运营主体与适用范围Who operates this app
本政策适用于神灯 AI 投放工作台（Magic Google Ads），运营主体为深圳市神灯资讯有限公司。Google 授权页面显示的应用名称为“神灯 AI 投放工作台”。本政策说明本应用的账号、Google Ads 及 AI 功能所涉及的数据处理，不替代公司官网其他业务的隐私政策。
This policy applies to Magic Google Ads, displayed as “神灯 AI 投放工作台” on Google's consent screen, and operated by 深圳市神灯资讯有限公司. It covers the app's accounts, Google Ads integration and AI features. Other corporate website services are covered separately.
收集与处理的数据Data we access and process
平台账号与服务数据：登录邮箱、姓名、角色、所属或获分配的客户工作区、服务设置、登录会话及必要操作记录。登录密码以散列形式保存。
Platform and service data: login email, name, role, assigned client workspaces, service settings, sessions and operational records. Login passwords are stored as hashes.
Google 账号身份：经你授权获取并保存 Google 邮箱、稳定账号 ID 和邮箱验证状态，用于显示实际授权账号、区分连接及核对重新授权。
Google account identity: with your consent, we retrieve and store your Google email, stable account ID and email verification status to identify the authorized account, distinguish connections and verify reconnections.
Google Ads 数据：经授权可访问的广告账户和经理账户关系、账户标识、币种与时区、广告系列和广告组、广告素材、关键词及否定词、预算、投放地区、已有转化目标、可获取的关键词规划指标、广告成效和搜索词。为持续连接账户，系统保存 Google OAuth 授权凭据。
Google Ads data: authorized advertising and manager account relationships, account identifiers, currency and time zone, campaigns, ad groups, ad copy, keywords and negative keywords, budgets, locations, existing conversion goals, available Keyword Planner metrics, performance and search terms. Google OAuth credentials are stored to maintain the authorized connection.
你提供的资料与生成记录：产品网址、产品与采购客户说明、目标国家和语言、预算要求、公开网页文字及来源链接，以及广告草稿、修改版本、AI 生成结果、优化建议和发布同步记录。
Your inputs and generated records: product URLs, product and buyer descriptions, target countries and language, budget requirements, public webpage text and source links, drafts, revisions, AI outputs, recommendations, publication and synchronization records.
Google 权限与使用目的Google authorization and purposes
本应用请求 https://www.googleapis.com/auth/adwords 权限，用于发现已授权账户、查询关键词规划和成效、创建或修改搜索广告及预算、暂停或开启广告。Google Ads 使用该权限支持这些读写操作；实际操作同时受授权账号权限、工作区分配和 Google API 访问级别限制。
The app requests https://www.googleapis.com/auth/adwords to discover authorized accounts, retrieve keyword and performance data, create or update Search ads and budgets, and pause or enable campaigns. Google Ads uses this scope for these read/write operations. Account permissions, workspace assignments and Google API access levels also limit what is available.
本应用还请求 openid 和 email 基本身份权限，以显示对应的 Google 账号。旧连接需要由账号本人重新授权后才能补充身份信息。
The app also requests the openid and email identity scopes to display the connected Google account. Existing connections require the account owner to reauthorize before identity details become available.
管理员通过 Google OAuth 连接有权管理的账户，再分配给对应客户。用户核对账户、地区、文案与预算后确认广告变更；AI 建议不会自行执行。系统不请求 Gmail、Google Drive 或通讯录权限。
An administrator connects accounts they are authorized to manage through Google OAuth and assigns them to clients. Users review the account, targeting, copy and budget before confirming changes. AI recommendations do not execute themselves. The app does not request Gmail, Google Drive or contacts access.
Google 用户数据用于本应用中用户可见的账户管理、广告操作、关键词研究、报告与所选 AI 功能。我们不出售 Google 用户数据，不向数据经纪商提供这些数据，也不将其用于为其他客户建立独立数据产品。
Google user data supports the app's user-facing account management, advertising operations, keyword research, reporting and selected AI features. We do not sell Google user data, supply it to data brokers or use it to build independent data products for other clients.
本应用对从 Google API 接收的信息的使用和传输遵循 Google API Services User Data Policy，包括适用的 Limited Use 要求。
Magic Google Ads's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements.
AI 与第三方数据共享AI and third-party processing
Google：接收用户确认的广告操作请求，并提供账户、关键词和成效数据。广告审核、投放及 Google 侧数据处理由 Google 负责。
Google receives user-confirmed advertising requests and provides account, keyword and performance data. Google is responsible for ad review, delivery and its own processing of data.
DeepSeek API：仅在用户触发 AI 任务时调用。生成广告方案会发送填写的投放需求、网页事实、可获取的 Google 关键词规划数据及已选关键词；优化建议会发送所选广告的配置、最近至多 30 条按日成效记录和至多 200 条可获取搜索词。返回结果用于当次方案或建议。
DeepSeek API is called when a user starts an AI task. Ad generation sends campaign requirements, webpage evidence, available Google keyword-planning data and selected keywords. Optimization sends the selected campaign configuration, up to 30 recent daily performance records and up to 200 available search-term records. Responses are used for the requested plan or recommendations.
Google OAuth 令牌、平台登录密码及 AI 密钥不作为提示词发送。AI 密钥仅用于服务请求鉴权。本应用没有训练模型的功能；第三方服务的数据处理与留存受其适用条款及 API 服务约定约束，本政策不代表第三方作出零留存承诺。
Google OAuth tokens, platform passwords and AI keys are not included in model prompts. The AI key is used only to authenticate service requests. The app has no model-training function. Third-party processing and retention are governed by the applicable provider terms and API service agreement; this policy does not promise zero retention by a provider.
调用前，请阅读功能附近的数据提示。你可不使用 AI，选择手动编辑和管理广告。请勿在输入中加入密码、支付信息或与广告业务无关的个人敏感信息。授权的总账号管理员可在其工作权限范围内处理支持与故障排查所需的数据。
Read the data notice beside the feature before calling AI. You can manage and edit ads manually without using AI. Do not enter passwords, payment details or unrelated sensitive personal information. Authorized administrators may access data necessary for support and troubleshooting within their assigned permissions.
保存位置与安全措施Storage and security
账号、工作区、广告和操作记录保存在本系统数据库中。Google 授权凭据与 AI 密钥由服务端加密保存；平台登录密码使用散列校验。访问控制按总账号、客户账号角色及工作区分配执行。
Account, workspace, advertising and operational records are stored in the app's database. Google credentials and AI keys are encrypted server-side, and login passwords are verified using hashes. Access is controlled by administrator and client roles and workspace assignments.
系统通过 HTTPS 调用 Google 和 DeepSeek 接口。公开说明页面和投放工作区是不同的访问入口；阅读本政策不需要连接 Google 账户或授予广告权限。
The app calls Google and DeepSeek APIs over HTTPS. Public information pages and the advertising workspace are separate access points. Reading this policy does not require connecting a Google account or granting advertising permissions.
在工作台解除授权Disconnecting in the workspace
管理员可在 Google 账户页确认影响范围后解除授权。本地立即停止使用该连接并取消尚未执行的任务；Google 确认撤销后清除保存的凭据。网络异常时保留加密凭据用于重试，并显示结果待确认。同一 Google 项目的其他连接也可能受撤销影响。历史账号、草稿、报告和操作记录仍按保留政策管理；解除授权不会暂停已投放广告。
Administrators can review the impact and disconnect on the Google accounts page. The app stops using the connection locally and cancels queued work; stored credentials are cleared after Google confirms revocation. If the response is uncertain, an encrypted credential is retained for retry and the pending state is shown. Other connections in the same Google project may also be affected. Historical account, draft, report and audit data remain subject to the retention policy. Disconnecting does not pause existing campaigns.
保留期限与删除范围Retention and deletion scope
账号、草稿、广告配置、统计和必要操作记录用于持续服务、历史查看与问题核对。目前没有统一的自动到期删除周期；服务到期不会自动删除这些记录。停止服务或不再需要记录时，可按下一节提出清理请求。
Accounts, drafts, campaign configurations, statistics and necessary operational records support ongoing service, history and troubleshooting. There is currently no single automatic deletion period. Service expiry does not automatically remove these records. You may request deletion when service ends or records are no longer needed.
删除由运营方核实并人工处理。处理范围包括与你有权管理的工作区相关的账号和业务记录；具体范围、时间及因备份或适用要求而需保留的部分，会在核实请求后说明。未经确认，不应将邮件发出或 Google 撤权视为本地删除已完成。
Deletion is handled manually after the operator verifies the request. It can cover account and business records associated with a workspace you are authorized to manage. The scope, timing and any records retained for backups or applicable requirements are clarified after verification. Sending a request or revoking Google access does not itself confirm completion of local deletion.
删除本平台记录不会自动删除 Google Ads 中已创建的广告，也不会自动删除第三方服务已经处理的记录。Google 和 DeepSeek 的数据保留规则由各自服务管理。
Deleting app records does not automatically delete campaigns already created in Google Ads or records previously processed by external services. Google and DeepSeek administer retention within their own services.
撤销授权与数据请求Revoke access and exercise your choices
撤销 Google 授权：登录 Google 账号的“第三方连接”页面，找到“神灯 AI 投放工作台”，撤销该应用访问权限。本应用之后的请求会受撤权结果限制；已经发布的广告可能继续运行，如需停止投放请在 Google Ads 中确认广告状态。
To revoke Google authorization, open the third-party connections page in your Google Account, select “神灯 AI 投放工作台” and remove access. Subsequent requests are subject to that revocation. Previously published campaigns may continue running; check their status in Google Ads if you want to stop delivery.
查询、更正、导出或删除数据：发送邮件至 sevice@magic-in-china.com，说明你使用的登录邮箱或工作区、请求类型与数据范围。请不要发送密码、API 密钥或 OAuth 令牌。
For access, correction, export or deletion, email sevice@magic-in-china.com with your login email or workspace, request type and the relevant data scope. Do not send passwords, API keys or OAuth tokens.
运营方会核实请求人的权限，与你确认处理范围及进展；涉及同一工作区其他成员或需要保留的记录时，会说明处理限制。撤销 Google 授权和删除平台保存的数据是两个独立操作。
The operator verifies your authority and confirms the scope and progress with you. We explain limitations involving other workspace members or records that must be retained. Revoking Google authorization and deleting data stored by the platform are separate actions.
政策更新与联系我们Changes and contact
数据用途或第三方处理方式发生实质变化时，运营方将更新本页日期和相关说明，并在相应功能中告知用户；需要用户决定的数据使用会在操作前说明。
When data purposes or third-party processing materially change, the operator updates this page and the relevant feature notices. Data uses requiring a user decision are explained before the action.
运营主体：深圳市神灯资讯有限公司。应用：神灯 AI 投放工作台。联系邮箱：sevice@magic-in-china.com。公司地址：深圳市龙华新区东环一路天汇大厦B座720。本政策更新日期：2026 年 11 月 6 日。
Operator: 深圳市神灯资讯有限公司. Application: Magic Google Ads (神灯 AI 投放工作台). Contact: sevice@magic-in-china.com. Business address: Room 720, Block B, Tianhui Building, Donghuan 1st Road, Longhua New District, Shenzhen, China. Last updated: November 6, 2026.