Information for Google Ads API Reviewers

Overview

Sylph-One uses the Google Ads API only for internal advertising operations. The tool is used by authorized Sylph-One employees and approved contractors. There is no public sign-up, no SaaS resale, and no third-party API access resale.

Applicant Company

• Legal name: Sylph-One Inc. (株式会社Sylph-One)
• Representative: Soshi Hirashima, Representative Director
• Business address: Osaki West City Towers W 2016, 2-9-2 Osaki, Shinagawa-ku, Tokyo 141-0032, Japan
• Contact email (for Google Ads API review): ads-api@sylph-one.com
• Website: https://sylph-one.com/
• Tool name: Sylph-One Ads Operations Tool

Detailed Google Ads API workflow

1. An authorized operator signs in through OAuth 2.0 and accesses only accounts permitted through Sylph-One's Google Ads manager account structure.
2. The operator selects a managed Google Ads customer account.
3. The tool reads account, campaign, ad group, ad, asset, budget, and configuration information for operational review.
4. The operator prepares a campaign operation requested by Sylph-One's advertising operations team, such as creating or updating a campaign budget, campaign, ad group, ad, or asset.
5. The tool validates required settings and submits the change through the Google Ads API.
6. The tool stores API execution results, timestamps, acting user, target customer ID, and operation details for maintenance, audit, troubleshooting, and security review.
7. Campaign, ad group, ad, asset, and budget data may be reviewed for internal checks and client reporting support.

Current API use

1. Account and configuration review

• Retrieve accessible Google Ads customer accounts
• Review campaign, ad group, ad, asset, budget, and bidding configuration
• Check account and campaign settings before operational updates

2. Campaign creation and management

• Create and update campaign budgets
• Create and update campaigns
• Create and update ad groups
• Create and update ads
• Create and update assets and attach assets where applicable

3. Reporting and audit

• Retrieve campaign, ad group, ad, asset, and budget information for internal checks and reporting support
• Store API request results, timestamps, acting user, target customer ID, and change logs
• Use logs for maintenance, security, troubleshooting, and audit purposes

Google Ads API services expected to be used

• GoogleAdsService
• CustomerService
• CampaignService
• CampaignBudgetService
• AdGroupService
• AdGroupAdService
• AssetService
• CampaignAssetService
• AdGroupAssetService
• ChangeStatus and change-history related reporting, where applicable

Current production exclusions

• No Enhanced Conversions
• No Customer Match
• No offline conversion imports using hashed end-user identifiers
• No uploading of hashed email addresses, phone numbers, addresses, or other end-user identifiers
• No public user onboarding
• No public self-serve client access
• No resale or sublicensing of Google Ads API access
• No scraping of Google Ads data

If any of the above is enabled in the future, we will complete the required legal review, consent design, and policy updates before making the corresponding public disclosures.

How data is used, stored, and retained

• Use: Data obtained through the Google Ads API is used solely to operate the advertising accounts we manage. It is not sold, rented, or shared with third parties for their own purposes.
• Storage: OAuth tokens and operational data are stored in access-controlled systems used only by authorized Sylph-One personnel.
• Retention: Data is retained only for as long as needed to provide operations, respond to incidents, and meet legal/audit obligations. Data no longer needed is deleted or rendered unrecoverable.
• Transfer: Data obtained through the Google Ads API is not transferred to AI models or other third-party services for purposes unrelated to advertising operations.

Security & access control

• Access to Google APIs is performed through OAuth 2.0.
• Access rights are granted on a least-privilege basis and reviewed periodically.
• Credentials and secrets are managed under appropriate access controls.
• API operations may be logged for maintenance, audit, and abuse-detection purposes.

Contact for reviewers

For any question from Google's review team regarding this application, please contact us at the address below. We respond in English or Japanese.

• Company: Sylph-One Inc.
• Email: ads-api@sylph-one.com
• Address: Osaki West City Towers W 2016, 2-9-2 Osaki, Shinagawa-ku, Tokyo 141-0032, Japan