Privacy policy

Privacy policy

Last updated: November 3, 2026

Short version: on this website we collect what you type into our form and a note of how you found us. When we manage a business's Google Ads, we handle its account data and information about its leads, and we never store its customers' contact details in readable form. We don't sell personal information. Questions go to hello@squarebracketads.com.

Who we are

Square Bracket Ads is a Google Ads management agency based in Calhoun, Georgia, United States. "We" and "us" in this policy mean Square Bracket Ads.

1. Visitors to this website

What you send us

When you request a free audit we receive your name, business name, email, and anything else you choose to include: phone, trade, ad spend range, website and message. We use it to reply to you and to prepare your review.

How you found us

This site records how a visitor arrived (the ad, search or link, and the landing page) so we can tell which of our own marketing works. That information is attached to a form you send. It is stored in a first-party cookie or your browser's storage on this site only, for up to 90 days.

Site statistics

We count page views in aggregate to see which pages are useful. We do not use advertising cookies on this site.

2. Clients and their customers

When a business hires us, we act on its behalf. The business remains responsible for its own privacy notice to its customers, and we give our clients wording to use.

DataWhyHow long
Google Ads account data (campaigns, keywords, search terms, costs, conversions)To manage and report on the accountWhile we manage the account, then 12 months for reporting history
Lead records: reference number, date, which ad or source, service asked about, status, job valueTo trace leads to ads and report real jobs to GoogleWhile we manage the account
Ad click IDs (such as gclid)To tell Google which ad click became a lead or a jobUp to 100 days
A one-way SHA-256 code of a lead's email or phone, only when the client's site allows itGoogle's matching for conversion measurementUp to 100 days

We never store a client's customers' emails or phone numbers in readable form. For clients in sensitive categories, such as dental or medical practices, we send Google only click IDs and no contact codes at all. If a visitor's browser sends a Global Privacy Control signal, the client's site keeps no ad click ID and sends no contact details.

3. Who processes data for us

  • Google: Google Ads and the Data Manager API, to run ads and measure conversions.
  • AI providers (Anthropic, OpenAI and Google): their models review account performance data, such as search terms, costs and conversion counts, to propose and check changes. They do not receive client customers' names, emails or phone numbers.
  • Our hosting and email providers: to run this site, receive form submissions and send replies.

We do not sell or rent personal information, and we do not share it for anyone else's advertising.

4. Your choices

5. Security

Access to client accounts uses Google's own access controls and can be removed by the client at any time. Our systems keep a tamper-evident log of changes we make. No method of storage or transfer is perfectly secure, and we will tell affected people promptly if a breach affects their information.

6. Children

This site and our services are for businesses. We do not knowingly collect information from children under 13.

7. Changes

If we change this policy, we will update the date at the top. Significant changes will be announced on this page.