Privacy Policy

Last updated: 30 May 2026.

What data we collect

When you use the dashboard, you may provide us with the following information:

• Account data such as name, email address, password hash, tenant or workspace details, and plan status.
• Ad platform connection data, including OAuth tokens or API credentials you provide to connect Google Ads, Meta Ads, TikTok Ads, LinkedIn Ads, or OpenAI Ads.
• Ad account identifiers, campaign identifiers, reporting metrics, and sync status.
• Technical data such as IP address, browser type, device information, logs, and basic usage events needed to operate and protect the service.

Google user data

If you connect Google Ads, we request only the Google Ads scope required to retrieve ad account data and performance metrics. We use Google user data solely to provide the analytics, reporting, account-connection, and data-sync features the user requests.

We do not sell Google user data. We do not use Google user data for advertising, profiling, or other unrelated purposes. Access and refresh tokens are encrypted before storage and used only to make authorized API requests.

How we use information

We use the collected information to:

• Create and manage user accounts and workspaces.
• Connect ad platforms and sync reporting data.
• Display the dashboards, metrics, alerts, and exports users request.
• Maintain security, prevent abuse, fix errors, and improve service reliability.
• Notify users about service updates and send operational, billing, or security messages.

Sharing and disclosure

We do not sell personal data. We may share limited information with service providers who help us host, secure, monitor, or operate the dashboard. We may disclose information where required by law, to protect rights and safety, or to enforce our terms.

Data storage and protection

We apply reasonable administrative, technical, and organizational measures to protect user data. Sensitive platform credentials are encrypted before storage. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Data retention

We retain data while an account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Users can disconnect ad platforms at any time, which removes the stored connection for that platform.

Upon a verified account-deletion request, we will delete or anonymize your personal data within 30 days. Aggregated, anonymized reporting data that cannot be linked to you may be retained after this period. Backups are purged on a rolling 30-day schedule after deletion.

Local storage and session data

The dashboard stores the session authentication token and your current plan identifier in the browser's localStorage under the keys cl360_token and cl360_plan. These values are used solely to maintain your login session and are not shared with third parties. They are removed automatically at sign-out. We do not use cookies for authentication or tracking.

User choices

You can disconnect platform integrations in the dashboard, revoke access directly in the connected platform, or request account or data deletion by contacting us.

Governing law

This Privacy Policy is governed by the laws of Ukraine. Any disputes arising from this policy are resolved in the courts of Kyiv, Ukraine, unless otherwise required by the applicable law of your jurisdiction. If you are located in the European Union, you also have the right to lodge a complaint with your local data protection authority.

Contact

For privacy questions or data requests, contact us at hello@convertlab360.com.

See also: Terms of Service · Refund Policy · Українська версія