DocsLog inGet started

Privacy Policy

This Privacy Policy explains how ИП Котельников Леонид Леонидович (“we”) processes personal data when you use the hosted Kagel service (“Kagel”, the “Service”), which lets you manage and analyse your advertising and analytics accounts through Model Context Protocol clients.

Data controller

ИП Котельников Леонид Леонидович (БИН/ИИН 030306501307), Kazakhstan, Zhetysu region, Koksu district, Balpyk Bi, Satkynova 9. Contact: kotelnikov.l@kagel.cc.

1. Data we process

  • Platform access tokens (Meta, Google, and other platforms you connect via their official OAuth), stored encrypted at rest and isolated per client.
  • Account identifiers (user ids, ad account ids, Page/property ids) needed to route API calls.
  • Advertising and analytics data returned by platform APIs at your request. We do not retain a copy beyond fulfilling your request.
  • Operational logs with all access tokens and secrets redacted.

2. Legal basis (GDPR)

We process your data to perform our contract with you (Art. 6(1)(b)) and on the basis of your consent granted through each platform's login (Art. 6(1)(a)), which you may withdraw at any time by disconnecting the platform or removing the app.

3. California notice (CCPA/CPRA)

We do not sell or share your personal information. California residents have the right to know, delete, and correct their personal information and to non-discrimination for exercising these rights.

4. Your rights

You may request access, correction, deletion, or portability of your data, and may object to or restrict processing. Contact kotelnikov.l@kagel.cc.

5. Retention

Access tokens are kept only while your authorisation is active and are erased when you disconnect a platform, remove the app, or request deletion. Logs are retained for a limited operational period and contain no token material.

6. Deletion

See our Data Deletion Instructions. Removing the app on Meta triggers Meta's deauthorize callback, which erases your stored tokens automatically; disconnecting in the dashboard does the same.

7. Sub-processors

  • Meta Platforms, Inc. — advertising platform you connect to.
  • Google LLC — advertising/analytics platforms you connect to.
  • TikTok (TikTok Technology Limited / ByteDance Ltd.) — advertising platform you connect to.
  • DigitalOcean, LLC — cloud hosting and TLS termination (data center: Frankfurt, Germany; U.S.-headquartered provider).

The Service is used from an AI assistant that you choose and connect (for example Claude by Anthropic, PBC or ChatGPT by OpenAI, L.L.C.). The results of the requests you make are displayed in that assistant conversation and are then processed by that provider under your own agreement with it. We do not send your platform data to any AI provider outside your own session, and we do not use it to train or improve any AI or machine-learning model.

8. Google user data

If you connect a Google account, the Service requests the https://www.googleapis.com/auth/adwords scope (Google Ads) and, for signing in with Google, your basic profile (openid, email address and name).

  • What we access: the Google Ads accounts you can access and their campaigns, ad groups, ads, keywords, budgets, settings and performance metrics; your Google account email and name for sign-in.
  • How we use it: only to provide the features you request inside the Service — showing your Google Ads data and reports, and creating, changing, pausing or resuming campaigns, ad groups, ads, keywords and budgets when you ask for it and confirm the change; linking your ad accounts to the Kagel manager account only when you request it; and, if you enable them, sending you daily summaries and alerts. Every change to your Google Ads accounts is made only on your explicit instruction.
  • Storage: the Google OAuth refresh token is stored encrypted at rest and isolated to your account; we also keep the ids of the Google Ads accounts you connect and their manager-link status. Google Ads reports and campaign data are fetched on request and are not stored beyond fulfilling it.
  • Sharing: we do not sell Google user data and do not use it for advertising or to build user profiles. It is transferred only (a) to the AI assistant you connect, to display the results you requested; (b) to your own Telegram chat, if you enable Kagel notifications; (c) to our hosting provider (DigitalOcean) to run the Service; or (d) when required by law. Humans at Kagel do not read your Google user data unless you ask us to for support, it is needed for security reasons, or the law requires it.
  • Deletion: disconnect Google in the Service or revoke Kagel's access at myaccount.google.com/permissions; the stored token is then deleted. You can also request deletion at kotelnikov.l@kagel.cc.

Kagel's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

9. Meta platform data

If you connect Meta, you sign in through Meta's official login and approve the permissions shown on Meta's consent screen: ads_management, ads_read, business_management, pages_show_list, pages_read_engagement, pages_manage_ads, instagram_basic, leads_retrieval and catalog_management.

  • What we access: the business portfolios, ad accounts, campaigns, ad sets, ads, creatives, audiences, pixels and performance insights you have access to; the Facebook Pages and connected Instagram business accounts you manage, as needed to run ads for them; lead ads forms and the leads they collect; and your product catalogs.
  • How we use it: only to perform what you request in your AI assistant — reports, creating and changing campaigns, ads and budgets after your confirmation, retrieving leads and managing catalogs — on behalf of the business whose assets you connected.
  • Storage and sharing: the Meta access token is stored encrypted at rest and isolated to your account. Meta data is not sold, not used for advertising or to build user profiles, and not used to train AI models. It is transferred only to the AI assistant you connect, to display the results you requested; to your own Telegram chat, if you enable Kagel notifications; to our hosting provider (DigitalOcean) to run the Service; or when required by law.
  • Deletion: remove the app in Facebook Settings & Privacy → Settings → Business Integrations — Meta then calls our deauthorize callback and your stored tokens are erased — or disconnect Meta in the Service, or follow the Data Deletion Instructions.

10. Security

Tokens are encrypted at rest, transmitted over TLS, never written to logs, and isolated per client.

ИП Котельников Леонид Леонидович — last updated 2026-09-30. Contact: kotelnikov.l@kagel.cc