Privacy Policy

Effective date: June 9, 2026

AdMetron (“we,” “us,” or “our”) operates the SaaS platform available at admetron.com and app.admetron.com (the “Service”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using the Service you agree to the practices described here.

1. Information We Collect

1.1 Account Information

When you sign up we collect your name, email address, password (stored as a salted hash by our authentication provider Clerk), profile photo if you provide one, and organization name.

1.2 Integration Data

When you connect an external account (such as Google Ads, Meta Ads, TikTok Ads, JobNimbus, AccuLynx, or Salesforce) we store OAuth access and refresh tokens needed to fetch your data on your behalf. Tokens are encrypted at rest using AES-256-GCM. We also store data returned by those services: ad accounts, campaigns, daily performance metrics (spend, impressions, clicks, conversions), leads, jobs, and revenue records.

1.3 Usage and Diagnostic Data

We collect logs of API requests, error reports, browser type, IP address, pages visited, and timestamps. We use these to detect abuse, troubleshoot issues, and improve performance.

1.4 Cookies

We use first-party cookies set by our authentication provider for session management. Analytics cookies (PostHog) are used to understand product usage in aggregate. We do not use cookies for advertising.

2. How We Use Information

  • To operate, maintain, and improve the Service.
  • To compute revenue attribution by correlating ad spend data with CRM revenue data inside your own workspace dashboard.
  • To send transactional emails (sign-up confirmation, billing, security alerts).
  • To respond to support requests.
  • To detect and prevent fraud, abuse, and security incidents.
  • To comply with legal obligations.

3. Google API Services User Data Policy

AdMetron's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We request the https://www.googleapis.com/auth/adwords scope solely to read your Google Ads campaign performance data and correlate it with revenue from your CRM inside your own AdMetron workspace.
  • We do not sell Google user data, transfer it to advertising platforms, or use it for targeted advertising.
  • We do not allow humans to read Google user data except (i) with your explicit consent for support, (ii) to comply with applicable law, (iii) to investigate abuse, or (iv) in aggregate, anonymized form for internal product analytics.
  • You can revoke our access at any time by disconnecting the integration from Settings → Integrations, or by revoking the authorization on Google's account permissions page.

4. Meta Platforms Data

When you connect Meta Ads we request the ads_read, ads_management, and business_management permissions only to read your campaign performance data. We never run ads on your behalf without your direct action, and we do not share Meta Platform data with third parties. You may revoke access at facebook.com/settings/business_tools.

5. Sharing

We do not sell, rent, or trade personal information. We share information only with:

  • Subprocessors who help us run the Service under contractual data-protection obligations: Vercel (hosting), Neon (PostgreSQL database), Clerk (authentication), PostHog (product analytics), Sentry (error tracking), Resend (transactional email), Cloudflare/Porkbun (DNS), and Stripe (billing, once enabled).
  • Legal authorities when required by valid legal process, or to protect rights, safety, or property of AdMetron, our users, or the public.
  • Acquirers in the event of a merger, acquisition, or asset sale, subject to this Privacy Policy continuing to apply.

6. Data Retention

We retain account data for as long as your account is active. Integration data (ad performance, CRM records) is retained while the corresponding integration is connected. After you delete your account, personal data is removed from production systems within 30 days, and from encrypted backups within 90 days, except where retention is required by law.

7. Security

  • OAuth tokens encrypted at rest with AES-256-GCM.
  • All traffic served over TLS 1.2+ with certificates from Let's Encrypt.
  • Authentication handled by Clerk with optional multi-factor authentication.
  • Database access restricted by IP allowlist and rotated credentials.
  • Continuous error and security monitoring through Sentry.

8. Your Rights

Depending on where you live you may have the right to access, correct, delete, or export the personal information we hold about you, and to object to or restrict certain processing. To exercise any of these rights, email privacy@admetron.com. We will respond within 30 days. California residents can also review our California Privacy Notice below. EU and UK residents may lodge a complaint with their local data protection authority.

9. California Privacy Notice

In the prior 12 months we collected the categories of personal information described in Section 1 for the business purposes described in Section 2. We do not sell personal information as defined by the CCPA. California residents have the right to know, delete, correct, and opt out of any sale of personal information. To exercise any right contact privacy@admetron.com.

10. International Transfers

We are based in the United States and our subprocessors operate primarily in the United States and European Union. If you are located outside the United States, your information will be transferred to and processed in the U.S. under appropriate safeguards including Standard Contractual Clauses where applicable.

11. Children

The Service is intended for businesses. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact privacy@admetron.com and we will delete it.

12. Changes

We may update this Privacy Policy from time to time. Material changes will be announced by email and the updated “Effective date” at the top of this page. Continued use of the Service after a change constitutes acceptance.

13. Contact

AdMetron
Email: privacy@admetron.com
General inquiries: hello@admetron.com