Data Processing Agreement
How we handle your data as a processor.
Last updated: January 2026
This Data Processing Agreement ("DPA") forms part of the agreement between you and ppcopilot. It describes how we process personal data on your behalf when you use our service.
This DPA is designed to help you meet your GDPR and other data protection obligations when using ppcopilot.
Roles and responsibilities
You are the Controller
You (the customer) are the data controller. You decide what data to share with ppcopilot and how your client data should be handled.
We are the Processor
ppcopilot acts as a data processor. We process your Google Ads data only according to your instructions and for the purposes described in our agreement.
Processing purposes
We process your data solely to provide the ppcopilot service: generating weekly recommendations and client-ready reports based on your Google Ads account data.
Sub-processors
Current sub-processors
We use a limited number of sub-processors to provide the service. All sub-processors are bound by data protection requirements equivalent to this DPA.
Sub-processor list
Cloud hosting: [Provider name - placeholder] Analytics: [Provider name - placeholder] Email delivery: [Provider name - placeholder] Contact us for the current list of sub-processors.
Changes to sub-processors
We will notify you of any changes to our sub-processors at least 30 days before the change takes effect, giving you time to object if needed.
Security measures
Data protection
We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews.
Access controls
Access to your data is limited to authorized personnel who need it to provide the service. All access is logged and monitored.
Incident response
We have procedures in place to detect, respond to, and report data breaches. We will notify you of any breach affecting your data within 72 hours of becoming aware.
Data subject rights
We will assist you in responding to requests from data subjects exercising their rights under GDPR (access, rectification, erasure, portability, etc.).
If we receive a request directly from a data subject, we will promptly notify you and await your instructions before responding.
Data deletion
Upon termination of your subscription or upon your request, we will delete all personal data we process on your behalf within 30 days, unless we are required by law to retain it.
You can request immediate deletion at any time by contacting us.
Questions?
If you have any questions about this DPA or our data processing practices, please contact us:
Email: legal@ppcopilot.com
For security-related questions, please email security@ppcopilot.com