1. Overview
Corestool ("Corestool," "we," "our," or "us") operates corestool.com and the company-operated Corestool Ads Operations Platform. This policy explains what information may be processed when you visit the public website, contact us or use the internal platform as an authorized Corestool user.
2. Information we receive
Information you choose to provide
If you email us, we receive the information included in your message, such as your email address, name, company, project details and any files or other information you choose to send.
Basic technical information
We do not use advertising trackers or third-party behavioral analytics. Our hosting provider may process limited technical and performance data—such as IP address, browser type, requested URL, request time and page performance—as necessary to operate, secure, deliver and monitor the website.
3. Google Ads API data
Access and data categories
The Corestool Ads Operations Platform connects to the Google Ads API through OAuth 2.0 using company-controlled credentials with access limited to approved Google Ads accounts managed under Corestool's manager-account hierarchy. Depending on an authorized workflow, the platform may access customer and resource identifiers, account hierarchy, campaign settings, budgets, bids, ads, keywords, keyword-planning results, policy status and performance metrics such as impressions, clicks, cost and conversions.
Purpose and use
Google Ads data is used only for authorized internal advertising operations: researching keyword ideas, preparing and managing supported Search campaigns, reviewing performance and policy status, reconciling approved changes, controlling quota use and maintaining audit evidence. The current platform does not use Customer Match, personal audience lists, enhanced conversions, offline conversion uploads or the App Conversion Tracking and Remarketing API.
Storage, retention and deletion
Google Ads remains the system of record. We retain only the minimum operational cache and change evidence needed for workflow, reporting, security, reconciliation and legal or business record requirements. Operational data is refreshed or deleted when no longer needed or when account access is removed, subject to required audit retention. Credentials are stored separately in a managed secrets system and are not included in application logs.
Sharing and control
We do not sell, license or redistribute Google Ads data, and the internal platform is not accessible to clients or unrelated third parties. Service providers may process limited data only where necessary to securely host, protect and operate the platform and subject to appropriate obligations. An authorized Google Ads administrator can remove the platform's account access, and privacy or deletion questions may be submitted to [email protected].
4. How we use information
We use information we receive to:
- respond to inquiries and provide requested support;
- understand potential projects and communicate about our services;
- protect the security, integrity and availability of our website; and
- meet legal obligations and enforce applicable agreements.
5. Sharing and selling
We do not sell personal information. We may share limited information with service providers that help us operate our communications and website, when required by law, or when necessary to protect rights and safety. Service providers may process information only for the relevant service and subject to appropriate obligations.
6. Retention and security
We keep correspondence only for as long as reasonably needed for the purpose it was collected, legitimate business records and applicable legal requirements. We use reasonable administrative and technical safeguards, but no online transmission or storage method can be guaranteed to be completely secure.
7. International processing
Because Corestool works with people and service providers across the globe, information may be processed outside your country. Where required, we use appropriate measures for international data transfers.
8. Your choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction or portability of your personal information, or to object to certain processing. To make a request, email [email protected]. We may need to verify your request.
9. Children’s privacy
This website is intended for a general business audience and is not directed to children under 13 or the minimum age required by local law. We do not knowingly collect personal information from children through this website.
10. Changes to this policy
We may update this policy as our practices or legal requirements change. We will post the revised version here and update the date at the top of the page.
11. Contact
For privacy questions or requests, contact Corestool at [email protected] or Room 406/F, Ho King Commercial Centre, No. 2-16 Fa Yuen Street, Mong Kok, Hong Kong.