Privacy Policy

• Your account. Your email address, and either a password or your Google account. A password is stored only as a salted scrypt hash, so we cannot read it. With Continue with Google we receive your Google account ID and email address.
• Your sites. The website addresses you add, the public text of those pages, which we fetch, the business details and ad drafts we produce from them, and any figures you enter, such as your margin or order value.
• Ad accounts you connect. When you connect Meta, Google Ads, TikTok or Pinterest, that platform gives us a read-only access token. We encrypt it (AES-256-GCM) before storing it and use it only to read your ad performance. We never receive your password for those platforms.
• Billing. If you subscribe, Stripe takes the payment. We keep your Stripe customer and subscription IDs, your plan, its status and its renewal date. We never see or store your card details.
• Technical data. A cookie that keeps you signed in, and a short-lived cookie that protects Google sign-in. Our host keeps standard server logs, such as IP address and the page requested, for security and debugging.

• No advertising or analytics trackers run on this site.
• We do not sell or rent your data, and we do not share it for advertising.
• We do not use your data to train AI models.
• We do not change your campaigns or spend your money. Ad-account access is read-only, and every recommendation waits for your approval.

Continue with Google asks only for your basic profile (the openid, email and profile scopes). We use your Google account ID and email address only to create your account and sign you in. If you connect Google Ads, we use that access only to report on your own campaigns back to you.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and no person reads it except to keep the service secure, with your permission, or where the law requires it.

• Vercel hosts the site and serves every request.
• Neon stores the account database, in the United States.
• Anthropic provides the AI model that reads your site’s public text and drafts the ads. We send it page text and business details, never your password or tokens. Under Anthropic’s commercial terms, data sent through its API is not used to train its models.
• Stripe processes subscription payments.
• Meta, Google, TikTok and Pinterest, only the ones you choose to connect, and only through their own sign-in.

We keep your account and sites until you delete them or ask us to. Disconnecting an ad account deletes its stored token, and removing a site deletes its connections. Our host keeps server logs for its standard retention period.

• Disconnect an ad account from that site’s Connect page at any time. You can also revoke access in the platform’s own settings.
• Remove a site from Your sites.
• To delete your account, or to get a copy of your data, email diporusaconsult@gmail.com from the address on your account. We delete the account, its sites and its connections within 30 days.

Passwords are hashed, ad-account tokens are encrypted, every page is served over HTTPS, and the database connection checks the server’s certificate. No system is perfectly secure. If we learn of a breach that affects your data, we will tell you.

Iinekez Ads is a tool for businesses and is not meant for anyone under 16.

If this policy changes, we update this page and its date. If a change is significant, we email you. Questions: diporusaconsult@gmail.com.