Privacy Policy

Introduction

This Privacy Policy describes how we collect, use, and handle your information when you use our autonomous AI media buying platform.

Information We Collect

We collect information you provide directly to us, including:

• Account information: Name, email address, and password when you create an account
• Advertising account data: Information from connected advertising platforms necessary to manage your campaigns
• Google account data: When you connect your Google account, we access your Google account information (name and email address via OpenID Connect), Google Ads account data (customer IDs, campaign names, ad groups, ads, and performance metrics), and OAuth tokens required for API access
• Usage data: Information about how you use our platform and services

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process and manage your advertising campaigns
• Send you technical notices and support messages
• Respond to your comments and questions

Data Security

We implement specific technical measures to protect your information, including sensitive credentials and Google user data:

• Encryption at rest: Sensitive credentials, including OAuth tokens, are encrypted using AES-256-GCM encryption before being stored in our database
• Encryption in transit: All data transmitted between our platform and third-party services (including Google APIs) is protected using HTTPS/TLS encryption
• OAuth 2.0 token management: We use short-lived access tokens (1-hour expiry) with encrypted refresh tokens. Tokens are automatically rotated via scheduled refresh cycles
• Access controls: Role-based access controls restrict data access to authorized users. Each user can only access data from advertising accounts they have explicitly connected
• Data retention: Time-series performance data is retained for 90 days. You may request deletion of your data at any time by contacting us

Data Sharing

We do not sell, rent, or trade your personal information or Google user data to third parties. We share your information only in the following circumstances:

• Google: We send API requests to Google Ads using your OAuth tokens to read and manage campaigns on your behalf. Your Google OAuth tokens are used solely for this purpose and are never shared with any other party
• Advertising platforms: Data is shared only with advertising platforms you explicitly connect (such as Meta, TikTok, and Google Ads) for the sole purpose of managing your campaigns
• Legal requirements: We may disclose your information if required to do so by law, regulation, or legal process, such as in response to a court order or subpoena

Google API Services

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google user data is used only to provide and improve our media buying platform services for your benefit
• We do not transfer Google user data to third parties except as necessary to provide the service, as required by law, or with your explicit consent
• Google user data is not used for advertising, profiling, or any purpose unrelated to the media buying service you have requested
• Human access to Google user data is limited to what is necessary for debugging, support, or legal compliance purposes

Your Rights

You have the right to access, update, or delete your personal information at any time through your account settings. You may also contact us to exercise these rights.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us through your account dashboard.