Privacy Policy

Scope

This privacy policy covers the web panel at adssensor.com and the Ads Sensor iOS and Android apps. Ads Sensor is an AI-powered ad analytics service that unifies Meta Ads, Google Ads, TikTok Ads, Criteo and GA4 data in a single panel. By using the service you acknowledge the data practices described in this policy.

Data We Collect

We collect only the data needed to run the service. Data coming from your ad accounts is campaign-level performance data; we do not collect personal data about the end users who see your ads.

• Account information: username and email address; your password is hashed with scrypt and never stored in plain text
• Ad platform connections: API keys and access tokens
• Ad metrics: campaign, spend, impression and conversion data
• Preferences: your language, notification and consent settings
• Support correspondence: requests you send us by email

How We Use Your Data

We process your data only for the purposes listed below. Selling user data is out of the question; we do not share your data with ad networks, data brokers or any other third parties for their own purposes.

• Building your panel and reports and operating your account
• Generating AI-powered analyses and recommendations
• Sending anomaly alerts and summary emails
• Managing your subscription and billing
• Securing the service and preventing abuse

Cookies and Consent

The essential session cookie that keeps you signed in is required for the service to work and is not subject to consent. Analytics and marketing cookies are activated only with your explicit consent, which we manage through Google Consent Mode v2 and Google Tag Manager. You can change or withdraw your choices at any time via the consent banner.

Third-Party Processors

We work with a small number of subprocessors to deliver the service. Each one receives only the data required for its specific task.

• AI analysis infrastructure (Anthropic PBC, USA): only ad metrics are processed for analysis; this is campaign performance data, not personal data about end users
• Brevo (Sendinblue SAS, France): delivery of notification and summary emails
• Cloudflare, Inc. (USA): security and acceleration of the site
• HostLAB Bilişim Teknolojileri A.Ş. (Turkey): server and database hosting
• Lemon Squeezy (USA): subscription payments; we never store your card details

Government Requests

If a public authority requests personal data: (1) we review the legality of the request, (2) we challenge requests we consider unlawful, (3) we disclose only the minimum information necessary (data minimization), and (4) we document the requests, our responses and the legal reasoning involved. In the past 12 months we have shared no personal data in response to national security requests.

Ad Platform Data and API Keys

Your ad platform API keys and access tokens are stored encrypted with AES-256-GCM on our servers. Your ad metrics are processed for analysis and kept in a day-by-day summary warehouse, which keeps reports fast and avoids unnecessary requests to the platforms. We access only the accounts you have connected or are authorized to manage. You can remove a connection at any time and also revoke the granted access directly on the platform.

Google User Data and Limited Use

Ads Sensor accesses two types of data from the Google accounts that you connect solely with your explicit consent (OAuth): Google Ads (adwords permission) advertising account, campaign, and performance data, and Google Analytics (analytics.readonly permission) read-only site traffic and conversion data. We use this data only to produce the analyses, reports, and recommendations that you request in the panel; we do not use it for any other purpose, do not sell it, and do not use it for ad targeting. In order to produce the analyses, the data may be transferred to the artificial intelligence processors we use to provide this feature; these processors process the data solely to respond to your request (inference) and do not use it to develop, improve, or train generalized or non-personalized artificial intelligence/machine learning models. When you disconnect your Google account, we delete the access tokens and the data associated with that connection. Ads Sensor's use of information received from Google APIs, and transfer to any other application, will comply with the Google API Services User Data Policy, including the Limited Use requirements.

Data Retention

We keep your account data for as long as your account is active. When you request account deletion, your account information, API keys and the ad data linked to you are removed from our systems. Records we are legally required to keep, such as invoicing records, may be retained for the period prescribed by applicable law.

De-identified Industry Statistics

We use the performance metrics of the ad accounts you connect (such as spend, impressions, clicks and conversions) to produce aggregated, de-identified industry statistics (for example, the average cost per click of an industry). When your membership ends or you delete your account, your personal data and platform access keys are deleted; performance metrics are de-identified by replacing the account identifier with a one-way hash and are retained only for these aggregated statistics. These statistics are never displayed in a way that could identify a single account, brand or person; an industry value is published only when data from at least 5 different accounts is combined.

Your Rights

You have the right to access, correct and delete your personal data and to object to its processing. To exercise your rights under applicable data protection law, including the GDPR and Turkish KVKK, simply write to our support email. We respond within a reasonable time and act after verifying your identity. Account deletion requests go through the same channel.

Security Measures

We apply layered measures to protect your data. Passwords are hashed with scrypt, API keys are encrypted with AES-256-GCM, all traffic travels over TLS, and the site runs behind Cloudflare. Two-factor authentication (2FA) is mandatory on every account. No system can be called perfectly secure, but we apply industry-standard protections and review them continuously.

Changes to This Policy

We may update this policy to reflect changes in the service or in the law. We announce significant changes in the panel or by email. The update date at the top of this page always shows the version in force.

Contact

For any privacy question, request or complaint, reach us via our support email or the contact page on the site. Data access, correction and deletion requests are handled through the same channels.