Google Ads Data Processing Terms

These Terms govern how Google Ads handles the personal data Customers provide, requiring Google Ads to use that data only as instructed, delete it within 180 days, and never sell or share it. Customers can appoint an auditor to verify Google Ads' compliance. Importantly, these protections do not cover personal data processed through any Additional Products the Customer uses.

These Data Processing Terms establish Google Ads as a processor of Customer Personal Data, obligating it to process that data only in accordance with applicable law and the Customer's instructions through permitted purposes. The Terms impose a maximum 180-day deletion deadline, a prompt data incident notification obligation, and an absolute prohibition on selling or sharing Customer Personal Data. Google Ads retains full liability for Subprocessors' acts and omissions, and cross-border transfers of Customer Personal Data are authorized across any country where Google or its Subprocessors maintain facilities, subject to transfer solutions required under European Data Protection Legislation. Both parties bear independent compliance obligations under Applicable Data Protection Legislation, and the Terms explicitly do not extend to personal data processed in connection with Additional Products.

For a business customer, this document means Google Ads is contractually bound to process your customer personal data only as you instruct, to delete it within 180 days of the end of the relationship (unless law requires otherwise), and to notify you promptly if a data incident occurs. You retain the right to appoint a third-party auditor to verify Google Ads' compliance with these Terms. Be aware that any personal data you move outside Google's and its Subprocessors' systems loses the protection of these Terms, and any personal data processed through Additional Products is not covered at all.