Privacy Policy

Effective 28 August 2026 · Google OAuth app: Ahlers & Ogletree Ads Dashboard

Who we are

This policy describes the Ahlers & Ogletree Ads Dashboard at adashboard.sem.co, operated by sem.co for Ahlers & Ogletree Auction Gallery. The dashboard shows Google Ads performance for that client account and is used by authorized agency and client staff only. It is not a consumer product and is not offered to the public.

Information we collect

We collect only what is needed to run the portal:

• Portal accounts. Email address, hashed password, role (admin or viewer), optional display name and profile photo, and session cookies.
• Google Ads data. When an administrator connects Google Ads with OAuth, we receive an access token and refresh token and then query campaign, keyword, search-term, conversion, and related performance data for the linked Ads account. We do not request Gmail, Drive, Calendar, or Google user profile content beyond what the Ads connection requires.
• Auction files you upload. Post-sale CSV imports (for example bidder emails and hammer prices) that staff choose to upload so the dashboard can attribute results.
• Questions you type. If Anthropic/Claude is connected, the question and the Ads figures needed to answer it are sent to Anthropic to generate a reply.

How we use Google user data

Google Ads data and OAuth tokens are used solely to operate this dashboard for the connected Ads account: display reports, answer in-product questions, and (only after an explicit in-app approval) perform writes the user requested. We do not use Google user data to serve advertisements, to train generalized AI/ML models, or for any purpose unrelated to providing this dashboard.

This use complies with the Google API Services User Data Policy, including the Limited Use requirements.

Sharing

We do not sell Google user data or portal account data. We share information only:

• with subprocessors that run the service (hosting, email delivery, and Anthropic when chat is used);
• with Google, to complete OAuth and Ads API requests you initiate;
• when required by law, or to protect the security of the service.

Human access to Google Ads data is limited to administrators providing support or security review for this client portal.

Storage and retention

OAuth tokens and API credentials are stored server-side in an encrypted vault. Session cookies are HttpOnly and last up to 7 days. Cached Ads report payloads are short-lived. Portal accounts remain until an administrator deactivates them. Uploaded CSVs remain on the server until removed by an administrator. You can disconnect Google Ads from the Integrations screen, which revokes the stored refresh token in this app; you can also revoke access in your Google Account.

Cookies

We use a single essential session cookie (semco_session) to keep you signed in. We do not use advertising or third-party analytics cookies.

Your choices

• Change or remove your profile photo and display name in Profile.
• Ask an administrator to reset or deactivate your portal account.
• Disconnect Google Ads in Integrations, or revoke the app in your Google Account permissions.

Contact

Questions about this policy or Google data: insights@sem.co. Operator: sem.co.