Operator review in progress: the legal controller identity, verified privacy contact, processing locations and retention procedures must be confirmed before public launch. Paid activation remains closed.

At Tera Ads, your privacy is fundamental to how we build our product. This Privacy Policy describes how the Tera Ads product ("Tera Ads," "we," "us") collects, uses, stores, and protects your information when you use our platform.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, and authentication credentials. Account registration currently uses email and password; Google and Apple account sign-in are not enabled.

1.2 Billing Information

Paid checkout is not currently enabled. Selecting a plan stores a preference, not card details or a payment authorization. A payment provider and its data handling will be disclosed before checkout opens.

1.3 Ad Account Data

When you connect your accounts, we access:

Facebook Ads: Campaign data, ad set performance, creative metrics, audience insights, and spend data via the Meta Marketing API
Shopify: Order data, product catalog, revenue figures, and customer purchase patterns via the Shopify Admin API
Google Analytics (optional): Traffic and conversion data, GA4 account summaries, and property metadata for cross-validation
Google Ads (optional): Customer account IDs, campaign, ad group, ad, keyword, search term, shopping product, spend, conversion, and delivery status data via the Google Ads API. The current advertised plans do not include autonomous changes to campaign status, budgets or bids.

1.4 Usage Data

We collect anonymized usage data including pages viewed, features used, dashboard interactions, and session duration to improve our product experience.

1.5 Device & Browser Data

We collect browser type, operating system, IP address, and device identifiers for security, fraud prevention, and service optimization.

2. How We Use Your Information

Service Delivery: Powering the Tera Ads AI engine, generating insights and preparing reports. Owner email and WhatsApp updates require explicit consent and configured delivery providers.
Attribution: Cross-referencing ad platform data with e-commerce data for reporting. Attributed sales and modeled margins are not verified collected cash or net profit.
Google Ads and Analytics integrations: Listing the Google Ads accounts and GA4 properties you can access, importing performance reports, reconciling paid traffic with Shopify orders, and showing optimization recommendations or approved actions in your dashboard
AI Training: Your individual data is never used to train AI models for other users. We only use anonymized, aggregated patterns to improve our algorithms. Google Ads and Google Analytics user data is excluded from generalized model training and is used only for user-facing Tera Ads features you authorize.
Communication: Sending transactional emails, Telegram notifications, performance alerts, and occasional product updates
Support: Responding to your inquiries and resolving technical issues
Legal Compliance: Meeting regulatory requirements including tax, accounting, and legal obligations

3. Data Storage & Security

3.1 Infrastructure

The hosted service uses HTTPS. Connected-platform credentials are encrypted before storage. Specific storage locations, subprocessors and security controls are subject to operator verification; this page does not claim a security certification or blanket encryption guarantee.

OAuth access tokens and refresh tokens for connected platforms, including Google Ads and Google Analytics, are encrypted before storage and used only to provide the integration you authorized. You can revoke Google access from your Google Account permissions page or by disconnecting the integration in Tera Ads.

3.2 Access Controls

Access to user data is restricted to authorized personnel only, on a need-to-know basis. Application authentication and business-scoped access checks protect customer workspaces. A complete security-control assessment is required before wider public launch.

3.3 Third-Party Processors

We use the following third-party services that may process your data:

Hostinger — Current application hosting
OpenAI — Configured AI analysis of supplied evidence; customer API access must be separately enabled
Meta (Facebook) APIs — Ad data retrieval
Shopify APIs — E-commerce data retrieval
Google Ads API — Ad account reporting and approved optimization actions
Google Analytics APIs — Analytics reporting and property selection
Email and WhatsApp providers — Only when configured and the owner has opted in

4. Data Sharing

We do not sell, rent, or trade your personal or business data. We share data only in these circumstances:

With your consent: When you explicitly authorize sharing
Service providers: Third-party processors necessary for operating the Service (listed above), bound by data processing agreements
Legal requirements: When required by law, regulation, legal process, or governmental request
Business transfer: In the event of a merger, acquisition, or asset sale, with advance notice to affected users

We do not sell Google user data, use it for advertising, or transfer it to third parties except as necessary to provide and secure the Tera Ads service, comply with law, or honor your explicit instructions. We do not use Google user data to train generalized AI models.

5. Google API Services User Data

Tera Ads's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

For Google integrations, Tera Ads requests only the scopes needed for:

Google Ads account reporting and user-approved or rule-bounded campaign management through the Google Ads API
Read-only Google Analytics property selection and reporting through Google Analytics APIs

Disconnecting a Google integration stops future imports and approved actions. Account deletion removes stored OAuth tokens and connected Google data according to the retention schedule below, unless a legal obligation requires a shorter or longer period.

6. Data Retention

Active accounts: Data is retained for the duration of your subscription plus 90 days
Cancelled accounts: Data is retained for 30 days post-cancellation to allow for reactivation, then permanently deleted
Account deletion: Upon request, all personal data is deleted within 30 days. Anonymized, aggregated data may be retained indefinitely
Legal holds: Data subject to legal obligations may be retained for the legally required period

7. Your Rights

In accordance with applicable data protection laws (including the Information Technology Act, 2000 and its amendments), you have the right to:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data (subject to legal retention requirements)
Portability: Request your data in a machine-readable format
Withdrawal: Withdraw consent for data processing at any time (this may affect Service functionality)
Objection: Object to data processing for specific purposes

A verified privacy request contact is awaiting operator confirmation. Do not send sensitive data to unverified Tera Ads-branded addresses. Public launch requires a working request and deletion process.

8. Cookies & Tracking

We use essential cookies for:

Session management and authentication
Security and fraud prevention
User preferences and settings

We use optional analytics cookies (which you can decline) to understand how the platform is used and improve the experience. We do not use advertising or third-party tracking cookies.

9. Children's Privacy

Tera Ads is a business-to-business service and is not directed at individuals under 18 years of age. We do not knowingly collect data from minors. If we discover that a minor has provided personal data, we will delete it promptly.

10. International Data Transfers

Hosting and model providers may process data in different countries. Verified processing locations and applicable safeguards must be documented by the operator before public launch.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notification at least 14 days before taking effect. The "Last updated" date at the top reflects the most recent revision.

12. Contact Us

For privacy-related questions or requests:

Verified privacy contact and controller address: awaiting operator confirmation.