Last updated: 9 March 2026 · Effective: 9 March 2026

ROASt Engine (adportfolio-5loq.onrender.com) is a Google, Microsoft, and Meta Ads portfolio management and budget optimisation tool operated by Tom Johnson (“we”, “us”, “our”). This Privacy Policy explains how we collect, use, store, and protect your data when you use the ROASt Engine service.

By connecting your Google Ads account to ROASt Engine, you consent to the data practices described in this policy. The service is available at roast-engine.com.

1. What Data We Collect

1a. Google Ads Data

When you connect your Google Ads account via OAuth 2.0, ROASt Engine accesses the following data through the Google Ads API:

• Campaign names, IDs, statuses, bid strategies, and daily budgets
• Performance metrics: spend, revenue (conversion value), orders (conversions), impression share, and lost impression share (budget and rank)
• Portfolio budget names and amounts
• Account structure (MCC hierarchy and sub-account names/IDs)

We do not collect personal information about your ad viewers, click-level data, search queries, or any personally identifiable information (PII) from your Google Ads account.

1b. Account and Authentication Data

• Your Google account email address (used to identify your session)
• OAuth 2.0 refresh tokens (used to maintain your Google Ads API connection)

1c. Locally Stored Data

• UI preferences (theme, navigation state, active tab) stored in your browser’s localStorage
• Session cookies for authentication

2. How We Use Your Data

Your Google Ads data is used solely to:

• Display campaign and portfolio performance within the ROASt Engine interface
• Generate budget optimisation recommendations through our rule-based engine
• Compute pacing analysis and performance trends
• Push approved budget and bid target changes back to your Google Ads account — all write operations require your explicit approval before execution. Longer term, we will look to implement scheduled execution.

We do not use your data for advertising, profiling, remarketing, creditworthiness assessment, or any purpose other than providing the ROASt Engine service to you.

3. Google API Services Compliance

3a. OAuth Scope

ROASt Engine requests the following OAuth scope:

• https://www.googleapis.com/auth/adwords — required to read campaign data and push approved budget/target changes

3b. Limited Use Disclosure

ROASt Engine’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Limited to providing user-facing features: Google Ads data is used only to power the campaign dashboard, optimisation engine, pacing analysis, and budget recommendations visible within the ROASt Engine interface.
• No third-party transfers except as necessary to provide the service: We do not sell, rent, or share your Google Ads data with any third parties, except as described in Section 4 (AI Processing) where aggregated, non-PII campaign metrics may be sent to an AI sub-processor solely to generate optimisation insights displayed within ROASt Engine.
• No use for advertising: We do not use your Google Ads data to serve ads, including retargeting, personalised, or interest-based advertising.
• No use for AI/ML model training: Your Google Ads data is never used to train, improve, or fine-tune generalised or foundational AI/ML models. Any AI processing is limited to generating personalised, per-session insights for your account only.
• Restricted human access: We do not allow humans to read your Google Ads data unless (a) you have given affirmative consent (e.g. for technical support), (b) it is necessary for security purposes such as investigating a bug or abuse, (c) it is required to comply with applicable law, or (d) the data is aggregated and anonymised for internal operations.

4. Data Sharing and Sub-Processors

4a. General Position

We do not sell, rent, or share your Google Ads data with any third parties. Your data is only accessible to:

• You, through the ROASt Engine interface
• Our server, for processing optimisation calculations and syncing with Google Ads

4b. AI Processing

ROASt Engine includes an optional AI-powered chat feature. When you use this feature, aggregated campaign performance metrics (spend, revenue, ROAS, impression share) may be sent to Anthropic’s API to generate optimisation insights. These requests:

• Contain no personally identifiable information
• Contain no Google account credentials or OAuth tokens
• Are processed in real-time and not retained by the sub-processor for model training
• Are used solely to generate responses displayed within the ROASt Engine interface

4c. Infrastructure

ROASt Engine is hosted on Render.com (US-based cloud infrastructure). All data in transit is encrypted via HTTPS. See Section 7 (Security) for details.

5. Data Storage and Retention

• Campaign and portfolio data: Stored in a SQLite database on our server. Retained for the duration of your account connection.
• OAuth refresh tokens: Stored server-side (never exposed to the browser). Deleted when you disconnect your account.
• Optimisation logs: Budget and target change records are retained for up to 24 months for audit and performance-tracking purposes, or until account deletion, whichever comes first.
• UI preferences and session data: Stored in your browser’s localStorage. You can clear these at any time through your browser settings.

Data deletion: You can delete all synced data at any time by disconnecting your Google Ads account from the Accounts tab. This removes all campaign data, portfolio configurations, optimisation logs, and stored OAuth tokens from our server.

6. Cookies and Tracking

ROASt Engine uses the following browser storage:

• Session cookie: A single HttpOnly, SameSite=Strict cookie with 24-hour expiry, used for authentication. This is a strictly necessary cookie.
• localStorage: Used to persist UI preferences (theme, navigation state, column visibility). Contains no personal data or Google Ads data.

ROASt Engine does not use:

• Third-party cookies
• Analytics or tracking scripts (e.g. Google Analytics, Facebook Pixel)
• Advertising cookies or retargeting pixels
• Browser fingerprinting

7. Security

• All communication between your browser and our server uses HTTPS (TLS) encryption
• OAuth tokens are stored server-side and never exposed to the browser or client-side code
• Session cookies are HttpOnly, SameSite=Strict, with 24-hour expiry
• Sensitive operations (sync, push, execute) require authenticated sessions
• Google Ads API credentials (developer token, client ID, client secret) are stored as encrypted server-side environment variables and are never committed to source code
• The application codebase is version-controlled on GitHub with no secrets in the repository

7a. Incident Response

In the event of a data breach affecting your Google Ads data or account credentials, we will:

• Notify affected users within 72 hours of becoming aware of the breach
• Provide details of the data affected and the steps we are taking to remediate
• Report the breach to relevant authorities where required by applicable law (including the ICO under UK GDPR)

8. Your Rights

You can at any time:

• Revoke access: Disconnect your Google Ads account from the Accounts tab, or revoke ROASt Engine’s access directly from your Google Account permissions
• Delete data: Disconnecting removes all synced campaign data, optimisation logs, and OAuth tokens from our server.
• Export data: Use the Export CSV features in the Portfolios, Campaigns, and Optimiser Logs tabs to download your data.
• Access your data: Contact us to request a copy of all data we hold about your account.
• Rectification: Contact us to request correction of any inaccurate data we hold.
• Object to processing: You may object to any processing of your data by disconnecting your account.

8a. Legal Basis for Processing (UK GDPR / EU GDPR)

We process your Google Ads data under the following legal bases:

• Performance of a contract: Processing is necessary to provide the ROASt Engine service you have signed up to use.
• Legitimate interest: Processing aggregated, anonymised usage data to improve the service, provided this does not override your rights and freedoms.
• Consent: You provide explicit consent when connecting your Google Ads account via OAuth. You may withdraw consent at any time by disconnecting your account.

9. Children’s Privacy

ROASt Engine is a business-to-business tool designed for professional advertisers and agencies. The service is not directed at children under the age of 16 (or 13 where applicable). We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. If we make material changes to how we use your Google Ads data, we will notify you via the ROASt Engine interface and prompt you to consent to the updated policy before continuing to use your data in any new way.

We encourage you to review this page periodically. The “Last updated” date at the top indicates when the policy was most recently revised.

11. Contact

For privacy questions, data access requests, or concerns about how we handle your data, contact us at:

• Email: tomjohnsonads91@gmail.com
• Operator: Tom Johnson
• Website: adportfolio-5loq.onrender.com

If you are located in the UK or EU and are unsatisfied with our response to a privacy concern, you have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner’s Office (ICO).

Last updated: 10 March 2026 · Effective: 10 March 2026

These Terms of Service (“Terms”) govern your use of ROASt Engine (adportfolio-5loq.onrender.com), a Google, Microsoft, and Meta Ads portfolio management and budget optimisation tool operated by Tom Johnson (“we”, “us”, “our”). By accessing or using ROASt Engine, you agree to be bound by these Terms. If you do not agree, you must not use the service.

1. Service Description

ROASt Engine is a software-as-a-service (SaaS) tool that helps digital advertisers and agencies manage Google Ads campaign portfolios, generate budget optimisation recommendations, and execute approved budget and bid target changes via the Google Ads API. The service includes:

• Portfolio-level budget management and campaign grouping
• Automated budget optimisation recommendations via a rule-based engine
• Budget pacing analysis and performance tracking
• Budget modelling and revenue projection tools
• Execution of approved budget and bid target changes to connected advertising accounts

2. Eligibility

To use ROASt Engine, you must:

• Be at least 18 years of age
• Have the legal authority to accept these Terms
• Be an authorised user of any Google Ads, Microsoft Ads, or Meta Ads accounts you connect to the service
• Comply with the advertising platform’s own terms of service for any connected accounts

3. Account Connection and Authentication

ROASt Engine uses OAuth 2.0 to connect to your Google Ads account. By connecting your account, you:

• Grant ROASt Engine read access to your campaign data, performance metrics, and account structure
• Grant ROASt Engine write access to modify campaign budgets and bid targets when you explicitly approve changes
• Acknowledge that you may revoke access at any time through the ROASt Engine Accounts tab or your Google Account permissions

You are responsible for maintaining the security of your Google Ads account credentials. ROASt Engine does not store your Google password.

4. User Responsibilities

When using ROASt Engine, you agree to:

• Review recommendations before execution: All budget and bid target changes generated by the optimisation engine are recommendations only. You must review and explicitly approve all changes before they are pushed to your advertising accounts.
• Monitor your accounts: ROASt Engine is a tool to assist your advertising management. You remain responsible for the performance and compliance of your advertising campaigns.
• Use the service lawfully: You must not use ROASt Engine to violate any applicable law, regulation, or the terms of service of any connected advertising platform.
• Provide accurate information: Any information you provide to ROASt Engine must be accurate and up to date.
• Not reverse-engineer: You must not attempt to reverse-engineer, decompile, or extract the source code of ROASt Engine’s proprietary algorithms or optimisation engine.

5. Data Handling

Your data is handled in accordance with our Privacy Policy. Key points:

• Your Google Ads data is used solely to provide the ROASt Engine service
• We do not sell, rent, or share your data with third parties
• All data is encrypted in transit via HTTPS
• You can delete all your data at any time by disconnecting your account

Our use of Google Ads data complies with the Google API Services User Data Policy, including the Limited Use requirements.

6. Intellectual Property

All intellectual property rights in ROASt Engine — including the software, design, algorithms, optimisation engine, and documentation — are owned by us. These Terms do not grant you any rights to our intellectual property except the limited right to use the service in accordance with these Terms.

Your advertising data remains your property. We claim no ownership over any data you provide or that is accessed through your connected advertising accounts.

7. Service Availability

• We aim to provide reliable service but do not guarantee 100% uptime or uninterrupted access
• The service may be temporarily unavailable due to maintenance, updates, or circumstances beyond our control
• We reserve the right to modify, suspend, or discontinue any part of the service with reasonable notice
• Features described as “coming soon” or in development are not guaranteed to be delivered

8. Disclaimers

ROASt Engine is provided “as is” and “as available” without warranties of any kind, whether express, implied, or statutory. We specifically disclaim:

• No guarantee of results: Budget optimisation recommendations are generated by automated algorithms based on historical data. We do not guarantee that following recommendations will improve your advertising performance, revenue, or return on ad spend.
• No financial advice: ROASt Engine does not provide financial, investment, or professional advertising advice. Recommendations are computational suggestions based on your campaign data.
• Third-party dependencies: ROASt Engine depends on third-party APIs (Google Ads, Microsoft Ads, Meta Ads). We are not responsible for changes to, outages of, or errors caused by these third-party services.

9. Limitation of Liability

To the maximum extent permitted by applicable law:

• We shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of ROASt Engine
• We shall not be liable for any loss of revenue, profit, data, or business opportunity resulting from budget changes executed through ROASt Engine, whether or not such changes were recommended by our optimisation engine
• Our total aggregate liability for any claims arising from or related to these Terms or the service shall not exceed the amount you paid us for the service in the 12 months preceding the claim, or £100, whichever is greater

Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law, including liability for death or personal injury caused by negligence, fraud, or fraudulent misrepresentation.

10. Termination

• By you: You may stop using ROASt Engine at any time by disconnecting your advertising accounts. This will delete all synced data from our servers.
• By us: We may suspend or terminate your access to ROASt Engine if you breach these Terms, use the service in a way that could harm other users or the service, or if required to do so by law.
• Upon termination, your right to use the service ceases immediately. We will delete your data in accordance with our Privacy Policy.

11. Changes to These Terms

We may update these Terms from time to time. If we make material changes, we will notify you through the ROASt Engine interface. Your continued use of the service after changes are posted constitutes acceptance of the revised Terms.

We encourage you to review these Terms periodically. The “Last updated” date at the top indicates when these Terms were most recently revised.

12. Governing Law

These Terms are governed by and construed in accordance with the laws of England and Wales. Any disputes arising from or in connection with these Terms or the use of ROASt Engine shall be subject to the exclusive jurisdiction of the courts of England and Wales.

13. Contact

For questions about these Terms, contact us at:

• Email: tomjohnsonads91@gmail.com
• Operator: Tom Johnson
• Website: adportfolio-5loq.onrender.com