Run free audit

Privacy

Privacy Policy — Kestrel Audit
◎ Kestrel

Privacy Policy

Last updated: 24 June 2026

Kestrel Audit (“Kestrel”, “we”, “us”, or “our”) is a read-only Google Ads health-audit and monitoring tool operated by Ontrepreneur, a registered business based in New Zealand. This Privacy Policy explains what information we collect when you use Kestrel (the “Service”), how we use and protect it, and the choices you have. By creating an account or connecting your Google Ads account, you agree to this Policy.

1. Information we collect

Account information

When you sign up, we collect your name, email address, business name, and the details needed to create and secure your account.

Google Ads data (read-only)

When you connect your Google Ads account, you authorise Kestrel — through Google’s secure OAuth sign-in — to read your account. We access only the configuration and performance data needed to run our checks and produce your health score and recommendations (for example: campaigns, ad groups, keywords, search terms, budgets, conversions, account settings, and recommendations). Kestrel’s access is read-only: we do not create, edit, pause, delete, or otherwise change anything in your Google Ads account.

Payment information

Subscription payments are processed by our payment provider, Stripe. Your full card details are entered with and stored by Stripe, not by Kestrel; we receive only limited information such as the card brand, last four digits, and billing status needed to manage your subscription.

Usage and technical data

Like most online services, we collect basic technical information (such as log data and cookies) to operate, secure, and improve the Service.

2. How we use your information

  • To run your audit, compute your health score, and generate recommendations.
  • To monitor your account over time and notify you when something changes.
  • To create and secure your account and provide customer support.
  • To manage your subscription and process payments (via Stripe).
  • To maintain, protect, and improve the Service.

3. How we handle Google user data

This section describes specifically how Kestrel handles data obtained through Google APIs.

  • Read-only. Kestrel only reads your Google Ads account. It never modifies campaigns, budgets, bids, keywords, audiences, or any other entity.
  • Purpose-limited. Google Ads data is used solely to provide you the Kestrel features you requested — your audit, health score, recommendations, trends, and alerts.
  • No advertising use. We do not use Google user data to serve advertising.
  • No sale, no unrelated transfer. We do not sell Google user data, and we do not transfer it to others except as necessary to provide the Service, comply with applicable law, or as part of a merger or acquisition with appropriate protections.
  • No human access to your Google user data except: (a) with your consent (e.g. to help with a support request); (b) where necessary for security or to comply with applicable law; or (c) where the data has been aggregated or de-identified.

Limited Use disclosure. Kestrel’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

You can disconnect Kestrel from your Google Ads account at any time within Kestrel, or by removing Kestrel’s access in your Google Account security settings. When you disconnect, we stop accessing your Google Ads data.

4. Sharing and third parties

We do not sell your personal information. We share information only with service providers who help us run the Service, and only as needed:

  • Google — to read your Google Ads data with your authorisation.
  • Stripe — to process subscription payments.
  • Hosting and infrastructure providers — to operate the Service securely.

We may also disclose information where required by law.

5. Data storage, security and retention

All access to the Service is over encrypted connections (HTTPS), and authentication tokens are stored securely. We keep your account data and the metric snapshots needed for your audit history and trends for as long as your account is active. If you close your account or ask us to delete your data, we will delete or de-identify your personal information and Google user data, except where we are required to retain certain records by law.

6. Your rights and choices

Consistent with the New Zealand Privacy Act 2020 (and other privacy laws that may apply to you), you can:

  • Access and correct the personal information we hold about you.
  • Disconnect your Google Ads account at any time.
  • Request deletion of your account and associated data.
  • Ask us questions about how your information is handled.

To exercise any of these, contact us using the details below.

7. Cookies

We use cookies and similar technologies to keep you signed in, remember preferences, and operate the Service. You can control cookies through your browser settings, though some features may not work without them.

8. Children

Kestrel is a business tool intended for use by adults. It is not directed to anyone under 18, and we do not knowingly collect information from children.

9. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the date above and, where appropriate, notify you.

10. Contact us

If you have any questions about this Policy or your information, contact:

Ontrepreneur — Kestrel Audit
Email: privacy@kestrelaudit.com
Website: www.kestrelaudit.com
New Zealand

Kestrel Audit is a product of Ontrepreneur. Kestrel is not affiliated with, endorsed by, or sponsored by Google LLC. Google Ads is a trademark of Google LLC.