Privacy Policy

This policy explains how SameSpend handles information. SameSpend is operated by ARCS AI (マイアークス株式会社), a company based in Tokyo, Japan ("we", "us"). It applies to samespend.com and to the advertising analysis services we provide to business clients.

1. Information we collect

Audit requests. When you request a free audit we collect your name, business name, email, phone number (optional), website, city and state, industry, approximate monthly ad spend, the ad platforms you use, how you track customers, and any message you include. We also record the date and time of the request and a one-way hash of the IP address, used only to prevent abuse.

Advertising account data. When a client grants access, we read performance data from their advertising accounts through the official Google Ads API and Meta Marketing API. This includes campaign, ad group, keyword, search term, location, device, time-of-day and conversion statistics, and account settings such as budgets and conversion action names.

Lead and sales records. If a client chooses to share them, we receive records of leads and completed jobs, such as date, service, amount and lead source. Phone numbers and email addresses are stored only as one-way hashes when they are used to match conversions.

Billing information. Payments are processed by Stripe. We receive the payment status and the billing contact you provide, but not your full card number.

Contact information. When you email us, we receive your name, email address and the content of your message.

Our website does not use advertising cookies, analytics cookies or third-party tracking scripts. Fonts and scripts are served from our own domain.

2. How we access Google Ads data

Clients add our reporting service account (reporting@samespend-ads.iam.gserviceaccount.com) to their own Google Ads account, normally with read-only access, and can remove it at any time from their Google Ads settings. We do not ask for or store client Google passwords. We only access accounts that a client has explicitly granted to us.

3. How we use information

We use information only to provide the service you asked for:

• replying to your audit request and preparing your audit;
• producing performance reports and recommendations for that client;
• if the client approves in writing, applying specific changes to that client's campaigns;
• if the client requests it, uploading the client's own offline conversions back to the client's own advertising accounts;
• billing, responding to support requests and keeping the service secure.

We do not sell personal or client data. We do not use it to serve or target advertising, to build profiles of individuals, or to benefit any other client. We do not transfer it to third parties except the service providers listed in section 5, or when required by law.

4. Google API Services User Data Policy

SameSpend's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through the Google Ads API is used only to provide and improve the user-facing features described in this policy, and is not used for training generalized AI or machine-learning models.

5. Service providers and storage

We store data on infrastructure we control and on Google Cloud (including Firebase). We use Google Workspace for email and Stripe for payments. These providers process data on our behalf under their own security and confidentiality commitments.

6. Retention and deletion

Audit requests that do not become clients are deleted within 12 months. We keep a client's advertising data for as long as we provide the service to that client. When a client ends the service or asks us to delete their data, we delete it within 30 days, except where we must keep records to meet legal obligations. Removing our account from your Google Ads or Meta account stops all further data access immediately.

7. Security

Access credentials are stored encrypted and are limited to the people who operate the service. Data is transmitted over encrypted connections.

8. Your choices

You can ask us what data we hold about you or your business, ask us to correct or delete it, or withdraw access at any time by contacting us at the address below. California residents may exercise these rights under the CCPA; we do not sell or share personal information as defined by that law.

9. Changes

If we change this policy, we will update the effective date above and notify active clients of material changes by email.

10. Contact

ARCS AI (マイアークス株式会社), Tokyo, Japan
Email: privacy@samespend.com