Privacy Policy

1. Introduction

AdTrigger ("we", "our", or "us") operates the AdTrigger platform at adtrigger.io. This Privacy Policy explains how we collect, use, share, disclose, and safeguard your information when you use our service. Please read this policy carefully. By using AdTrigger, you consent to the practices described in this policy.

2. Information We Collect

We collect the following types of information:

Account Information

When you create an account, we collect your name and email address. Authentication is managed through AWS Cognito, a secure identity service.

Google User Data (Google Ads Account Data)

When you connect your Google Ads account, we access your Google Ads data through the Google Ads API via OAuth 2.0 authorization. This includes your account information, campaign data, ad group details, and performance metrics (collectively, "Google user data"). We only access the data necessary to provide our ad automation services.

Payment Information

When you subscribe to a paid plan, your payment details are collected and processed directly by Stripe, our payment processor. We do not store your full card details on our systems.

Usage Data

We automatically collect certain information when you visit or use our platform, including your IP address, browser type, operating system, referring URLs, and information about how you interact with our service.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our ad automation platform
• Manage your Google Ads campaigns based on the triggers and rules you configure
• Authenticate your identity and secure your account
• Communicate with you about your account, updates, and support
• Monitor and analyze usage patterns to improve our service
• Detect, prevent, and address technical issues or security threats

Google user data is used solely to provide and improve the user-facing campaign-automation features you request. We do not use it for any other purpose.

4. Google Ads Integration & Limited Use

AdTrigger integrates with Google Ads through the Google Ads API. When you authorize AdTrigger to access your Google Ads account:

• We request only the OAuth scopes necessary to read and modify your campaigns
• We act on your behalf to adjust bids, pause/enable campaigns, and modify ad settings based on your configured triggers
• We store your OAuth refresh token securely to maintain access until you revoke it
• You can disconnect your Google Ads account at any time through your account settings
• You can also revoke AdTrigger's access at any time from your Google Account security settings

AdTrigger's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. How We Share, Transfer & Disclose Your Information

We do not sell, rent, or trade your personal information — including any Google user data — to anyone. We share information only with the parties and in the circumstances listed below.

Service providers acting on our behalf

• Amazon Web Services (AWS) — all AdTrigger data, including data from your connected Google Ads account, is processed and stored on AWS cloud infrastructure (hosting, databases, and authentication)
• Amazon SES and Resend — deliver the notification emails you configure; these emails may include campaign names or performance figures from your connected Google Ads account
• Stripe — processes your subscription payments; Stripe receives your billing details only, never your Google Ads data
• Google Analytics — collects aggregate usage statistics on our marketing website; it never receives your Google Ads account data
• Sentry — application error monitoring; receives technical diagnostic information when an error occurs, never your Google Ads account data

These providers process data solely on our instructions in order to operate AdTrigger, under agreements that restrict their use of the data to providing services to us.

Other circumstances

• Legal requirements — we may disclose information where required by law, regulation, legal process, or an enforceable governmental request, or to protect the rights, property, or safety of AdTrigger, our users, or the public
• Business transfers — if AdTrigger is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we will notify you before your information becomes subject to a different privacy policy
• With your consent — beyond the cases above, we share your information only with your explicit consent

Google user data specifically

Apart from the service providers listed above acting on our instructions, we do not share, transfer, or disclose Google user data to any third party. Specifically, we never:

• Sell Google user data, or transfer it to data brokers, information resellers, or advertising platforms
• Use or transfer Google user data to advertise to you or to anyone else, including retargeting, personalized, or interest-based advertising (your Google Ads data is used only to run the campaign automations you configure)
• Use or transfer Google user data to determine creditworthiness or for lending purposes
• Use Google user data to train generalized artificial-intelligence or machine-learning models

6. Data Storage & Security

Your data is stored on Amazon Web Services (AWS) infrastructure, including AWS Amplify, Lambda, AppSync, and DynamoDB. We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication through AWS Cognito
• Encrypted storage of OAuth tokens
• Access controls limiting data access to authorized personnel
• Regular security reviews of our infrastructure

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Cookies & Analytics

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and understand how you use our platform. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of our service may not function properly without cookies.

8. Data Retention & Deletion

We retain your personal information for as long as your account is active or as needed to provide you our services. You can delete your account and the data we hold about you at any time:

• Self-service, from your account settings in the app — see our Account & Data Deletion page for exactly what gets deleted
• By emailing support@adtrigger.io

Upon account deletion, we will remove your personal data — including stored Google Ads OAuth tokens and cached Google Ads data — within 30 days, except where we are required to retain it for legal or regulatory purposes.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Request a portable copy of your data
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at support@adtrigger.io.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. If a change materially affects how we handle Google user data, we will notify you by email before the change takes effect. Your continued use of the service after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at support@adtrigger.io.