Skip to content
Helferlain

Security and data protection

What Helferlain reads,
writes and never does

What Helferlain reads in your Google Ads account, what it may change, which limits always apply and where your data is stored. The privacy policy and the data processing agreement are binding.

Request accessThe fixed limits
  • Changes only after approval
  • Hosted in the EU
  • No Google passwords stored with us
Stock photo: Row of light lockers with keys in the locks in warm light
Stock photo
Illustration

Review before applying

Affected
Negative keywords in one campaign
Warnings
Shown here if there are any
Expected impact
Worst caseLikelyBest case

worse, likely and better case

Undo plan
Remove the negative keywords in Google Ads again
Approval expires
Time is shown in the panel
CancelConfirm and apply
Illustration of the review panel that appears in the app before every change.

Reading

What Helferlain reads

  • Metrics and settings of your Google Ads account: campaigns, keywords, search terms, cost, conversions, change history.
  • Data from GA4 and Search Console if you choose to connect them.
  • No secret keys: of GA4 Measurement Protocol secrets, Helferlain only sees how many there are and what they are called.

What Helferlain writes, and only how

In the app, a change is applied only once you confirm it in the review panel. The panel shows what is affected, any warnings, the expected impact as a range, the undo plan and when the approval expires. In Claude, ChatGPT or Cursor, the change tool runs only a dry run by default. A real change needs an approval token, which the app does not currently show for assistants, so real changes run through the app or the agency console.

Fixed limits

Nine limits that apply to every change

The limits apply to every route into the account: the app, the agency console and your assistant. If a change breaks a limit, it is rejected and nothing is changed.

  • Paused only

    New campaigns, ad groups and ads are created paused and activated in separate steps.

  • €10 at most

    per click, impression or view bid, including the cap of a bid strategy.

  • Fixed cap

    Only bid strategies with a cap: manual CPC, maximise clicks, percent CPC with a cap.

  • Your website

    Final URLs, tracking templates and URL suffixes only on the domain from your account profile.

  • 1.5 at most

    A bid adjustment raises a bid by no more than 50%.

  • Daily budget capped

    Default €50 per day; a total budget of at most 31 times the daily cap.

  • One budget, one campaign

    Budgets are created in the same step as the campaign. There are no shared budgets.

  • All or nothing

    If one part of a change fails, nothing is changed. No half-built campaigns.

  • No effect on spend

    Google recommendations only if they touch neither bids nor budgets, strategy or status.

Target CPA and target ROAS cannot currently be changed through Helferlain; a dedicated tool for this is planned.

Layers of protection

Further safeguards besides the limits

  • Approval token

    Covers exactly one change, is time-limited and can be used only once.

  • Protected accounts

    Individual accounts are permanently protected against changes, even against dry runs. The audit then shows "read only".

  • Read-only mode

    A global switch that blocks all changes and lets only analyses run.

  • Four-eyes principle

    In agency mode, whoever proposes a change does not approve it. Changes are enabled for each client by two admins.

  • Access per workspace

    Access is valid only for the workspace it is bound to.

  • Google sign-in

    Helferlain never sees your Google credentials, and we do not store them. The token is stored encrypted.

Data

Where your data is stored and for how long

Hosted in the EU

Cloudflare with processing in the EU, database in Frankfurt. All service providers are listed on the sub-processors page.

Encryption

OAuth tokens and stored keys are encrypted (AES-256-GCM), with the master key held at Cloudflare.

Export and delete

Under Settings > Privacy & Data you export your data or delete the workspace. Deleting destroys the workspace key.

Retention and tracking

Audit logs 12 months, invoices 10 years. No analytics or error tracking services are currently in use.

Legal terms

Everything in writing

The legal texts are binding, not this summary. The data processing agreement is part of the contract.

To be clear

What this page does not promise

  • There is no undo button. The undo plan is shown in the review panel before every change.
  • The impact in the review panel is an estimate from the most recently loaded metrics, not a test at Google and not a guarantee.
  • If you use Helferlain in Claude or ChatGPT, their privacy terms also apply to the conversations.
  • Helferlain is no substitute for legal advice, for example on whether your website needs consent for tracking.

Questions

Questions about security and data protection

Does Helferlain see my Google password?
No. You connect your account with Google sign-in and grant two permissions: Google Ads and your email address. Helferlain never sees your Google credentials; the access token is stored encrypted.
Can Helferlain change anything without me?
Not in the app: every change needs your confirmation in the review panel. In an assistant, only a dry run runs without an approval token. In agency mode, changes are locked for each client until two admins enable them.
Where is my data processed?
According to the privacy policy, on infrastructure in the EU: Cloudflare with EU processing and a database in Frankfurt. The full list of service providers is on the sub-processors page.
How do I delete my data?
Under Settings > Privacy & Data. You confirm by typing a phrase; the key of your workspace is then destroyed and the data becomes unreadable. This cannot be undone.

Let it read first, then decide

Connect your account, look at the audit and approve only what you understand.

Request accessAI integration
Stock photo: Hand signing a document in sunlight on a light desk
Stock photo