Privacy Policy

1. Information We Collect

When you create an account, we collect your email address and password (stored securely using bcrypt hashing). During onboarding, we collect business information you provide, including your business name, website URL, industry vertical, country, service area, and advertising budget.

When you connect your advertising accounts, we store OAuth tokens issued by Google and Meta to manage campaigns on your behalf. We do not store your Google or Meta passwords.

2. How We Use Your Information

We use your information to:

• Create and manage your Anolema account
• Set up and optimise advertising campaigns on Google Ads and Meta Ads
• Deliver conversion events to Google and Meta via server-side APIs
• Monitor campaign performance and adjust budget allocation
• Communicate with you about your account and campaigns

3. Tracking & Conversion Data

Anolema provides a first-party tracking script that you install on your website. This script captures conversion events (such as leads and purchases) along with hashed personal information (email, phone number) for attribution purposes. This data is delivered server-to-server to Google Enhanced Conversions and Meta Conversions API. We do not use third-party cookies or browser-based pixels.

4. Data Sharing

We share conversion event data with Google and Meta solely for the purpose of advertising attribution and optimisation, as directed by you when connecting your accounts. We do not sell your data to any third parties.

5. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), bcrypt password hashing, and JWT-based authentication. OAuth tokens are stored securely and used only to perform authorised actions on your advertising accounts.

6. Data Retention

We retain your account data for as long as your account is active. Conversion event data is retained for up to 90 days for reporting purposes. You may request deletion of your account and associated data at any time by contacting us.

7. Your Rights

You have the right to access, correct, or delete your personal information. You can disconnect your Google and Meta accounts at any time, which will revoke our access to those platforms. To exercise any of these rights, please contact us at the email below.

8. Deleting Your Data

You can remove our access to your advertising accounts yourself at any time, and you can ask us to delete everything we hold about you. Our data deletion page sets out how to do both, what is removed, and what stays in your own advertising accounts. We confirm requests within 2 business days and complete them within 30 days.

9. Contact

If you have questions about this privacy policy, please contact us at sascha@anolema.com.