1. Introduction — Who We Are

This Privacy Policy is issued by At-Sunrice, referred to in this policy as "At-Sunrice", "we", "us" or "our". At-Sunrice is the developer and organisation responsible for Hotpot, an internal analytics and reporting application that includes Google Ads reporting functionality. Hotpot is referred to in this policy as the "Application".

This policy explains what Google user data the Application accesses and how that data is used, stored, shared, protected, retained and deleted. We collect, use and disclose personal data in accordance with the Singapore Personal Data Protection Act 2012 ("PDPA"), other applicable data-protection laws and the Google API Services User Data Policy.

2. Application Scope and Users

The Application is an internal business tool available only to authorised employees, contractors and representatives of At-Sunrice. Access is protected by the organisation's authentication and access-control systems. The Application is not offered to the general public and is not directed at children under 13.

An authorised user may connect a Google Ads account belonging to At-Sunrice so that the Application can retrieve advertising cost and performance information on the organisation's behalf. If a personal Google Account is used to authorise the connection, this policy explains how the relevant Google user data associated with that authorisation is handled.

3. Google User Data We Access

After an authorised user grants permission, the Application accesses Google Ads data through the Google Ads API using the following OAuth 2.0 permission scope: https://www.googleapis.com/auth/adwords.

We may collect or process the following categories of information from authorised Google Ads accounts:

• Google Ads customer identifiers, account names and manager-account relationships used to locate and organise reporting data;
• campaign, ad group, advertisement, asset and keyword information, including names, types, status and structure;
• budgets, bid strategies, advertising costs and spending information;
• performance metrics such as impressions, clicks, conversions, interaction rates and video views;
• reporting dimensions such as geographic location, device, audience segment and network placement, where available; and
• technical service information returned by the Google Ads API, such as timestamps, quota notices and error records required to maintain the connection.

We may also process the name or email address associated with the Google Account that grants authorisation. This information is used to identify and manage approved account connections.

Based on the Application's current functionality and permissions, it does not request access to Gmail, Google Drive, Google Calendar, Google Photos or other