Privacy Policy
Last updated: July 29, 2026 · This page is maintained by Werner Visagie, operator of AdSpend Advisor, to answer common questions about how we handle your data.
Who is responsible for your data
AdSpend Advisor is owned and operated by Werner Visagie (sole proprietor, trading as "AdSpend Advisor"). Werner Visagie is the data controller for personal data processed through the Service and can be reached at support@adspendadvisor.com.
What we collect
Account data (name, email, workspace/agency profile), authentication data managed by our identity provider, and — when you connect an ad account — read-only performance metrics (spend, impressions, clicks, conversions, revenue) at the account and campaign level. We do not collect end-consumer PII from your ad platforms.
How we use it
To operate the Service: compute ROAS/CPA, benchmark against anonymized cohorts, generate recommendations, and — if you enable it — apply approved budget shifts. We also use aggregated, de-identified metrics to improve our recommendation models.
Ad platform integrations
OAuth tokens for Google Ads and Meta Ads are stored encrypted at rest (AES-256) and used only for the scopes you consented to at connect time. You may disconnect at any time from Dashboard → Integrations; on disconnect, tokens are deleted within 24 hours.
Anonymized benchmarks
Cohort benchmarks are computed with k-anonymization (minimum 40 accounts per cohort). Individual accounts are never identifiable, and you can opt out of contributing to benchmarks in Dashboard → Settings.
Subprocessors & data sharing
We share personal data with the following categories of recipients: Supabase (managed hosting, database, and authentication), Paddle.com Inc. (our Merchant of Record — handles billing, payment processing, invoicing, tax collection, and refunds; Paddle receives your name, email, billing address, and transaction details), and Google Cloud (AI inference for recommendation rationale). Each subprocessor is bound by industry-standard data processing terms.
Retention & deletion
Performance data is retained for as long as your account is active plus 30 days. You may request full deletion at any time by emailing privacy@adspendadvisor.com; we will complete deletion within 30 days.
Your rights
Depending on your jurisdiction (GDPR/CCPA and similar), you may have rights to access, correct, export, or delete your personal data. Contact us at the address above to exercise these rights.
Cookies
We use strictly necessary cookies for authentication and session management. We do not run third-party advertising trackers on our marketing pages.
Security contact
Report vulnerabilities to security@adspendadvisor.com. We acknowledge reports within 2 business days.
Changes
Material changes to this policy will be announced by email at least 14 days before taking effect.