Privacy Policy

Who we are

Gandurr ("we", "us") is an advertising intelligence platform that helps marketing agencies and businesses view and analyze the performance of their advertising campaigns across platforms such as Meta Ads and Google Ads. You can contact us at sam@gandurr.com.

Information we collect

Account information. When you create an account we collect your name, email address, and organization details.

Advertising data. When you connect an advertising platform (such as Google Ads or Meta Ads), we access, with your explicit authorization via OAuth, your advertising account metadata, campaign structure (campaigns, ad sets/ad groups, ads), and performance metrics (impressions, clicks, spend, conversions, and conversion value). We access this data in read-only form. We do not create, modify, or delete campaigns or any other assets in your advertising accounts.

Usage data. We collect basic product usage events (such as page views and feature usage) to improve the service.

How we use your data

• To display your advertising performance in dashboards and reports available to you and the teammates you authorize.
• To generate analysis of your advertising data, including AI-assisted summaries and insights. AI analysis only references metrics from your connected accounts; it is not used to train AI models.
• To send you reports, digests, and alerts that you configure.
• To operate, maintain, and improve the service.

We do not sell your data. We do not share your advertising data with third parties except the service providers listed below, and we do not use it for advertising targeting of any kind.

Google user data (Google Ads API)

Gandurr accesses Google Ads data through the Google Ads API solely to provide reporting and analysis features to the user who authorized the connection. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google Ads data is only used to provide and improve the user-facing reporting features described above.
• We do not transfer Google Ads data to third parties except as necessary to provide the service, comply with applicable law, or as part of a merger or acquisition with notice to you.
• We do not use Google Ads data for serving advertisements.
• Humans do not read this data except with your explicit permission, for security purposes, to comply with applicable law, or for our internal operations in aggregated, anonymized form.

Storage and security

Your data is stored in our database hosted by Supabase (PostgreSQL) and processed on infrastructure hosted by Vercel, both located in the United States. OAuth tokens are stored encrypted at rest. Data is encrypted in transit using TLS.

Service providers

• Supabase — database and authentication
• Vercel — application hosting
• Anthropic — AI analysis of advertising metrics
• Resend — transactional email delivery

Data retention and deletion

We retain your data while your account is active. You can disconnect an advertising platform at any time, which stops further data access; the associated OAuth tokens are invalidated. You can request deletion of your account and all associated data, including synced advertising data, by emailing sam@gandurr.com. We will complete deletion requests within 30 days.

Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and update the "Last updated" date above.