Privacy Policy

This Privacy Policy explains how Silvix ("Silvix", "we", "us") collects, uses, stores, shares and deletes information when you visit silvix.app, contact us, or connect a Google account to the Silvix advertising tools described below.

Registered address: Suite C, Level 7, World Trust Tower, 50 Stanley Street, Central, Hong Kong Island, Hong Kong. Data protection contact: phuongntt@silvix.app.

1. Scope of this policy

This policy covers:

• visitors to our public website;
• people who contact us by email or phone;
• users who authorise Silvix to access their Google Ads accounts through Google's OAuth 2.0 consent flow ("connected users").

It does not cover the privacy practices of the app stores, advertising platforms or third-party services that operate their own products under their own policies.

2. Website data

Our website is a static site. It sets no advertising or tracking cookies and embeds no third-party analytics or advertising scripts. Our hosting provider processes standard server request data (IP address, user agent, requested URL, timestamp) for the purpose of serving the site, protecting it from abuse and maintaining availability. These logs are retained for a short period by the provider and are not used to build profiles of visitors.

3. Contact data

If you email or call us, we process the contact details and the content of your message to respond, and retain the correspondence for as long as needed for the business relationship, plus any period required by applicable law.

4. Google user data accessed through the Google Ads API

Silvix operates internal advertising measurement and reporting tools that read data from Google Ads accounts. Access is only ever established after the account owner or an authorised account user signs in with Google and grants consent on Google's OAuth consent screen. We never ask for, receive or store Google account passwords.

4.1 Scope requested

We request the Google Ads API scope https://www.googleapis.com/auth/adwords. This is the only Google scope our advertising tools use, and we request no additional scope beyond what the tool's functionality requires.

4.2 What we access

• Account structure and metadata — customer ID, account name, currency, time zone, manager/child account relationships.
• Campaign configuration — campaigns, ad groups, ads, keywords, audiences, budgets, bidding settings and their status.
• Performance and cost metrics — impressions, clicks, cost, conversions, conversion value and related reporting metrics, at the aggregation levels exposed by the Google Ads API.
• OAuth credentials — the refresh and access tokens issued to Silvix for the connected account, plus the email address of the authorising Google account, so that we can identify the connection and keep it working.

We do not access Gmail, Drive, Calendar, Contacts, Photos or any other Google user data, and we do not receive end-user personal data of people who saw or clicked the ads.

4.3 How we use it

• to produce performance dashboards, cost and return-on-ad-spend reports, and alerts for the connected accounts;
• to reconcile advertising spend with attribution and revenue data for our own apps and games;
• to manage or optimise campaigns in the connected accounts where the connected user has explicitly asked us to do so;
• to operate, secure, debug and support the tool itself (for example, diagnosing a failed report run).

We do not use Google Ads API data for advertising targeting outside the connected account, do not sell it, do not use it to build or enrich profiles for unrelated purposes, and do not use it to train generalised artificial intelligence or machine learning models.

4.4 Limited Use disclosure

Silvix's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, data received from Google APIs is:

• limited to providing or improving the user-facing features that are visible in the requesting tool;
• not transferred to third parties except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets after notice to affected users;
• never sold, and never used for advertising purposes outside the source account;
• not read by humans, unless we have the user's explicit consent for specific messages, it is necessary for security purposes such as investigating abuse, to comply with applicable law, or the data is aggregated and de-identified for internal operations.

4.5 Sharing and sub-processors

Google Ads API data is accessible only to Silvix personnel who need it for the purposes above. We use a limited set of infrastructure providers — cloud hosting, managed databases and error monitoring — that process the data solely on our instructions under contractual confidentiality and security obligations. We do not share this data with advertising networks, data brokers or any other third party for their own purposes.

4.6 Storage, security and retention

• OAuth tokens are stored encrypted at rest, with access restricted to the service accounts that need them; all API traffic uses TLS.
• Access to production systems requires individual accounts and multi-factor authentication, and is granted on a least-privilege basis.
• Reporting data is retained only as long as it is needed for the reporting and reconciliation purposes described above, and is deleted or aggregated afterwards.
• When a connection is revoked or deleted, the stored tokens are deleted and no further API calls are made for that account.

4.7 Revoking access and requesting deletion

You can withdraw access at any time:

1. disconnect the account inside the Silvix tool, or revoke Silvix's access from myaccount.google.com/permissions; and/or
2. email phuongntt@silvix.app to request deletion of the data we hold for your account. We confirm deletion within 30 days, except where retention is required by law.

5. Legal bases

Where data protection law such as the GDPR applies, we rely on: your consent for connecting a Google account through OAuth; our legitimate interests in operating, securing and improving our services and in responding to enquiries; contract performance where we provide reporting or campaign management to you; and legal obligation where retention or disclosure is required.

6. International transfers

Silvix operates from Hong Kong and uses infrastructure providers that may process data in other jurisdictions. Where required, such transfers rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses or an equivalent mechanism offered by the provider.

7. Your rights

Subject to applicable law, you may request access to, correction of, deletion of, or a copy of your personal data, object to or restrict certain processing, and withdraw consent. Send requests to phuongntt@silvix.app; we may need to verify your identity or your authority over the Google Ads account concerned.

8. Children

Our website and advertising tools are not directed to children, and we do not knowingly collect personal data from children under 13 (or the higher age of digital consent in your jurisdiction) through them.

9. Changes to this policy

We may update this policy to reflect changes in our practices or in legal requirements. The "Last updated" date above always reflects the current version, and material changes affecting connected users are communicated by email or in the tool.

10. Contact

Silvix — Suite C, Level 7, World Trust Tower, 50 Stanley Street, Central, Hong Kong Island, Hong Kong
Email: phuongntt@silvix.app
Phone: +852 4737 9925

See also our Terms of Service.