Internal tooling operated by InteliArt Online Marketing Kft.

Privacy Policy

Effective date: 4 September 2026

This policy describes what data the internal MCP services at *.mcp.iaom.hu access, why, and what happens to it.

1. Who operates these services

Operator	InteliArt Online Marketing Kft.
Website	https://inteliart.hu
Contact	hosting@inteliart.hu

The services are internal tools for the company's own staff. They are not offered to the public and have no public registration.

2. What data we access

Google account information

When you sign in, we receive your Google account identifier, email address and basic profile information (scopes openid, userinfo.email, userinfo.profile). This is used solely to identify you as an authorised user and to attach your session to your own Google Ads access.

Google Ads data

With your consent (scope https://www.googleapis.com/auth/adwords) the service reads advertising data from the Google Ads accounts you are already entitled to access — for example campaign, ad group, keyword and search term performance, spend, budgets and conversion metrics. Data is fetched on demand, in response to a specific request you make, and returned into your own session.

The service performs read operations only. It does not create, modify, pause or delete anything in your Google Ads accounts, and it does not upload data to them.

3. What we store

Authentication tokens. Your OAuth refresh and access tokens are stored on our own server, encrypted at rest, so that you do not have to sign in again for every request. They are never written to logs and never leave that server.
Reporting data. Not retained. Advertising data is processed transiently to answer a request and is not written to a separate database, data warehouse or analytics system by these services.
Server logs. Standard web-server access logs (timestamp, request path, status code, client IP) are kept for operations and security purposes, on a rolling basis, and are automatically rotated. They do not contain advertising data or tokens.

4. How the data is used

Exclusively to answer the reporting requests made by the authorised user who is signed in. We do not sell data, do not share it with third parties, do not use it for advertising, and do not use it to train machine-learning models.

The reporting request and its results are processed by the AI assistant the user has connected to the service (Anthropic Claude), because that is the interface through which the user asks the question and receives the answer. No other third party receives the data.

5. Limited Use disclosure

These services' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

6. Where the data is processed

The services run on infrastructure operated by InteliArt Online Marketing Kft. in Hungary (European Union). All traffic to the services is encrypted with HTTPS. The application containers are reachable only through the company's reverse proxy; they are not exposed directly to the internet.

7. Your choices

You can withdraw the service's access to your Google account at any time at myaccount.google.com/permissions. Doing so immediately prevents any further access to your data.
You can ask us to delete your stored authentication tokens by writing to hosting@inteliart.hu.
As these services are internal tools for staff, the usual employment-context data protection rights (access, rectification, erasure, restriction, objection) apply and can be exercised at the same address.

8. Retention

Authentication tokens are kept while your access is active, and are deleted when your access is revoked or on request. Server logs are rotated automatically and retained for at most 30 days. Advertising data is not retained at all.

9. Changes to this policy

If we change how these services handle data, we will update this page and the effective date above.

10. Contact

Questions about this policy: hosting@inteliart.hu.