Privacy Policy

• Account data: your name, email address, and a hashed password when you create an account.
• Ad-platform data: when you connect Meta (Facebook/Instagram) Ads, Google Ads, or similar accounts via OAuth, we receive access tokens and read campaign, ad set, ad, creative, spend, and performance metadata from the accounts you authorize.
• Usage data: pages viewed, actions taken, timestamps, IP address, and user-agent, used to secure and improve the service.
• Billing data: if you subscribe to a paid plan, our payment processor (Stripe) handles card details directly; we retain only the subscription status and invoice metadata.

• To operate the service you signed up for (authentication, syncing accounts, running requested automations).
• To surface insights, recommendations, and guardrail alerts about your ad accounts.
• To respond to support requests and to secure the service against abuse.
• To comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use your ad-platform data to train third-party AI models.

We share data only with:

• Infrastructure providers that host the service (Railway, Netlify, and Postgres providers).
• The ad platforms you connect, when we act on your behalf through their APIs.
• Stripe, for payment processing, if you subscribe.
• Legal or law-enforcement bodies where required by valid legal process.

Account and ad-platform data is retained while your account is active. When you delete your account, we remove your personal data and revoke stored access tokens within 30 days, except records we must retain for legal, tax, or fraud-prevention reasons.

Depending on where you live (including under PIPEDA in Canada and the GDPR in the EEA/UK), you may have the right to access, correct, export, or delete your personal information, and to withdraw consent. To exercise these rights, email privacy@ripplestrategies.ca. You can also request deletion via our data deletion page.

We use TLS in transit, encryption at rest for tokens and credentials, and least-privilege access controls. No system is perfectly secure; please use a strong, unique password.

Ripple Ads is not directed to children under 16 and we do not knowingly collect their personal information.

If we materially change this policy we will update the “Last updated” date and, where appropriate, notify you by email or in-product.

Ripple Strategies Inc. — privacy@ripplestrategies.ca