Privacy Policy

Last updated: May 2026

At AgencyLens, we take privacy seriously. In this document we explain in plain English what data we collect, what we do with it, and what rights you have.

Who are we?

AgencyLens is a service that helps businesses gain insight into their marketing agency's activity on Google Ads. The legal entity is still being finalized and will be updated here.

What data do we collect?

  • Account data: your email address and company name upon registration.
  • Google Ads data: we read (read-only) the change history of your Google Ads account via the official API. We never make changes to your account.
  • Usage data: basic information about how you use the application (page visits, click behavior) to improve the service.

What do we NOT collect?

  • Plaintext passwords: your password is stored encrypted using bcrypt. We cannot view your password.
  • Credit card details: payments are handled entirely by Stripe. We do not store any payment data.

How do we protect agency employee data?

Email addresses of your agency's employees that appear in the Google Ads change history are pseudonymized. This means we abbreviate names (e.g. “Floris B.”) so that individual employees are not directly identifiable. For comparison and analysis purposes we use hashed versions of email addresses.

Security of OAuth tokens

The OAuth tokens we use to access your Google Ads data are encrypted with AES-256-GCM encryption. They are never stored as plaintext. You can remove the connection at any time with a single click.

Do we share or sell your data?

Three things we will never do:

  • We never sell your data. Not to advertisers, not to data brokers, not to anyone.
  • We never share your identifiable data with third parties. Your campaigns, budgets, performance and change history are visible to you alone. Your agency, your competitors and other AgencyLens customers can never see them.
  • We never modify your Google Ads account. Access is read-only, enforced by automated security tests.

Aggregated statistics (benchmarks)

We may compile aggregated, de-identified statistics across many customers — for example the average number of changes an agency makes per month, or typical management fees at a given spend level. These statistics:

  • never identify you, your company, your campaigns or your specific budgets;
  • are only computed across groups large enough that no individual customer can be derived from them (minimum group size of 20);
  • power features such as industry benchmarks, available to customers who participate.

You can manage your participation in your account settings at any time, without losing any other functionality.

How long do we retain your data?

  • Account and organization data: for as long as you have an active subscription, plus 30 days after cancellation.
  • Google Ads change events:indefinitely while your subscription is active — this is part of the product's value (Google itself retains only 30 days). Deleted within 30 days after cancellation.
  • Agency employee email addresses (hashed): a maximum of 24 months, after which they are automatically pseudonymized with no possibility of reversal.
  • Login/IP logs for security: 90 days.

Sub-processors

We work with the following parties that have (limited) access to data:

  • Google LLC (Google Ads API) — for retrieving Ads data, US with Standard Contractual Clauses
  • Hetzner Online GmbH (hosting) — servers in Germany (EU)
  • Mailgun Technologies, Inc. (transactional email) — EU region, with SCCs
  • Sentry (error tracking) — technical error reports only, no customer data
  • Stripe (payments) — processing of subscription payments (applicable once paid subscriptions are active)

A Data Processing Agreement (DPA) can be requested via privacy@agencylens.io — see also our DPA page.

Your rights (GDPR)

Under the GDPR, you have the following rights:

  • Access: you can request what data we hold about you.
  • Rectification: you can have inaccurate data corrected.
  • Erasure: you can request that all your data be deleted.
  • Portability: you can request an export of your data in a commonly used format.

Contact

Questions about your privacy? Contact us at privacy@agencylens.io.