Privacy Policy

Last updated: November 4, 2026

This policy explains what data ControlSE ("the Platform", "we") collects when you use the service, why we use it and how we protect it.

1. Data controller

2. Data we collect

• Account information: name, email address, a hashed version of your password and company details.
• Data from connected ad accounts: when you connect Google Ads or Meta (Facebook / Instagram), and only within the permissions you grant: ad accounts, campaigns, ad sets / ad groups, ads, budgets, targeting settings and performance metrics (impressions, clicks, spend, conversions).
• Access tokens: the access tokens Google and Meta issue to us. They are stored encrypted; we never see your password.
• Click protection data: if you add our tracking code to your website, the IP address, browser/device information, ad click IDs (gclid, fbclid), visit duration and page interaction of visitors who click your ads. This data is used only to detect fraudulent and suspicious clicks and to measure conversions.
• Usage logs: sign-in logs, IP addresses and a record of actions taken in the Platform, for security purposes.

3. How we use data

• To show, analyze and report on your ad accounts in one dashboard,
• To manage campaign, budget and ad settings with your approval or according to rules you set,
• To detect and block fraudulent and suspicious clicks and notify you by email,
• To generate AI-assisted recommendations and ad copy,
• To keep the service secure and meet legal obligations.

Legal bases: performance of a contract, our legitimate interests and, where required, your consent.

4. Google and Meta data

ControlSE's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data received from the Meta platform is processed in line with the Meta Platform Terms.

• We do not sell this data or share it with third parties for advertising.
• We use it only to provide the service to you; it is not used to serve other customers or to train general-purpose AI models.
• Humans do not read this data unless you ask us for support, it is needed for security, or the law requires it.
• You can disconnect an account at any time; when you do, its access tokens are deleted.

5. Where data is shared

• Google and Meta: only the relevant platform, to perform actions in your ad accounts.
• AI providers (Groq, Google Gemini): campaign data needed to generate recommendations and reports, limited so that it does not include personal data about your customers.
• Hosting: data is stored on our own servers and backed up in encrypted form.
• Competent public authorities, when legally required.

6. Retention

Account data is kept while your account is open. When you close your account or disconnect an ad account, the related data is deleted within 30 days at the latest. Click protection records are kept for up to 12 months. Records we are legally required to retain are kept for the required period.

7. Security

Connections are encrypted with SSL, access tokens are stored encrypted in the database, server access is restricted and backups are encrypted.

8. Your rights

You have the right to know whether your data is processed, to request information, to have it corrected or deleted, to object to processing and, where applicable, to data portability. Send requests to support@controlse.com; we reply within 30 days. To delete your data, see the Data Deletion page.

9. Cookies

The Platform uses strictly necessary cookies to keep you signed in, remember your language and keep the service secure. We do not use third-party advertising or tracking cookies.

10. Changes

We may update this policy. If we make significant changes, we will notify you by email or in the Platform.