Privacy Policy

We use the information we collect to:

• Process and respond to your access requests and inquiries
• Provide, maintain, and improve our services
• Send you updates, marketing communications, and other information that may be of interest to you
• Analyze usage patterns and optimize our platform
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our terms

We do not sell your personal information. We may share your information with:

• Service providers who assist us in operating our platform and conducting our business
• Professional advisors such as lawyers, auditors, and consultants
• Law enforcement or government agencies when required by law or to protect our rights
• Other parties in connection with a merger, acquisition, or sale of assets

If you connect a Meta ad account to Sephiro, you or your business grant Sephiro access through Facebook Login for Business. Sephiro only receives access to the assets you select and the permissions you approve.

• Ad accounts (identifier, name, currency and status)
• Campaigns, ad sets and ads, including their budgets, status, targeting and placement settings, and creatives
• Performance insights for those campaigns, ad sets and ads, such as spend, impressions, clicks and conversions
• Facebook Pages and linked Instagram business accounts you use to publish ads
• Pixels and datasets used for conversion reporting
• The name and app-scoped identifier of the person who connected the account, and the access token issued by Meta

We never receive or store your Facebook or Instagram password. We do not access personal profiles of the people who see your ads: performance insights are aggregated. We do not access Page posts, comments or messages, or friend lists.

• Disconnect Meta in the Sephiro app under Settings → Connectors. This deletes the stored access token and stops further access.
• Remove the Sephiro app from Facebook under Settings & Privacy → Settings → Business Integrations. Meta then sends us a data deletion request, which we process automatically, and you receive a confirmation code and a link to check its status.
• Email privacy@sephiro.ai to request deletion of your Meta data or your entire Sephiro account. We complete deletion within 30 days.

Full instructions are available at sephiro.ai/data-deletion.

If you connect a Google account to Sephiro (app.sephiro.ai), you grant Sephiro access through Google OAuth. Sephiro only receives the permissions (scopes) you approve on Google's consent screen, and we never receive or store your Google password.

• Google Ads (https://www.googleapis.com/auth/adwords): we read performance data for your campaigns, ad groups, keywords, search terms and assets to show it in Sonar, our advertising analytics. Sephiro changes your Google Ads account (budgets, pausing or enabling campaigns, ad groups or keywords, bids, negative keywords, placement exclusions and network settings) only after you approve each proposed change in Sephiro.
• Google Merchant Center (https://www.googleapis.com/auth/content): we read product and feed status and product performance to power Beacon, our Google Shopping optimization tool. Sephiro applies product or feed changes only after you approve them.
• Google Analytics (https://www.googleapis.com/auth/analytics.readonly): read-only access to your Analytics reports, used for performance analytics.
• Google Drive (https://www.googleapis.com/auth/drive.file): access only to files Sephiro creates or that you open with Sephiro, used to save the creatives you generate to your Drive. We cannot see any other files in your Drive.
• Google Search Console (https://www.googleapis.com/auth/webmasters.readonly): read-only access to search performance for your verified sites, used in Beacon.
• Basic profile and email address (openid, email, profile): used to identify which Google account is connected.

In particular:

• We use Google user data only to provide and improve the user-facing features described above.
• We do not sell Google user data.
• We do not use Google user data to serve advertisements, including retargeting, personalized or interest-based advertising.
• We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.
• We do not allow humans to read Google user data unless you give us your affirmative consent for specific data, it is necessary for security purposes such as investigating abuse, it is necessary to comply with applicable law, or the data is aggregated and anonymized and used for internal operations.
• We transfer Google user data to others only as necessary to provide or improve the user-facing features described above (for example, to our hosting and database providers acting on our behalf), for security purposes, or to comply with applicable law.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. When we no longer need your information, we will securely delete or anonymize it.

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access and receive a copy of your personal information
• The right to correct inaccurate or incomplete information
• The right to request deletion of your personal information
• The right to object to or restrict certain processing activities
• The right to data portability
• The right to withdraw consent at any time

To exercise any of these rights, please contact us using the information provided below.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected.

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information promptly.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: