Privacy Policy

1. Information We Collect

When you create an account, we collect your name, email address, and organization details. When you connect advertising platforms (Google Ads, Meta Ads), we access campaign data, ad performance metrics, and account information through OAuth tokens that you explicitly authorize.

We also collect usage data such as pages visited, features used, and interaction patterns to improve the service.

We automatically collect technical data including your IP address, browser type and version, device identifiers, operating system, and referring URLs when you access our service.

1.1. Meta Platform Data

When you connect your Meta (Facebook/Instagram) advertising account, we request the following permissions through OAuth authorization:

• ads_management: To create, edit, pause, and duplicate campaigns, ad sets, and ads on your behalf
• ads_read: To read your campaign structure, creative assets, and ad account settings
• read_insights: To retrieve performance metrics (impressions, clicks, spend, conversions) for reporting and AI-powered optimization
• business_management: To access ad accounts associated with your Business Manager

We only access data that you explicitly authorize. You can revoke access at any time (see Section 6).

2. How We Use Your Data

• Provide AI-powered campaign optimization and performance analytics
• Display your advertising metrics in dashboards and reports
• Generate AI recommendations for campaign improvements
• Process billing and manage your subscription
• Send transactional emails (welcome, billing alerts, reports)
• Improve our service based on usage patterns

3. Data Security

All advertising platform tokens are encrypted at rest using AES-256-GCM. We use TLS 1.2+ for all data in transit. Access to your data is restricted to your organization only — we enforce strict multi-tenant isolation at the database query level.

We do not sell, rent, or share your advertising data with third parties. Your campaign data is used exclusively to provide the AdsResults service to you.

4. Third-Party Services

• Google Ads API: To read and manage your Google Ads campaigns
• Meta Marketing API: To read and manage your Facebook/Instagram ads
• Stripe: To process payments and manage subscriptions
• Anthropic Claude: To power AI recommendations (campaign data is sent to generate insights)
• Resend: To send transactional emails

5. Data Retention

We retain your account data for as long as your account is active. Campaign metrics are retained for up to 2 years to enable historical reporting. When you delete your account, we remove all personal data within 30 days. Aggregated, anonymized data may be retained for analytics purposes.

6. Your Rights

You have the right to:

• Access all data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Disconnect advertising platforms at any time
• Export your data in machine-readable format

For Brazilian users: these rights are guaranteed under the LGPD (Lei Geral de Proteção de Dados).

How to revoke Meta access:

• In AdsResults: go to Settings → Connected Accounts → Disconnect Meta
• In Facebook: go to Settings → Security → Apps and Websites → remove AdsResults
• Or contact us at privacy@odontoresults.com.br and we will revoke access within 24 hours

Data deletion:

To request deletion of all data obtained from Meta platforms, email privacy@odontoresults.com.br with subject “Data Deletion Request”. We will delete all Meta-sourced data within 30 days and confirm by email.

7. Cookies

We use essential cookies for authentication (session tokens) and preferences. We do not use third-party tracking cookies or advertising pixels.

8. Contact

For privacy inquiries or data requests, contact us at privacy@odontoresults.com.br.