Privacy Policy

Introduction

PerfoAds (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Google Ads optimization platform and audit tools.

This policy applies to users worldwide, including those in the European Economic Area (EEA), United Kingdom, and other jurisdictions with data protection laws.

Data Controller

PerfoAds is the data controller responsible for your personal data. For any privacy-related inquiries, you can contact us at:

Data We Collect

Account Information

• Email address and name during registration
• Encrypted password (we never store plain text passwords)
• Optional business profile: company name, industry, goals

Google Ads Data

When you authorize via Google OAuth, we collect with read-only access:

• Campaign structure and settings
• Performance metrics (impressions, clicks, conversions, costs)
• Keywords and ad creative content
• Quality scores and optimization recommendations
• Device and geographic performance data

Important: We have read-only access. We cannot modify your Google Ads campaigns without explicit user action.

Audit Tool Data

When you use the PerfoAds Audit tool, we additionally collect:

• Website Content: We use Firecrawl, a third-party service, to extract and analyze content from website URLs you provide. This helps our AI understand your business context for personalized recommendations.
• Landing Page Screenshots: We use ScreenshotAPI.net to capture visual screenshots of landing pages you specify for conversion rate optimization (CRO) analysis.
• Audit Purchase Data: When you purchase audit credits, we process your transaction through Stripe. We store your purchase history and credit balance but never store your full payment card details.

Payment Information

Payment details are processed through Stripe (for audit credits) or LemonSqueezy (for subscriptions). We never store your full credit card information on our servers.

Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

How We Use Your Data

• Display your campaigns and performance metrics in your dashboard
• Generate AI-powered audit reports and recommendations via Anthropic's Claude
• Analyze your landing pages for CRO opportunities
• Send performance alerts and custom reports
• Process payments and manage your account
• Improve our services and develop new features

Cookies and Tracking

We use cookies and similar technologies to operate our service. Here's what we use:

You can manage your cookie preferences at any time through our cookie consent banner or by contacting us.

Data Retention

We retain your data only as long as necessary for the purposes described in this policy:

Third-Party Services

We use the following third-party services to operate PerfoAds:

International Data Transfers

Your data may be transferred to and processed in the United States, where our servers and third-party providers are located. For users in the European Economic Area (EEA) and United Kingdom:

• We rely on Standard Contractual Clauses (SCCs) approved by the European Commission for transfers to the USA
• Our processors (Supabase, Render, Anthropic, Stripe) maintain appropriate data protection agreements
• We implement additional security measures including encryption in transit and at rest

You can request a copy of the safeguards we use by contacting privacy@perfoads.com.

Google API Compliance

PerfoAds's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

We restrict data use to stated service features and explicitly prohibit: advertising purposes, generalized AI training, credit assessments, and data sales.

Data Security

We implement industry-standard security measures including:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Regular security audits and penetration testing
• Access controls and authentication requirements
• Secure session management with httpOnly cookies
• CSRF protection on all state-changing operations

Your Rights

Depending on your location, you have the following rights regarding your personal data:

For All Users

• Revoke Access: Disconnect your Google Ads account anytime from your dashboard or Google account settings
• Delete Account: Request complete account deletion (processed within 30 days)
• Data Export: Request a copy of your data in a portable format
• Opt Out: Manage marketing email preferences through your dashboard

Additional Rights for EEA/UK Users (GDPR)

• Right of Access: Request confirmation of whether we process your data and obtain a copy
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data (“right to be forgotten”)
• Right to Restriction: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@perfoads.com. We will respond within 30 days.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. For EEA users, you can find your local authority at EDPB Member Authorities. For UK users, contact the Information Commissioner's Office (ICO).

Children's Privacy

PerfoAds is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

Contact Us

For privacy-related questions, data requests, or concerns:

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform at least 30 days before they take effect. Continued use of PerfoAds after changes constitutes acceptance of the updated policy.