Privacy policy

Who is responsible

We are the controller for AdsWork account, contact and service-security information. We process imported business reporting data on your instructions. Where this includes personal data for which your business is the controller, our data processing terms describe that relationship.

Information we collect and why

• Account information: verified email, account identifier and basic sign-in profile, to authenticate you and separate your projects.
• Project information: website URL, name, currency and timezone, to organize reports.
• Platform data: selected account/property identifiers, campaign and ad names, impressions, clicks, costs, conversions, reported revenue, creative text/media, and GA4 traffic summaries such as sessions and source/medium.
• Connection credentials: OAuth tokens or supplied credentials, to obtain and refresh your reports and, when separately authorized, carry out approved Meta ad edits, campaign setup and launch, and separately approved Google Search and LinkedIn campaign changes.
• Assistant conversations and work: your messages, replies, selected project data, brand materials, saved dashboard layouts and action approvals, to answer questions and carry out requested work. API token counts, model use and measured worker time are recorded per profile to estimate service costs.
• Operational information: sync status, approved ad changes and verification results, errors, support correspondence and network request information, to operate, secure and troubleshoot the service.
• Waitlist information: email and submitted details, to respond to your request for access. You can ask to be removed.

We use account and reporting information to deliver the requested service, security information for our legitimate interest in preventing misuse, and legally required information to meet legal obligations. Authorizing a connection does not subscribe you to marketing.

Google connections

Google sign-in uses basic identity permissions. Connecting Google Ads separately requests https://www.googleapis.com/auth/adwords to list accessible accounts and read data from the account you select. This scope also supports campaign management. In the Google Search workspace, you can save a local draft, send its settings to Google for validation, and separately approve creation of a paused campaign, budget, ad group, targeting, keywords and text ad. Launching and ad spending require another explicit review and confirmation. Draft settings, account currency and timezone, Google resource identifiers, approvals and verification results are retained in your private project. AdsWork does not change billing details or account users.

GA4 requests https://www.googleapis.com/auth/analytics.readonly to list accessible properties and retrieve aggregate traffic reports. Existing operator-managed GA4 connections can also use a service account with access to the selected property.

Refresh tokens allow scheduled imports without repeated sign-in. We do not request access to Gmail messages, Drive files or contacts.

AdsWork’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

LinkedIn Ads connection

Connecting LinkedIn requests r_ads and r_ads_reporting to list advertising accounts you can access and import daily campaign reports from the account you select: campaign names and identifiers, account currency, impressions, clicks, spend, website conversions and their attributed value. LinkedIn conversion value is configured by the advertiser; it does not confirm payment or revenue received. Organic post publishing is a separate feature and is not enabled by this advertising connection.

Campaign management is enabled separately and also requests rw_ads. In the LinkedIn workspace, authorized users can prepare a private desktop text-ad draft with copy, destination, country, profile language, start date, daily and total budgets and maximum click cost. After reviewing and confirming the settings, AdsWork creates a paused campaign and a draft creative. A separate approval is required to launch delivery and spending. Budget and bid changes require a new review and confirmation while the campaign is paused. We retain draft settings, LinkedIn resource identifiers, approvals and verification results in your private project. LinkedIn performs its own ad review. AdsWork does not change account users or billing details.

Access tokens are encrypted on the server. When authorization expires, you must reconnect. API request counts, duration and success or failure are recorded against your profile and project for resource usage tracking; we do not assign an API price where no price is known. You can disconnect in AdsWork and revoke authorization in LinkedIn. Disconnecting deletes stored credentials and the imported reports for that connection. LinkedIn processes authorization and API requests.

TikTok connections

TikTok Ads authorization lets you select an advertising account and import its campaign results, costs and creative previews into your private project. Editing is enabled separately. For supported formats, authorized users can rename, pause and resume ads, edit ad text and change campaign or ad group budgets after reviewing and confirming each change. Resuming delivery and increasing budgets can spend money. Unsupported formats keep their content editing in TikTok Ads Manager.

For supported website-traffic video campaigns, you can save a private draft with the destination, countries, adult age range, schedule, total budget, click bid, advertising profile, video and cover image. After your review and confirmation, AdsWork uploads the selected ad assets through the TikTok Marketing API, creates a paused campaign, ad group and ad, and reads back their settings. Launch and spending require a separate approval. We store the approved settings, provider identifiers and verification results in your private project. API request counts, durations and outcomes are attributed to your profile and project; unknown API costs are not presented as zero.

The separate TikTok Accounts connection supports account and post analytics and publishing, once TikTok approves access. We store access and refresh tokens encrypted on the server. Uploaded photos and videos stay private in AdsWork until you confirm a specific post, ad creation or visual change. For a confirmed post, TikTok can retrieve only its selected files through signed URLs valid for up to 24 hours. Uploads and private drafts become inaccessible after 7 days and are removed during subsequent workspace cleanup. Approved actions and their verification results are retained until the project is deleted. We display TikTok post thumbnails directly and do not download or migrate published TikTok content.

We do not sell TikTok data, access private messages or publish automatically. TikTok processes authorization, submitted posts and API requests. You can disconnect the account in AdsWork and revoke authorization in TikTok settings. Disconnecting removes AdsWork's stored account tokens; project deletion also removes its uploaded media, private drafts and action history.

Meta and other advertising connections

Meta reporting requests ads_read and imports results and creatives from the account you select. A Facebook Login for Business configuration can request additional permissions; these must match the features explained in the authorization flow. Meta editing separately requests ads_management together with ads_read. It lets an authorized user rename, pause and resume ads and edit supported ad text and images in the selected account after reviewing and confirming each change. Replacement images are stored privately for preview and are sent to the selected Meta ad account only after confirmation. We store the approved change, associated uploaded images and its verification result. Removing a connection deletes these records from the active database. In the Facebook image-ad workspace, you can prepare a private draft with a destination, Page, countries and ages, image and text, daily budget, end date, beneficiary and payer. After approval, AdsWork sends these settings and the selected image to Meta to create a paused campaign, ad set and ad. Launch and spending require a separate confirmation. We retain drafts, Meta resource identifiers, approvals and verification results in your private project. Images uploaded for this creation flow become unavailable after 7 days; cached copies may require separate cleanup. Other platforms use their applicable reporting credentials.

You must have permission to access connected accounts. Reporting does not import customer lists, individual website visitor histories or private messages. Advertisements can contain personal information; only provide materials you are authorized to share.

AI analysis and external assistants

When you use team chat, your messages, relevant conversation history, brandbook, public website evidence and data returned by the selected project’s tools are sent to Anthropic to answer your request. Supported saved changes require a separate approval. Approved design and video jobs can also use the configured worker AI tools. Conversations and approvals are saved privately in AdsWork; API keys and platform connection credentials are excluded from model inputs.

When AI analysis is used, campaign and website summaries, campaign names and, for creative critique, selected advertisement text and images can be sent to Anthropic’s API to generate the analysis. Daily or weekly summaries can also run on a configured schedule. Tokens, passwords and service-account keys are not included in prompts.

AI providers process inputs under their applicable commercial terms. We do not sell connected data, use it for third-party advertising, or use it to train general-purpose AI models. Recommendations do not automatically modify advertisements.

If you authorize an assistant through AdsWork’s MCP connection, it can receive your reporting data. Review that provider’s privacy terms before connecting. MCP does not reveal platform tokens and can be revoked separately.

Stripe reports

When you connect Stripe, AdsWork reads available and pending balances by currency, balance transaction amounts, fees and bank payout statuses with your permission. Access and refresh tokens are encrypted; the latest balance snapshot and retrieval time are stored. Transaction and payout pages are retrieved on request. This integration does not import card numbers, bank account details or Stripe customer profiles. Balances and transaction amounts are not automatically advertising results or sales revenue.

If you ask about Stripe in chat, financial summaries for the selected project may be sent to Anthropic to prepare the answer. Stripe credentials are never sent to AI. You can disconnect a project in AdsWork and fully revoke the app in Stripe settings.

Storage, providers and transfers

The application and database run on infrastructure we operate. Connection credentials are encrypted at rest using AES-256-GCM. Workspace access is authenticated and restricted by ownership. The public service and platform connections use HTTPS.

Cloudflare provides network delivery/protection and can process request metadata. Google and Meta process authentication and API requests. Stripe processes Stripe account authorization and financial report requests when you use that connection. Anthropic processes the inputs described above when AI analysis is used. Resend processes email addresses and message contents when configured service or waitlist emails are sent.

Providers may process data outside the EEA. Applicable transfer safeguards and provider agreements are required for those services; contact us for details of the arrangements relevant to your data. Disclosure is limited to providing the service, your instructions or legal obligations. Human access is limited to authorized operations, support, security investigation or legal obligations.

Retention and deletion

Project deletion removes its assistant conversations, proposed actions and saved dashboard layouts from the active database. Profile-level resource and cost records can remain until account deletion or a complete deletion request; they do not contain the conversation text.

Reports are retained while a connection is configured. Removing a connection stops scheduled imports and deletes its saved credentials, metrics, analytics, imported creative records and Google, Meta and LinkedIn campaign drafts/action history from the active database. Disconnecting or deleting a project does not pause campaigns in advertising platforms; active campaigns can continue spending. Project-level AI outputs can remain until the project or account is deleted; contact us to remove those too.

Cached media, operational records and backup copies may require separate cleanup. A complete deletion request covers those copies. We confirm completion and explain any legally required retention. Retained backups are restricted from ordinary use and must not reintroduce deleted data when restored.

See data deletion instructions for disconnecting platforms and requesting complete deletion.

Cookies and website measurement

Essential cookies support sign-in, authorization security and temporary account selection. Local storage remembers your theme and cookie preferences. Connecting a customer's GA4 property reads existing reports and does not install a tracking tag on that customer's website.

AdsWork's own public website uses optional Google Analytics 4 to measure visits, sign-in link clicks and successful waitlist submissions. When configured and with separate advertising consent, Meta Pixel and TikTok Pixel measure public-page visits and access-request conversions for AdsWork's advertising. These providers can process online identifiers, device/browser information, public-page URLs and advertising attribution information. We do not send submitted email addresses, customer account identifiers, imported reports or private workspace content to these tags. Automatic form collection and advanced matching are not enabled.

Optional tags are blocked until you choose the relevant category in the cookie banner. Rejecting them does not prevent you from using AdsWork. You can allow analytics independently of advertising measurement, or change and withdraw your choice through Cookie settings on public pages. Your preference is stored on this browser for up to 180 days. Provider cookies have their own durations; see Google's privacy policy, Meta's privacy policy and TikTok's privacy policy.

Your rights

Subject to applicable law, you can request access, correction, deletion, restriction or portability, object to processing based on legitimate interests, and withdraw consent where processing relies on it. Email [email protected]. We verify ownership and respond within applicable legal time limits. You can complain to Latvia’s Data State Inspectorate or your local supervisory authority.

Changes

We update this policy when practices change and show the date above. Material changes are communicated to affected users. New uses requiring authorization are presented before being enabled.