Kasturi Technology
Kasturi Keyword Discovery Privacy Notice
Effective date: 22 October 2026
About this notice
This notice describes the Google account connection and data processing performed by Kasturi Keyword Discovery, a local keyword-research tool operated for Kasturi Technology. It supplements the general Kasturi website privacy policy.
Information accessed and its purpose
The connection and setup workflow uses Google OAuth credentials and authorisation tokens to authenticate API requests. It can retrieve accessible Google Ads account identifiers, account names, manager relationships and account currency to identify the account selected by the operator.
The research workflow sends seed keywords, the selected Google Ads customer identifier, and language, location and network settings to Google. It retrieves keyword ideas and historical metrics, including estimated monthly searches, advertiser competition and bid ranges. These are used to produce keyword research reports for Kasturi's Malaysian AV services.
The software also downloads public pages from Kasturi's website to extract headings, descriptions and service or brand terms.
Permissions and implemented actions
Google provides a broad Google Ads API authorisation scope covering viewing and management of Ads accounts and data. The implemented tool uses that scope for account identification and keyword research. It does not change campaigns, advertisements or budgets, and does not request Gmail, Google Drive or Google account password access.
Storage and retention
OAuth client details and a refresh token are stored in a local configuration file on the operator's computer. The selected advertiser customer ID is stored in a local environment file. These files must be protected by the operator and excluded from source control and shared packages. The tool does not add its own encryption to these configuration files.
Website extraction reports, keyword seeds, keyword metrics and CSV exports are stored locally. Setup diagnostics can also contain account identifiers and names. Files remain until the operator deletes them or a later run overwrites the same output paths; the tool does not provide an automatic retention schedule.
Transfers and access
The tool connects to Google for authorisation and Google Ads API requests and to Kasturi's website for public page extraction. Its implemented workflow does not upload research exports or OAuth tokens to Kasturi's website or to a separate application-hosting service. Local reports can be accessed by people or software with access to the operator's computer or any copies the operator shares.
Google-derived data will be used for the stated keyword-research and account-connection purposes, not sold or transferred for unrelated advertising, profiling or model-training purposes. Any use or transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including applicable Limited Use requirements.
Disconnecting and deleting local data
The account holder can revoke the app's access in Google Account connections. Revocation does not delete existing local reports. The operator can separately remove the local refresh token and delete local reports, diagnostic files and any shared copies they control.
For questions or assistance concerning the tool's data handling, contact info@kasturi.com.my.
Return to Kasturi Keyword Discovery.