Last updated: March 2026
1. What we collect
When you connect ad accounts, we store OAuth tokens (encrypted) and read-only campaign performance data.
2. How we use your data
- To provide AI-powered audits and recommendations
- To display campaign performance dashboards
- To generate anonymised industry benchmarks (no identifiable data)
- To send transactional emails (audit results, weekly digests)
3. Data sharing
We do not sell your data. We share data only with service providers necessary to operate the platform:
- Supabase — database hosting
- Anthropic (Claude) — AI-powered audit analysis
- Google Ads API — campaign data retrieval (with your OAuth consent)
- Meta Marketing API — campaign data retrieval (with your OAuth consent)
- DataForSEO — keyword research and search data
- Vercel — frontend hosting
- Railway — backend API hosting
4. Anonymised benchmarks
We aggregate performance metrics across accounts to create industry benchmarks. This data is fully anonymised — no account names, IDs, or identifiable information is stored in benchmark tables.
5. Data retention
Campaign data is retained while your account is active. When you delete your account, all data is removed within 30 days.
6. Your rights (GDPR)
- Access: Export all your data from Settings
- Deletion: Request account deletion from Settings
- Portability: Export data as JSON
- Objection: Contact us to opt out of benchmarking
7. Contact
For privacy enquiries, email privacy@uponly.ai.