Privacy Policy

Last updated: 4 August 2026 · Versão em português

iGrillo Mídias ("we") is a paid-media agency registered in Brazil under CNPJ 33.703.618/0001-77, based in Ribeirão Preto, São Paulo. This policy explains what we collect on this website and how we handle data in the software we operate, including our use of the Google Ads API.

1. What this website collects

This website has no contact form, no analytics, no advertising pixel and no tracking cookies. We do not build a profile of visitors and we do not know who you are unless you contact us.

Two things do happen when you load a page:

Web fonts. Typefaces are loaded from Google Fonts, so Google's servers receive your IP address as part of that request. This is Google's processing, governed by Google's Privacy Policy.
Server logs. Our hosting provider keeps standard access logs (IP address, timestamp, requested page, user agent) for security and reliability.

If you choose to contact us by e-mail or WhatsApp, we receive whatever you send us and keep it for as long as needed to answer you and, where a contract follows, for the duration of that relationship.

2. Data we handle as an agency

Clients who hire us sign a management contract authorizing us to operate their advertising accounts. In doing so we access campaign performance data belonging to those clients — spend, clicks, impressions, conversions and equivalent metrics — through the official APIs of the advertising platforms.

This data belongs to the client. We process it only to run and report on their campaigns. We do not sell it, rent it, syndicate it or share it with other clients.

3. Google user data

Our internal platform, Grillo Ads Platform, connects to the Google Ads API using OAuth credentials authorized by us as the agency, scoped to the accounts linked to our manager account. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Limited use. Data obtained from the Google Ads API is used solely to provide and improve the reporting and campaign-management features described on our Google Ads API documentation page. It is never transferred to third parties except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition. It is never used for advertising purposes, and it is never sold. No human reads this data except where required for security, to comply with the law, or where the account owner has explicitly asked us to.

The metrics we retrieve are aggregated performance figures. We do not request, retrieve or store personal data about end users of our clients' advertising through the Google Ads API.

4. Storage and security

Campaign data is stored in a PostgreSQL database on infrastructure we control. API credentials and OAuth refresh tokens exist only as server-side environment variables and are never exposed to a browser or to client users. Access to the platform requires authentication, is restricted by role, and is recorded in an audit log. Client users see only their own account.

5. Retention

Campaign performance data is retained for the duration of the management contract and for a reasonable period afterwards, so that historical comparisons remain possible. A client may ask us to delete their data at any time, subject to any legal record-keeping obligation.

6. Your rights

Under the Brazilian General Data Protection Law (LGPD, Law 13.709/2018) you may ask us to confirm whether we process data about you, to access it, to correct it, to delete it, or to explain with whom it has been shared. Write to contato@igorgrillo.com.br and we will respond.

7. Changes

If this policy changes, the revised version is published on this page with a new date at the top. Material changes affecting clients are communicated directly.

8. Contact

iGrillo Mídias — Ribeirão Preto, SP, Brazil — contato@igorgrillo.com.br