andluck privacy policy
Effective date: September 16, 2026
andluck is a research and planning tool used by its operator to evaluate software business ideas. This policy describes the tool's Google Ads integration and its application information website at andluck.com.
Information accessed
The Google Ads integration accesses account identifiers and basic account information, including account status, account type, and currency, to verify access and interpret research results. It is being extended to request aggregate keyword-planning data, including search-volume estimates, historical trends, competition, and bid estimates, after the required API access is approved.
The operator supplies keywords, locations, languages, and date ranges for research. Requests are sent to Google or, for research run through DataForSEO, to DataForSEO. Aggregate keyword metrics do not identify individual people who searched for a term. andluck does not request visitors' Google search histories, Gmail, Drive files, contacts, or access to their Google Ads accounts.
The current integration uses an operator-configured service account. Its private key is stored in private operator-controlled configuration. Short-lived access tokens are used to authenticate API requests and are not saved in research reports or response caches.
Use of information
Account information is used to establish authorized access, select the account context, and interpret monetary estimates. Research information is used to evaluate demand, compare economic scenarios, plan possible acquisition tests, and explain conclusions to the operator. The current Google integration only reads data.
If you contact the operator, your email address and message are used to respond and resolve your request.
Storage and retention
Research requests, response snapshots, retrieval dates, and reports are retained in operator-controlled files to reproduce findings and avoid unnecessary repeat requests. Account-check responses may also be retained for setup and troubleshooting. Credentials and authorization headers are excluded from those research records.
Research records currently have no automatic expiration. The operator reviews removal requests individually. Revoking account access stops future authorized API access but does not automatically erase previously retained records. Removal from backups or historical copies requires separate handling.
Access and sharing
The operator and service providers used to run the tool may process information needed for its operation. These include hosting and storage services, Google for API requests, DataForSEO for requests sent through that provider, email services for correspondence, and operator-authorized AI services used to analyze research and produce reports. Google credentials are not sent to DataForSEO or included in material prepared for AI analysis. andluck does not sell Google account data or use it to build advertising profiles of individuals. Aggregated research conclusions may inform product or acquisition plans.
Website information
These pages do not ask visitors to sign in to Google or connect an Ads account, and they use no cookies or analytics. The web server may record standard request information, such as IP address, browser user agent, requested page, and time, for security and troubleshooting.
Controls and contact
The operator can stop Google access by removing the service account's permission in Google Ads or disabling its credentials. If user OAuth is introduced, Google account holders will also be able to revoke the application's grant in their Google Account permissions settings.
For questions about data use, access, or removal, contact support@andluck.com.
Changes
This page will be updated when the tool's data practices change. The effective date identifies the version. New uses of Google data will be disclosed before they begin, with additional consent where required.