Security
Enterprise-grade security
Your marketing data is sensitive. We protect it with encryption, strict access controls, and transparent data handling practices.
Data Encryption
- ✓AES-256 encryption for all data at rest
- ✓TLS 1.3 for all data in transit
- ✓Encrypted database backups with geo-redundancy
- ✓API keys and tokens stored in encrypted vaults
Access Controls
- ✓Role-based access control (RBAC) for all team members
- ✓Multi-factor authentication (MFA) support
- ✓SSO integration for enterprise customers
- ✓Granular permissions per workspace and feature
- ✓Session management with automatic timeout
Infrastructure
- ✓Hosted on Cloudflare's global edge network
- ✓Automated security patching and updates
- ✓DDoS protection and rate limiting
- ✓99.9% uptime SLA for enterprise customers
Compliance
- ✓GDPR compliant - full data subject rights support
- ✓CCPA compliant - California consumer privacy rights
- ✓Regular third-party security audits
- ✓Data Processing Agreements (DPA) available
Data Handling
- ✓We never sell your data to third parties
- ✓Data deletion within 30 days of account closure on request
- ✓Minimal data collection - we only store what's needed
- ✓Full data export available at any time
- ✓Transparent data processing documentation
Security FAQ
Where is my data stored?
Your data is stored on Cloudflare's global infrastructure with encrypted backups. Data residency options are available for enterprise customers who require specific geographic storage.
Do you have access to my ad account credentials?
No. We use OAuth tokens provided by Meta, Google, and TikTok. We never see or store your ad platform passwords. Tokens can be revoked at any time from your platform settings.
Can I delete my data?
Yes. You can request full data deletion at any time. We process deletion requests within 30 days and provide confirmation once complete.
Do you use my data to train AI models?
Your campaign data is used only to optimize your campaigns. We do not use individual customer data to train shared AI models. Your data stays yours.
Is SOC 2 certification complete?
SOC 2 Type II certification is currently in progress. We expect to complete the audit by Q3 2026. Enterprise customers can request our current security documentation.
Do you offer a DPA?
Yes. Data Processing Agreements are available for all customers. Enterprise customers receive a DPA as part of their onboarding. Contact us to request one.
Questions about security?
Our team is happy to walk through our security practices and provide documentation.
Contact Us