← Back to Spendtrakkr

Privacy Policy

Last updated: 21 July 2026

1. Overview

Spendtrakkr ("we", "us", or "our") is a reporting and analytics platform. With your explicit permission, we connect to your advertising accounts (Google Ads and Meta Ads) via OAuth, retrieve your campaign performance data on a read-only basis, and present it back to you in dashboards and reports. This Privacy Policy explains what data we collect, how we use it, how we protect it, and your rights. It applies to spendtrakkr.com and the Spendtrakkr application.

2. Data We Collect

  • Account information: your name and email address, collected via our authentication provider (Clerk) when you create an account.
  • Advertising data: campaign names, statuses, budgets, and performance metrics (impressions, clicks, spend, conversions, and related insights) retrieved from Google Ads and Meta Ads. We access this only after you connect an account and grant permission, and only on a read-only basis.
  • Connection tokens: the OAuth access/refresh tokens issued by Google and Meta that allow us to fetch your reporting data. See section 5.
  • Usage data: basic information about how you use the platform (such as pages viewed and features used) to operate and improve the service.

3. How We Use Your Data

  • To display your campaign performance data in your dashboards and reports.
  • To generate summaries and insights about your advertising performance.
  • To sync your data periodically so your reporting stays up to date.
  • To provide support and communicate important service updates.

We never create, edit, pause, or otherwise manage your ad campaigns — our access is read-only. We do not sell your data, and we do not use your advertising data for any purpose other than providing the Spendtrakkr service to you. We do not use Google or Meta user data to train generalized AI/ML models.

4. Third-Party Services

We rely on the following providers to operate Spendtrakkr:

  • Clerk — authentication and user management.
  • Supabase — database hosting (PostgreSQL).
  • Railway & Vercel — application and API hosting.
  • Anthropic (Claude) — AI model used to generate written summaries of your data. Data sent for this purpose is not used to train its models.
  • Google Ads API — to retrieve your Google campaign data with your OAuth consent.
  • Meta Marketing API — to retrieve your Meta campaign data with your OAuth consent.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Our use of data from Meta's platforms complies with the Meta Platform Terms and Developer Policies.

5. Data Storage & Security

Your data is stored in a secured PostgreSQL database. The OAuth tokens that connect your ad accounts are encrypted at rest, and all data is transmitted over encrypted HTTPS connections. Access to connection tokens and account data is restricted to the systems that provide the service. We take reasonable technical and organizational measures to protect your information against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account information and advertising data for as long as your account is active and your ad accounts remain connected, so we can provide ongoing reporting. You can disconnect an ad account at any time, which stops further data collection. When you delete your account, or on request, we delete your personal data and the advertising data associated with your account.

7. Your Rights & Data Deletion

You have the right to:

  • Access the personal data we hold about you.
  • Request correction or deletion of your data.
  • Revoke Spendtrakkr's access to your Google Ads or Meta Ads accounts at any time — through your account's Settings page, or directly in your Google or Meta security settings.
  • Close your account and have your associated data removed.

To delete your data: email aanart@bazcreative.com.au with the subject "Delete my data", or disconnect your accounts and close your account from Settings. We will delete your personal and advertising data promptly and confirm once complete.

8. Cookies

We use essential cookies only — those required to keep you signed in. We do not use advertising or third-party tracking cookies.

9. Changes to This Policy

We may update this policy from time to time. We will update the "Last updated" date above and, for significant changes, notify you by email or an in-app notice.

10. Contact

If you have any questions about this Privacy Policy or your data, contact us at aanart@bazcreative.com.au or visit bazcreative.com.au.