1. Introduction
EasyData is an ad data management platform for Meta (Facebook / Instagram), TikTok and Google Ads advertising. It gives teams a unified console for multi-account management, data observation and insight, AI creative analysis, and an open MCP interface for AI agents.
In this policy, EasyData or we refers to the operator of the platform, PREMIUM SNOOKER SDN. BHD., together with its technical services partner Yibin Youtu Information Technology Co., Ltd. (宜宾友途信息科技有限公司). We act as the controller of your personal information and handle it in accordance with this policy and applicable laws.
This policy applies to the EasyData platform (easydata.click/app/ and its sub-sites) and to the official website (easydata.click). Part 1 covers the platform services, Part 2 covers website visits, and Part 3 explains our use of cookies and local storage.
Personal information means information, recorded in electronic or any other form, that can identify a specific natural person on its own or in combination with other information. Anonymization means processing that makes information incapable of identifying a specific person and impossible to restore.
Google user data disclosure (summary): when you connect a Google Ads account, EasyData accesses only the data you approve on the Google consent screen — your Google account name and email, the Google Ads customer accounts you authorize (including their manager-account hierarchy), campaign names, identifiers and statuses, daily advertising spend and performance metrics, and each account's currency and time zone. We use this data only to provide and improve the advertising-management features you requested; we never sell it, use it for advertising, or train AI or machine-learning models on it; we protect it with encryption in transit, encrypted token storage and role-based access controls; and we retain it only while your authorization is active. Full detail: Section 13 (Google User Data).
2. How We Collect Your Information
We collect information through the following channels:
- Information you actively provide when registering an account, creating a team, or connecting media accounts;
- Data returned through the open interfaces of the media platforms (Meta, TikTok, Google Ads) after you complete their authorization;
- Technical and log information collected automatically when you use the platform.
3. Information We May Collect
Depending on the services you use, we may collect the following categories of information:
| Category | Examples |
|---|
| Account information | Your username, login key (stored only as a salted hash — we never store it in plain text), email address and mobile phone number. |
| Team and role information | Your team membership, the role granted to you (administrator, media buyer, customer service) and the corresponding page and feature permissions. |
| Media account information | After your authorization: ad account identifiers and names, including Google Ads customer accounts and their manager account (MCC) hierarchy, business center structures, account balances, time zones and currencies. |
| Business data | Campaign, ad set and creative structures under authorized accounts, spend and performance metrics, and the settlement and aggregation settings you record in the platform. |
| Log information | IP address, access time, browser and device information, and operation records. |
| Credential information | App IDs / secrets and access tokens of the media applications you authorize (including Google OAuth client credentials and refresh tokens). They are stored encrypted on the server side and displayed as masked values only — no page or log ever shows them in plain text. |
4. Sensitive Personal Information
Sensitive personal information means personal information that, once leaked or used illegally, is likely to cause serious harm to the personal or property safety of a natural person, such as identity documents, biometric information, religious beliefs, specific whereabouts, and information of minors.
The EasyData platform by design does not proactively collect such sensitive personal information. Your login key is stored only as a salted one-way hash; media platform access tokens and similar credentials are stored encrypted on the server side and presented as masked values throughout.
5. How We Use Your Information
We use your information for the following purposes:
| Purpose | Categories involved |
|---|
| Registration, login and identity verification | Account information, log information |
| Media account connection and data synchronization | Authorization information, credential information |
| Data observation, aggregation, analysis and reporting | Media account information, business data |
| Settlement and aggregation management | Business data |
| Service security (access control, risk and anomaly monitoring, brute-force protection) | Account information, log information |
| Product and service improvement, new feature design | Aggregated and de-identified statistics |
| Service notices, announcements and necessary administrative messages | Account and contact information |
If we need to use information for purposes not described above, we will obtain your consent in advance unless otherwise provided by laws and regulations.
6. Legal Bases for Processing
Depending on your jurisdiction, the legal bases on which we process your personal information may include: performance of the service agreement with you; your consent; our legitimate interests in keeping the services secure and preventing fraud; and compliance with legal obligations.
Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal, but may make the related features unavailable.
7. Sharing, Entrusted Processing, Transfer and Public Disclosure
We do not sell your personal information, and we do not share it with third parties for their own marketing purposes. We share, entrust or transfer information only in the following circumstances:
- Entrusted processing — suppliers that provide infrastructure and technical services for us (such as cloud and SMS services) process information only to the extent necessary to deliver the services, under confidentiality and security obligations;
- Media platform authorization chain — after you initiate an authorization, we read advertising data within the authorized scope through the open interfaces of Meta, TikTok and Google Ads; what we transmit to the media platforms is limited to the application identifiers, tokens and query parameters necessary for the API calls;
- Legal obligations — where administrative or judicial authorities lawfully require disclosure;
- Business transactions — in a merger, acquisition, asset transfer or similar transaction, we will require the successor to continue honoring this policy, or seek your consent again.
We do not publicly disclose your personal information in principle. Where public disclosure is genuinely required, we will inform you in advance and obtain your separate consent as required by law.
8. Your Rights
- Access and copy your personal information;
- Correct or supplement inaccurate information;
- Request deletion of your information;
- Withdraw authorizations and consent;
- Cancel your account;
- Obtain a copy of your information in a portable format where supported by law;
- Raise complaints and consult with us.
Some of these rights can be exercised directly in the platform (for example, editing account information or disconnecting a media authorization). Rights that cannot be exercised in the platform can be handled through the contact channels at the end of this policy. Account cancellation is completed after identity verification; afterwards we delete or anonymize your personal information unless retention is required by law.
Regional rights — users in the EEA and the UK may exercise access, rectification, erasure, restriction, portability, objection and withdrawal rights under the GDPR; California residents may exercise the rights to know, delete and opt out of sale or sharing under the CCPA (we do not sell personal information); users in mainland China may exercise access, copying, correction, deletion and withdrawal rights under the Personal Information Protection Law. Where applicable, you may also lodge a complaint with your local data protection supervisory authority.
9. Security of Your Personal Information
- Transport encryption: the entire site is served over HTTPS / TLS;
- Credential protection: login keys stored as salted hashes; media application secrets and access tokens stored encrypted with masked display; configuration files kept under minimum-privilege permissions;
- Access control: page and feature permissions double-checked by team and role; server-side session timeout and login brute-force protection;
- Continuous improvement: audit logging and anomaly monitoring.
Please understand that, due to technical limitations and possible malicious means, the internet industry cannot guarantee information to be one hundred percent secure. We will use reasonable security measures and handle security incidents as required by law.
10. Retention of Information
We retain your personal information only for the shortest period necessary to achieve the purposes described in this policy, unless a longer period is required by law. After the retention period expires, we delete or anonymize the information. When you cancel your account, we stop providing services and handle your information according to the principles above.
11. Protection of Minors
EasyData is provided for business operations and advertising professionals, and is not directed to minors. We do not proactively collect personal information of minors. If you believe we have collected such information by mistake, contact us and we will delete it as soon as possible.
12. Marketing and Promotion
We may send you service notices, system announcements and necessary administrative messages based on your account information. With your consent we may also send product updates and event information; you may opt out at any time through the unsubscribe channel in the message or by contacting customer service.
13. Google User Data (Google Ads API)
EasyData accesses the Google Ads API only when you initiate a media authorization inside the platform and complete the Google OAuth consent, and only within the scopes you approved on the consent screen: https://www.googleapis.com/auth/adwords (read-only advertising-data scope) plus the basic identity scopes openid, email and profile used to identify your Google account. Through this authorization we read and store exactly the following fields, and nothing else: (1) your Google account name and email address as shown on the consent screen; (2) the Google Ads customer accounts you can access, including their manager-account (MCC) hierarchy relationships and each account's currency, time zone and status; (3) campaign names, campaign identifiers and campaign statuses; (4) daily advertising spend, impressions and clicks per campaign per day; and (5) the display name of each account inside our platform. We do not request any other Google scopes, and we do not access Gmail, Google Drive, Google Photos or any other Google product.
We use this data only to provide and improve the user-facing features of the EasyData services described in Section 5 — unified multi-account management, data observation, aggregation, analysis and reporting. We do not sell Google user data, and we do not use or transfer it for targeted advertising, retargeted advertising, interest-based advertising or any user profiling for advertising purposes; we do not sell it to data brokers or information resellers, and we do not use it to determine credit-worthiness or for lending purposes. We do not use it to train or improve generalized AI or machine-learning models, and we do not transfer it to any other application. We do not share, transfer or disclose Google user data to any third party — except processing by the infrastructure service providers bound by confidentiality obligations as described in Section 7.
EasyData's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The full text of that policy is available at https://developers.google.com/terms/api-services-user-data-policy.
You may revoke the Google authorization at any time from the third-party connections page of your Google Account (myaccount.google.com/permissions) or by disconnecting the media application inside the EasyData platform. After revocation we immediately stop reading data through the Google Ads API and delete the stored tokens. To delete business data already synchronized, contact us as described at the end of this policy.
We protect Google user data with administrative, technical and physical safeguards: all data is transmitted over encrypted connections (HTTPS/TLS); OAuth tokens and application secrets are stored only in encrypted form; access to stored data is restricted to authorized personnel on a need-to-know basis under role-based access controls; and we do not browse, copy or export your advertising data except as required to provide and support the services you requested.
We retain Google user data only for as long as your Google authorization remains active and your EasyData account exists, consistent with the business purposes described in this policy. When you revoke the authorization, we delete the stored OAuth tokens immediately; synchronized advertising data is retained within the reports described in Section 10 for the shortest period necessary for those purposes, and is deleted or anonymized when the retention period expires, or earlier upon your verified request submitted through the contact channel at the end of this policy.
Data-handling specifics: advertising metrics and campaign fields are transmitted over encrypted connections to our managed servers, stored in our database, and aggregated into the reports you see inside the platform — campaign names and identifiers label your reports, and MCC hierarchy relationships determine how accounts are organized. Your OAuth tokens are stored only in encrypted form and are used exclusively by our scheduled sync service to read your data. We retain this data for as long as your EasyData account is active; verified deletion requests are processed within 30 days; and when you revoke the authorization, reading stops immediately and the tokens are deleted at once. Google user data is never made available to any other application, and our use of it is limited to providing and improving the user-facing features described in this policy. EasyData does not use Google APIs to generate non-consensual intimate imagery (NCII) or any other prohibited content.
EasyData's access to the Google Ads API is additionally governed by the Google Ads API Terms and Conditions (https://developers.google.com/google-ads/api/docs/api-policy/terms) and the Google Ads API policies (https://support.google.com/adspolicy/answer/6169371), and EasyData operates its API access in compliance with these terms.
1. Introduction
This part applies to the processing of personal information when you visit the EasyData official website (easydata.click). It should be read together with Part 1; where this part is silent, Part 1 applies.
2. Information We Collect on the Website
- Information you actively provide — for example, when you contact us for consultation;
- Device and browsing information — browser type, access time and other aggregated statistics;
- Language preference — stored locally in your browser.
3. How We Use Website Information
We use website information to keep the site available and accurate, to understand aggregate visit patterns, and to respond to your inquiries.
4. Disclosure of Your Information
We do not sell website information. Disclosure is limited to entrusted service suppliers (hosting and infrastructure), circumstances required by law, and the transaction scenarios described in Part 1.
5. International Transfers
Your information may be stored or processed on servers outside your country or region. We apply the encryption and contractual protections required for such cross-border transfers.
6. Your Rights
Your rights over website information are the same as those described in Section 8 of Part 1.
7. Security
The website is served over HTTPS and follows the same security measures described in Section 9 of Part 1, with collection kept to the minimum necessary.
8. Minors
The website is not directed to minors, and we do not knowingly collect information from them.
9. Cookies and Tracking Technologies
The website uses only necessary local storage, such as your language preference. Details are set out in Part 3.
10. External Websites and Links
The website contains links to the EasyData platform and to third parties such as Meta, TikTok and Google. Their websites are governed by their own privacy policies, not by this policy.
11. Copyright and Trademarks
The content and materials of the website are owned by the EasyData operator or the respective rights holders. Trademarks such as Meta, Facebook, Instagram, TikTok and Google belong to their respective owners.
12. Conduct and Termination of Use
Please do not scrape, interfere with or disrupt the website in automated or other improper ways. Against manifest abuse we reserve the right to take technical measures and pursue liability in accordance with law.