1. Who we are and what the app does

Veltrus is a revenue operations company. We provide paid media operations, first-party tracking, identity/attribution, and journey tooling for business clients.

The OAuth application Veltrus (Google Cloud / Google Auth Platform, project Veltrus Ads API) requests Google authorization so that an account administrator can allow Veltrus operators and systems to read and manage Google Ads resources on behalf of that account — campaigns, ad groups, ads, keywords, budgets, assets, conversions, and reports.

Spend-changing actions are designed to require human approval in our operational workflow. The website at veltrus.com.br is a public institutional site: it does not require a login to view information about Veltrus or this application.

Veltrus does not use Google APIs to create, generate, host, or distribute AI-generated Non-Consensual Intimate Imagery (AI NCII).

2. Personal data we collect

Depending on how you interact with us, we may process:

• Business contact data — name, email address, company, and message content when you email contato@veltrus.com.br or use a contact form we publish.
• Website technical data — IP address, user-agent, referrer, requested URLs, timestamps, and security logs provided by our hosting provider (Vercel) for delivery, abuse prevention, and diagnostics.
• Google OAuth identity and tokens— when you (or your organization's Google Ads administrator) grant consent, Google provides OAuth access tokens, refresh tokens, and related account identifiers required to call the Google Ads API under the scopes shown on Google's consent screen.
• Google Ads account data accessed via API — campaign structure, creatives/assets metadata, bids and budgets, performance metrics, conversion settings, and similar advertising configuration/reporting data strictly for the authorized customer IDs.
• Operational audit data — logs of API calls, approvals, and mutations performed by our gateways for security and accountability.

We do not sell personal data. We do not use Google user data for advertising personalization unrelated to the contracted Google Ads operation.

3. How we use data (purposes)

• Respond to sales and support requests.
• Authenticate to Google and operate Google Ads accounts that the customer authorized (view, create, update, pause/enable entities, report).
• Enforce human-in-the-loop approval for spend mutations where our product requires it.
• Provide security monitoring, fraud/abuse prevention, troubleshooting, and service reliability.
• Comply with legal, tax, and contractual obligations.

4. Google OAuth, scopes, and Limited Use

The Veltrus OAuth client typically requests the Google Ads API scope https://www.googleapis.com/auth/adwords (and any additional scopes explicitly shown at consent time).

• Consent is always collected on Google's official OAuth consent screen.
• Access and refresh tokens are stored in Veltrus-controlled infrastructure (servers / gateways) with restricted operator access.
• You may revoke access at any time in Google Account → Security → Third-party access.
• Use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Google user data obtained via OAuth/API is used only to provide or improve user-facing features that are prominent in the requesting application's user interface related to Google Ads management for the authorizing customer — not for unrelated profiling or sale.

5. Sharing and processors

We may share data only with:

• Infrastructure processors needed to run the service (for example Vercel for hosting, Hostinger for email hosting), under confidentiality and necessity constraints.
• Google, to the extent required by OAuth and the Google Ads API themselves.
• Professional advisors or authorities when legally required.
• The customer organization that owns the Google Ads account, as part of delivering the contracted service.

6. Retention

We retain personal and account operational data for the duration of the commercial relationship, while OAuth tokens remain valid and needed for service, or for longer when required by law, dispute resolution, or security investigations — whichever is longer. After that period we delete or anonymize the data.

When a customer revokes OAuth access or ends the contract, we stop new API access and schedule token invalidation/deletion according to our offboarding process.

7. Your rights

Depending on applicable law (including Brazil's LGPD), you may request confirmation of processing, access, correction, anonymization, portability, information about sharing, and withdrawal of consent where consent is the legal basis. Contact contato@veltrus.com.br. We will respond within the legal timeframe.

8. Cookies and analytics

The institutional website may use strictly necessary cookies for delivery and security. Marketing analytics cookies, if enabled later, will be disclosed on this page before use on the indexed production site.

9. Security

We apply reasonable administrative and technical controls (HTTPS, credential segregation, least privilege, audit logs). No system is perfectly secure; if a relevant incident occurs we will notify as required by law.

10. Children

Our services are directed to businesses and professionals. We do not knowingly collect personal data from children.

11. International transfers

Infrastructure providers may process data in regions outside Brazil (for example cloud regions used by Vercel). We rely on contractual and technical safeguards appropriate to the transfer.

12. Changes

We may update this policy. The date at the top is the current version. Material changes will be posted on this page and, when appropriate, communicated by email.

13. Contact

Privacy questions: contato@veltrus.com.br
Website (no login required): https://veltrus.com.br
Application purpose (public): https://veltrus.com.br/#google-apis

Política em português (resumo)

A Veltrus trata dados de contato, logs técnicos do site e, quando autorizado via OAuth, tokens e dados de contas Google Ads para operar a Google Ads API em nome do cliente. Não vendemos dados. Não usamos APIs Google para AI NCII. Escopo típico: https://www.googleapis.com/auth/adwords. Revogação: Conta Google → Segurança → Acesso de terceiros. Contato: contato@veltrus.com.br.

Falar com a Veltrus →