Information you provide and information recorded automatically
We collect your email when you sign up or sign in, along with signup code verification records and account status. We record your plan interest, billing preference, signup source, and UTM attribution information, such as the campaign or source that brought you to the website. If you contact support, we receive the information you choose to include in your message.
Technical information includes your IP, user agent, request information, and service activity needed to operate and protect the service. Subscription administration involves plan details, billing status, transaction references, and records needed for accounting or payment disputes. Payment information is handled through a payment processor under its own applicable privacy terms.
Your uploaded file stays in the browser
The homepage demo processes the uploaded search terms file in your browser. We do not receive or store that uploaded file, its rows, or its search term contents. Account connection is a separate process from uploading a file to the demo.
When a demo summary is associated with signup, it contains summary numbers only, such as calculated wasted spend, a search term count, and the target you entered. This numerical summary does not include the uploaded file or the text of individual search terms. General technical and signup information described in this policy can still be recorded when you use the website.
Access follows the permissions you choose
After you connect an advertising account, we access the account information permitted by the scopes you choose. This can include account and campaign identifiers, campaign settings, keywords, search terms, ads, bids, budgets, spend, and reported conversion information needed for the features you use. Read scopes allow retrieval of permitted information. Write scopes allow permitted changes when you approve actions or enable rules that make them.
You are responsible for having authority to connect the account and for choosing appropriate permissions. You can revoke the connection through the relevant platform's controls. Revocation stops future access through that connection, subject to the platform's operation. Information already processed remains subject to the retention provisions below.
Connected account data can contain personal information. We process that information to provide the requested service and, where applicable, under your instructions and the applicable DPA. Avoid putting sensitive customer, patient, or client details into campaign names, support messages, or rule notes.
Why we process information
We use account information to create and authenticate accounts, deliver signup codes and service messages, administer subscriptions, and provide support. We use connected account information to run authorized rules, generate reports, deliver alerts, maintain change history, and support undo. Processing necessary to deliver these requested services relies on performance of a contract or steps you request before entering one, where that legal basis applies.
We process technical and activity information to prevent abuse, investigate errors, secure the service, and understand service operation. Where applicable, this relies on legitimate interests in operating a reliable and secure service, balanced against your rights. Basic signup attribution and numerical demo summaries help us understand acquisition and the context of a signup. Processing that requires consent, including optional cookies where required, relies on that consent.
We retain and use certain records to meet tax, accounting, legal, or regulatory obligations and to establish, exercise, or defend legal claims. Where applicable, the legal basis is compliance with a legal obligation or the legitimate interest in handling claims. You can withdraw consent for consent-based processing without affecting processing that was lawful before withdrawal.
Who receives information to provide the service
We share necessary information with service providers in relevant categories, including a payment processor, email delivery provider, hosting provider, and analytics provider. Access is limited to the functions they perform for us and is subject to appropriate contractual obligations. Support and security providers can receive information needed to resolve issues or protect the service.
Advertising platforms receive requests and changes needed to operate the connections you authorize. If you enable an alert integration, the destination receives the alert information needed for that feature. Team members and client roles can see information according to the access assigned within the service.
We can disclose information when required by law, to respond to valid legal process, or to protect rights and service security. Information can also be involved in a transfer of the service, subject to applicable privacy obligations. We do not sell personal information or share it for cross-context behavioral advertising.
Safeguards for transfers across borders
Service providers can process information outside your state or country. Where applicable law restricts a transfer, we use an appropriate legal mechanism and safeguards, such as recognized contractual protections or an applicable adequacy decision. Contact [email protected] to request information about safeguards relevant to your data.
How long information is kept
We keep account information while your account is active and as needed to provide the service, resolve support matters, and administer your subscription. Signup codes have limited validity. Verification and security records are kept only as needed for authentication, abuse prevention, and investigation. Numerical demo summaries and attribution records are retained only while useful for their stated purposes or required obligations.
Connected account information, reports, and change records are retained for service operation and relevant contractual, security, or legal needs. Disconnecting an account prevents future authorized access but does not automatically erase all prior records. After account deletion or the end of a retention need, we delete or deidentify information unless an obligation or valid legal need requires continued retention. Backup copies expire through the backup lifecycle and remain protected while retained.
Essential functions and optional measurement
We use cookies or similar storage for essential functions such as sessions, authentication, security, and saved preferences. Browser storage can also support processing the homepage demo locally. These functions are distinct from sending your uploaded file to the service.
Where optional analytics or similar technologies require consent, they are used only with the required consent. You can manage available privacy choices and browser settings or clear local storage. Blocking essential storage can prevent sign-in or other requested functions. We honor legally required opt-out preference signals where applicable.
Access and control over your information
Depending on your location and applicable law, you can request access to personal information, a copy of it, correction, deletion, or portability. You can also have rights to restrict or object to processing, withdraw consent, and complain to a privacy regulator. GDPR rights apply where the processing falls within its scope. Some records may remain necessary for legal obligations or valid claims.
Under the CCPA and other applicable state privacy laws, California residents and residents of other covered states can have rights to know or access information, correct inaccuracies, delete information, obtain a portable copy, and opt out of sale, certain sharing, targeted advertising, or certain profiling. Applicable rights can also include limiting certain uses of sensitive information and appealing a denied request. We do not use your information for decisions producing legal or similarly significant effects through profiling.
Send requests, appeals, or questions about authorized agent submissions to [email protected]. We verify identity and authority as reasonably needed to protect information and respond within the period required by law. We do not discriminate against you for exercising applicable privacy rights. If we process information for a business customer under its instructions, we can direct the request to that customer or assist it as required.
Measures that protect service information
We use technical and organizational safeguards designed to protect information, including access controls, permission management, and measures to monitor and respond to security issues. We limit access according to service responsibilities. No method of storage or transmission provides absolute security. Protect your email account, signup codes, and connected account permissions, and report suspected unauthorized access to [email protected].
The service is for business use
PpcAutomate is intended for business users and is not directed to children. We do not knowingly collect personal information from children below the age at which applicable law permits them to provide it for this service. If you believe a child has provided personal information, contact [email protected] so we can investigate and take appropriate action.
Policy changes and privacy questions
We update this policy when service practices or legal requirements change. The date above identifies the current version. Where required, we provide notice of material changes and obtain consent before processing information for a new purpose that requires it. Review the Terms of Service for the rules governing use of PpcAutomate. Direct privacy questions to [email protected].