Privacy

This policy covers the Promotr website and app, and applications for early access to Promotr. Promotr is run by PROMOTR LLC.

If you have only applied for early access and have no Promotr account, the section that applies to you is Early-access applications.

Questions about this policy: email support@promotr.dev.

Only what you give it, or what it reads from accounts you connect:

• Your account. Your email address and password. The password is stored by Promotr’s sign-in provider as a one-way hash, never as text.
• Your organization. Its name, who belongs to it and each person’s role.
• Your business. What you tell Promotr about what you sell, who buys it, and your goals — for example what a new customer is worth to you.
• Your website, if you ask. Promotr fetches the website address you confirm — one page, without following links — and suggests facts about your business from it. It keeps those suggestions and short quoted passages as evidence, not the full page. Nothing is added to your profile until you accept it.
• Your ad accounts, if you connect them. See Meta and Google Ads data below.
• Payments, if you connect Stripe. Promotr reads your own Stripe charges and refunds to confirm revenue. It keeps six fields per charge: its ID, status, whether it was captured, amount, currency and time. It does not keep your customers’ names, emails, addresses or card details.
• Conversion events, if you send them. Your own server can tell Promotr that a conversion happened. Each event is an ID, a time and a test flag — nothing about the person who converted.
• Ad images you upload for a campaign Promotr sets up on Meta.
• A history of important actions — for example connecting an ad account, approving a change, or a change Promotr made — so an organization can see who did what.
• An early-access application, if you send one. It is kept apart from everything above — see Early-access applications.

When an organization owner connects an ad account, Promotr stores:

• the access the platform grants, encrypted (see Security);
• the ad account you choose: name, ID, status, currency and time zone. Promotr shows you the accounts you can choose from, but saves only the one you choose;
• campaigns in the account you choose: name, ID and status, and on Meta their objective;
• spend, impressions and clicks for those campaigns, as one 30-day total per campaign;
• on Meta, the changes Promotr noticed between checks — a campaign that started, stopped or changed status, or a read that failed.

Promotr does not read your audiences, your customer lists, or anything about the people who see your ads. It works with campaign-level figures only.

Meta. Promotr asks Meta for permission to read your ad accounts and campaigns (ads_read), to pause a campaign or create a new, paused campaign when an owner approves that exact change (ads_management), and to list the Pages you manage so you can pick one for an ad (pages_show_list). Once a day Promotr runs a read-only check of connected Meta accounts. It changes nothing.

Google Ads. Promotr asks Google for the Google Ads permission (https://www.googleapis.com/auth/adwords) and uses it to read the accounts you can access, their campaigns, and their spend, impressions and clicks. Promotr can make two kinds of change there, each only after an owner of your organization approves that specific change: pausing a campaign, and creating a new Search campaign with everything in it paused. Promotr then reads what it changed back from Google to confirm it. It changes nothing else in your Google Ads account, and it never switches anything on.

• to show you your advertising in one place, in plain language;
• to recommend what to change, with the evidence behind each recommendation;
• to prepare a new Meta or Google Search campaign plan for you to review;
• to carry out a Meta or Google Ads change an organization owner has approved, then check it worked;
• to keep your account secure and keep a record of important actions.

Promotr does not sell your data. It does not use your connected Meta or Google Ads data, or anything else in your account, to target advertising at you or anyone else.

Early-access applications are used only as described in Early-access applications. Their one promotional use is optional email updates about Promotr, for an applicant who asks for them and then confirms by email. Promotr sends no such email today.

Some of Promotr’s writing is done by an AI model from Anthropic. When that happens, Promotr sends Anthropic the information needed for that one task:

• Recommendations. Figures Promotr has already calculated from your connected Meta and Google Ads accounts — such as spend, impressions, clicks and campaign status — with campaign names removed. Your goal amounts are not sent, and revenue figures are reduced to whether there were any.
• Understanding your website. The text of the page Promotr fetched from your website.
• Planning a new Meta campaign. What you told Promotr about your offer and customer, the ad text you wrote, and settings such as the objective and countries. No spend amounts and no data from your ad accounts.
• Planning a new Google Search campaign. What you told Promotr about your business, your offer and customer, and the countries you chose, so the model can suggest keywords and ad text for you to review. No spend amounts and no data from your ad accounts.

The model only drafts. Numbers are calculated by Promotr, not by the model, and nothing the model writes can change an ad account — every change needs an owner’s approval and passes fixed rules first.

Promotr uses these services to run. Each one receives only what its job needs:

• Supabase — database, sign-in and file storage.
• Vercel — hosting, and scheduling the daily Meta check.
• Anthropic — the AI model described above.
• Firecrawl — fetching your website page when you ask Promotr to read it.
• Resend — sending sign-in and account emails.
• Meta, Google and Stripe — only if you connect them, and only to read or make the changes described on this page.
• Cloudflare — for early-access applications only, once applications open: receiving and storing them, and helping detect automated or abusive submissions. See Early-access applications.

Promotr uses data from Google APIs only to show you your Google Ads accounts, campaigns and results, to include those results in recommendations made for you, and — when an owner approves it — to pause a campaign or create a new, paused Search campaign, and confirm what Google reports. It does not use Google user data for advertising, does not sell it, and does not use it to judge anyone’s creditworthiness. People at Promotr do not read it, except with your permission, to investigate a problem or a security issue, or where the law requires it.

Everyone in the organization the Google Ads account is connected to can see that account’s campaigns and results in Promotr, and the recommendations made from them. Google Ads figures are shared with Anthropic only as part of generating your recommendations, as described above.

Promotr’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Applications are not open yet. The early-access form does not send or store anything today, and Promotr holds no applications. This section describes how an application is handled once applications open, so you can read it before you apply.

What you give, and why.

• your work email (required) — to contact you about your application, and so that each address applies once;
• your business name (required) — to know which business is applying;
• your name (optional) — to address you;
• where you advertise now — Meta, Google Ads or neither — and your biggest advertising challenge (both optional) — to decide whom to invite as places become available;
• that you have read this policy (required), recorded with the version of this policy and the time;
• whether you would like occasional news about Promotr by email (optional), with the time you said yes and, if you change your mind, the time you withdrew.

Promotr also records when the application arrived and when it is due to be deleted. It does not store your IP address, your browser details or the result of the automated check described next. Nothing you submit is checked automatically against who you are; before relying on an application, Promotr contacts the address it gives.

Who handles it. An application goes to a small, separate service Promotr runs on Cloudflare Workers, which stores it in that service’s own Cloudflare D1 database. Before the form is sent, Cloudflare Turnstile runs a check in your browser that helps detect automated or abusive submissions; it does not prove that a person sent the form. To do that, Cloudflare receives information about your browser and connection, as described in Cloudflare’s own privacy policy. Promotr checks that result once and does not keep it. Applications are not sent to Anthropic or any other AI service, are not sold, and are not shared with anyone else.

Kept apart from Promotr accounts. Applying creates no Promotr account and connects no Meta, Google Ads or other advertising account. The service that receives applications has no access to Promotr’s app, its database, customer accounts and organizations, or any connected ad account, and applications are not stored with them. Deleting a Promotr account does not delete an application, and deleting an application does not affect an account.

How long it is kept. An application is kept for 365 days from when it arrives, then deleted by an automatic daily clean-up. An application deleted earlier on request is removed from the live database straight away. Cloudflare D1 also keeps a short history of the database, which can restore a deleted application until that history ages out — within up to 7 days on Cloudflare’s free plan or 30 days on its paid plan, depending on the plan in use. A copy exported for review is separate: it does not age out, and is deleted by hand as described next.

Copies made for review. To decide on applications, Promotr may export some of them to a file kept in an encrypted location. An export is a separate copy the automatic clean-up does not reach. It is kept only while that decision needs it and then deleted by hand, and a deletion request also applies to any export that still exists.

Email news is optional and confirmed separately. Leaving the news box unticked makes no difference to your application. Ticking it does not by itself sign you up: anyone could type your address into the form, so a ticked box is not treated as your consent. Promotr sends no marketing email today. Before it sends you any, it first sends you an email that you have to act on to confirm (double opt-in). You can withdraw at any time; a withdrawal is recorded and respected without proof that the address is yours.

Correcting, deleting or withdrawing. There is no self-serve control for an application. You ask by email to Promotr’s support address, support@promotr.dev. Promotr deletes an application, or corrects it by deleting it so you can apply again, only after a reply from the address the application was made with, because anyone can type any address into the form. A request to stop email news needs no such reply.

Promotr sets cookies only to keep you signed in and to finish confirming your email or resetting your password. It uses no analytics, advertising or tracking cookies, and loads no third-party trackers.

Once early-access applications open, the application form also loads Cloudflare Turnstile, the check described in Early-access applications. Promotr uses it only to help detect automated or abusive submissions.

Access granted by Meta, Google and Stripe is encrypted with AES-256-GCM before it is stored, in a place the app’s ordinary database access cannot read. Each organization’s data is separated at the database level, so one organization cannot read another’s. No system is perfectly secure. To report a security problem, use the Contact page.

For your account and organization, Promotr has no fixed retention period. It keeps your data while your account and organization exist, and deletes it when you remove it:

• Disconnecting Meta or Google deletes the stored access and the ad account, campaign, delivery and monitoring data Promotr copied from that platform, straight away. Recommendations and campaign plans already made, and the record of changes Promotr made, stay until the organization is deleted.
• If you remove Promotr in your Meta or Google settings, or the platform stops accepting Promotr’s access, what Promotr already copied stays until you disconnect or delete your account. So does the stored access, which the platform will no longer accept.
• Deleting your account deletes it straight away, with no waiting period, along with any organization where you are the only member.
• Disconnecting Stripe deletes the stored access. Revenue Promotr already confirmed stays in your organization.
• Removing an ad image in Promotr deletes the file. Deleting your account also deletes the image files of every organization deleted with it.
• The history of important actions is kept for organizations that continue after you leave, with your name removed from it.

The data deletion page explains each step, and what each one does not remove. Early-access applications follow their own schedule, described in Early-access applications.

• You can see and correct your business details in Promotr at any time.
• You can disconnect Meta, Google Ads or Stripe at any time.
• You can delete your account at any time from your account page.
• You can remove Promotr’s access directly in your Meta or Google settings.
• If you applied for early access, you can ask for your application to be corrected or deleted, and stop email news, as described in Early-access applications.

For anything you cannot do yourself in Promotr, email support@promotr.dev.

When Promotr changes what it collects or how it uses it, this page changes first and the date at the top changes with it.