data;
- Erase their data;
- Restrict processing;
- Data portability;
- Object to processing;
- Withdraw consent at any time, if processing is based on consent;
- Lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa, Poland).
8. Data security
The Application applies technical and organizational security measures to protect personal data being processed against unauthorized access, loss, destruction, or modification, including:
- Encryption of data transmission (SSL/TLS);
- Two-factor authentication for access to administrative systems;
- Regular backups and software updates;
- Restricting access to data to authorized persons only.
9. Use of the Google Ads API and of Google user data
9.1 Scope requested
The Application requests a single OAuth scope from Google:
https://www.googleapis.com/auth/adwords
No other Google API scopes are requested, and no Google Workspace data, Gmail data, Google Drive data, contacts or location data is accessed by the Application.
9.2 What data the Application accesses
Through the scope above, the Application reads the following categories of data from Google Ads accounts owned by the Operator, or to which the Operator has been granted authorized access by the account owner:
- Account identifiers, names, currency and time zone settings;
- Campaign structure and settings, including bidding strategies, target ROAS and target CPA values, budgets, geographic targeting and campaign status;
- Ad group, asset group and listing group structure;
- Performance metrics, including impressions, clicks, cost, conversions and conversion value;
- Conversion action configuration, including which actions are counted as primary or secondary;
- Audience lists and audience signals associated with campaigns;
- Product feed and Merchant Center information relating to the Operator's own product catalogue;
- Account change history, including which user or tool made a given change and when.
The Application does not access Google user data belonging to any third party, and does not access the Google Ads accounts of any party other than the Operator.
9.3 How the data is used
Data obtained through the Google Ads API is used solely for the purposes described in point 3 of this policy, namely internal analysis, reporting and optimization of the Operator's own advertising campaigns.
Specifically, data obtained through the Google Ads API:
- Is not used for advertising or marketing purposes;
- Is not sold, rented, licensed or otherwise made available for consideration to any party;
- Is not transferred to third parties, except as set out in point 5 of this policy;
- Is not used to develop, train, improve or evaluate artificial intelligence or machine learning models, whether generalized or otherwise;
- Is not used to determine creditworthiness or for lending purposes.
9.4 Storage, retention and deletion
Data retrieved through the Google Ads API is processed transiently in the course of analysis. Where data is stored, it is retained for no longer than the period during which the authorization to access the relevant Google Ads account remains in force.
The account owner may revoke the Application's authorization at any time through the security settings of their Google Account, at https://myaccount.google.com/permissions. Upon revocation, the Application immediately and permanently loses access to the account. Any data previously stored is then deleted or anonymized.
A request for deletion of data held by the Application may also be made at any time by contacting support@vortexvr.pl.
9.5 Human access to Google user data
Google user data obtained through the Application is not read by any person other than authorized personnel of the Operator. Such access occurs only where it is necessary for the purposes described in point 3 of this policy, where it is necessary for security purposes such as investigating abuse, where it is required by applicable law, or where the data has been aggregated and anonymized.
9.6 Compliance with Google policies
The Application uses the Google Ads API in accordance with the terms set out by Google in:
- Google API Services User Data Policy: https://developers.google.com/terms/api-services-user-data-policy
- Google Ads API Terms of Service: https://developers.google.com/google-ads/api/docs/policy
VortexVR's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
10. Changes to the privacy policy
The Administrator reserves the right to make changes to this privacy policy. Users will be informed of any changes by publishing a new version on the website.
11. Contact
For questions regarding this privacy policy or the manner of processing personal data, please contact us at:
Email: support@vortexvr.pl
Phone: (+48) 516 530 153
Address: Vortex Consulting Przemysław Daniel Wardzyński, ul. Paczkowska 42, 04-693 Warszawa, Poland