Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account, use our services, or communicate with us:

• Account information: Name, email address, company name, and authentication credentials
• Ad platform data: Campaign data, performance metrics, and account information accessed via OAuth connections to Google Ads, Meta Ads, and GA4
• Audit uploads: CSV files containing campaign data you voluntarily upload for analysis
• Usage data: Information about how you use AcumenLab, including features accessed, AI chat interactions, and time spent in the platform
• Payment information: Billing details processed securely through Stripe (we do not store credit card numbers)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve AcumenLab services
• Generate AI-powered insights, audits, reports, and recommendations based on your campaign data
• Monitor your campaigns and send alerts when performance thresholds are exceeded
• Process payments and manage your subscription
• Respond to your questions and provide customer support
• Send you technical notices, updates, security alerts, and administrative messages
• Improve our AI models and platform capabilities (using anonymised, aggregate data only)

3. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL database) with encryption at rest and in transit. Our infrastructure is hosted in EU/UK data centres. We implement industry-standard security measures including:

• Encrypted data transmission (TLS/SSL)
• Encrypted data storage
• OAuth token encryption
• Regular security audits and monitoring
• Role-based access controls

4. Third-Party Services

We use the following third-party services to provide AcumenLab:

• Clerk: Authentication and user management
• Stripe: Payment processing and billing
• Anthropic (Claude): AI-powered analysis and insights
• Resend: Transactional email delivery
• Vercel: Hosting and infrastructure
• Google APIs: OAuth access to Google Ads and GA4 data
• Meta APIs: OAuth access to Meta Ads data

Each service processes data according to their own privacy policies. We only share the minimum data necessary to provide our services.

5. Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have certain data protection rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (right to be forgotten)
• Portability: Export your data in a machine-readable format
• Objection: Object to certain data processing activities
• Restriction: Request restricted processing of your data

To exercise these rights, contact us at privacy@acumenlab.ai.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or compliance purposes. Campaign data accessed via OAuth is retained according to your subscription plan and can be deleted at any time from your account settings.

7. OAuth and Ad Platform Data

When you connect your Google Ads, Meta Ads, or GA4 accounts:

• We request read-only access to your campaign data
• We never modify, pause, or make changes to your ad accounts
• OAuth tokens are encrypted and stored securely
• You can revoke access at any time through your account settings
• We only access the data necessary to provide insights and monitoring

8. Cookies and Tracking

AcumenLab uses essential session cookies to maintain your login state and provide core functionality. We do not use third-party tracking cookies or analytics that track you across other websites. Your browser's "Do Not Track" settings are respected.

9. Contact Us

For privacy-related questions, concerns, or requests to exercise your data protection rights, please contact:

Email: privacy@acumenlab.ai
Address: Digital Growth Labs, London, United Kingdom

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and display a notice on the platform. Your continued use of AcumenLab after changes are posted constitutes acceptance of the updated policy.