Privacy Policy

We collect information you provide directly when you submit our onboarding application form:

• Company or business name
• Contact name
• Email address
• Phone number
• Description of your target services or campaigns

We may also collect limited technical data automatically, such as your IP address, browser type, and pages visited, via Cloudflare's infrastructure for security and performance purposes.

We use the information you provide solely to:

• Evaluate your onboarding application and contact you about our services
• Set up and manage advertising campaigns on your behalf on Meta (Facebook/Instagram) and Google Ads
• Send you performance updates, invoices, and service-related communications
• Comply with legal obligations

We do not use your personal information for marketing to third parties, sell it, or use it for purposes other than those listed above.

KineticAds uses Google OAuth and Google API Services to manage advertising campaigns on behalf of our clients. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect a Google account to KineticAds, we may access:

• Your Google Ads account data (campaigns, ad spend, performance metrics)
• Basic Google profile information (name and email) for account identification

We use this data only to manage and optimize your advertising campaigns as requested. We do not transfer Google user data to third parties except as necessary to provide these services (e.g., Meta's API for cross-platform campaigns), with your consent, or as required by law.

We do not use Google user data for serving advertisements unrelated to your campaigns, for building user profiles beyond campaign management, or for any AI/ML training purposes.

You may revoke KineticAds' access to your Google account at any time via Google Account Permissions.

We do not sell, rent, or trade your personal information. We may share it only with:

• Service providers — Cloudflare (infrastructure and email routing), Resend (transactional email delivery), Railway (cloud hosting). These providers are contractually bound to protect your data and use it only to perform services for us.
• Ad platforms — Meta and Google, as required to run your campaigns.
• Legal requirements — When required by law, court order, or governmental authority.

We retain your personal information for as long as our business relationship is active and for up to 3 years thereafter, or as required by applicable law. You may request deletion at any time by contacting us (see Section 8).

We use industry-standard security measures including encrypted transmission (HTTPS/TLS), server-side storage on Railway's isolated infrastructure, and restricted staff access. No method of transmission or storage is 100% secure, but we take your data protection seriously.

Depending on your jurisdiction, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate information
• Request deletion of your data
• Withdraw consent for us to use your data
• Opt out of future communications

Residents of Canada (PIPEDA), the European Union (GDPR), California (CCPA), and other jurisdictions with applicable privacy laws may exercise these rights by contacting us directly.

For privacy questions, data requests, or to exercise your rights, please contact:

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our services after any changes constitutes acceptance of the revised policy.