Privacy policy

Data we process

Account data: email, name, password (stored only as a hash), language, timezone, plan and payment history (via Stripe; we never store card details).

Data from connected ad accounts: campaigns, ad sets, ads, budgets, results, search terms, keywords, conversions and, if you ask, lead form entries. We read it only to answer you and to run the actions you approve.

Chat conversations, proposed actions and your decisions (activity log), tasks used and the related AI usage.

Technical data: IP address and strictly necessary cookies (see the cookie policy).

Only if you accept marketing cookies: visit data (pages, account creation, starting and completing a payment, the TikTok identifiers _ttp / ttclid, IP, browser and, for a payment, your email in irreversibly hashed form) through the TikTok Pixel and the TikTok Events API, to measure our ads on TikTok.

Why and on what basis

To provide the Service (contract), for invoicing (legal obligation), and for security and abuse prevention (legitimate interest). Measuring our TikTok ads relies only on your consent, which you can withdraw at any time from “Cookie settings” in the site footer. We do not sell data, and data from your ad accounts is never sent to TikTok for this purpose.

Artificial intelligence

Your messages and the account data needed for an answer are sent to Anthropic (Claude models) only to generate the answer. Under Anthropic's commercial API terms, this data is not used to train models. Answers are generated automatically and may contain errors; nothing is changed without your confirmation.

Who we share data with

Anthropic PBC (AI), Zernio (integration with the ad networks; each customer has an isolated profile and an access key limited to it), Stripe (payments), TikTok (measuring our ads, only with your consent; see the cookie policy), our hosting and database provider (EU). Ad networks (Google, Meta, …) only receive the actions you confirm. Some providers may process data outside the EEA under standard contractual clauses.

Retention

For as long as you have an account. After deletion, data is erased within 30 days, except invoicing records kept as required by law. The activity log is kept for the life of the account as a record of approved actions.

Security

Encrypted connections (HTTPS), hashed passwords, encrypted access keys, per-customer isolation, and a check of every operation before it reaches an ad network.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to complain to the Romanian supervisory authority ANSPDCP (www.dataprotection.ro). Write to [email protected]. You can disconnect an ad account any time on the Accounts page, and revoke access in the network's own settings.