Privacy Policy

Information we collect

Account information. Your email address, a password (stored only as a one-way hash), your business name, your website address and your language preference. If you sign in with Google, we receive your name, email address and a Google account identifier.

Business and brand information. When you scan your website, we read its public pages and extract your logo, colors, fonts, product and service descriptions, offers and images. You can also upload a logo. You can edit or remove this information at any time.

Connected advertising accounts. When you connect Google (Google Ads and Google Tag Manager) or Meta (Facebook and Instagram ads), we receive access tokens that let us act on those accounts on your behalf, and we read the data needed to provide the Service, such as account names, currencies, campaigns, ads, budgets, audiences, tags and performance metrics.

Content you create. Ad designs, campaign plans, headlines, keywords and other content generated with or edited in the Service.

Usage and technical data. Log data such as IP address, browser type, pages visited, actions taken and timestamps, used for security, debugging and to measure the cost of the Service.

Payment information. When paid plans are available, payments will be processed by PayPal. We will not store your full card details.

How we use information

• To provide the Service: scan your website, design ads, plan campaigns and, only after your approval, create or update campaigns and tags in your connected accounts.
• To show you performance reports and recommendations about your own campaigns.
• To send you service emails, such as email verification and password reset messages.
• To keep the Service secure, prevent abuse and enforce our Terms of Service.
• To comply with legal obligations.

We do not use your data to show you ads, and we do not sell or share your personal information as those terms are defined under California law.

Google user data

WhyAds' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We access Google Ads and Google Tag Manager data only to provide the features you use in WhyAds: listing your accounts and containers, creating and managing the campaigns, conversion actions and tags you approve, and reading performance metrics for your reports. We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models, we do not use it for advertising, and we do not allow humans to read it except with your consent, for security purposes, to comply with the law, or when the data is aggregated and anonymized for internal operations.

You can revoke WhyAds' access at any time from the app or from your Google Account permissions.

Meta user data

If you connect Meta, we use the data and permissions granted through Facebook Login for Business only to list your ad accounts and pages, create and manage the ads you approve, and read their results. You can remove WhyAds from your Facebook settings under Business Integrations at any time. See our Data Deletion page for how to delete your data.

Artificial intelligence

WhyAds uses AI models to analyze your website, write ad copy and campaign plans, and generate images. To do this, we send the necessary content (for example, text and images from your website and your brand profile) to AI providers that process it on our behalf under their terms for business customers, which do not allow them to use it to train their models. AI-generated content can contain mistakes, so you can review and edit everything before it is published.

How we share information

We share information only with service providers that help us run the Service, under contracts that limit their use of it:

• Hosting and infrastructure: Hostinger (servers in the United States) and Cloudflare (network and security).
• AI providers: Anthropic, OpenAI and Google (Gemini).
• Email delivery: Resend.
• Payments, when available: PayPal.
• Advertising platforms you connect: Google and Meta, to carry out the actions you approve.

We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a merger or acquisition, in which case this policy will continue to apply.

Cookies

The application uses a strictly necessary session cookie to keep you signed in and short-lived cookies to protect sign-in flows. It stores your language choice in your browser. We do not use advertising or cross-site tracking cookies. This website loads fonts from Google Fonts, which receives your IP address. We count visits to this website with Cloudflare Web Analytics, which does not use cookies or track you across sites.

Data retention

We keep your information while your account is active. If you delete your account, we delete your personal information and content within 30 days, except records we must keep to comply with legal, tax or accounting obligations, or to resolve disputes. Database backups are deleted within 14 additional days.

Security

Data is encrypted in transit with TLS. Access tokens for your connected accounts are encrypted at rest with AES-256-GCM. Passwords are stored as one-way hashes. Session tokens are stored only as hashes. No method of storage or transmission is completely secure, but we work to protect your information and will notify you of a breach as required by law.

Your rights

You can access, correct and delete your information, and download a copy of it, by writing to support@whyads.app. Many changes can also be made directly in the app.

California residents. Under the CCPA, as amended by the CPRA, you have the right to know what personal information we collect and how we use it, to access, correct and delete it, and to opt out of its sale or sharing. We do not sell or share personal information, and we do not use sensitive personal information to infer characteristics about you. We will not discriminate against you for exercising your rights. You can use an authorized agent to make a request; we may need to verify your identity before responding.

International transfers

WhyAds is operated from Chile and our servers are located in the United States. Your information may be processed in countries other than yours, with safeguards appropriate to the applicable law.

Children

The Service is intended for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.

Changes to this policy

We may update this policy. If the changes are material, we will notify you by email or in the app before they take effect. The date at the top shows the latest version.

Contact

Soluciones Tecnologicas Why SpA, Chile. Email: support@whyads.app.