Legal
Data processing addendum
Last updated 22 September 2026
This document is a working draft published for transparency about how the product is built. It has not completed legal review and is not a contract. The executed agreement for your account is the one you sign.
Roles
For data processed on your behalf from your connected systems, you are the controller and we are the processor. For account and billing data about your own users, we are the controller.
Instructions
We process data on your documented instructions, which are the configuration of your account: the objectives, the connected sources, the constitution and the automation mode.
Security
Ad network credentials and tokens are encrypted at rest and are never held by the marketing site. Access is role-based, and every action that mutates an external ad account passes through a single service that enforces authorisation and constitution checks and writes an audit record.
The AI planner cannot call ad network methods directly. It issues structured proposals to that service, which decides whether they are permitted.
Subprocessors
The current list is published at /legal/subprocessors. Material changes are notified in advance under the terms of your agreement.
Assistance and deletion
We assist with data subject requests, impact assessments and audits as set out in your agreement, and delete or return data on termination within the stated period.
One goal. Every channel. Real business truth.
Connect your ad accounts, say what a good customer is worth, and let the Growth Brain work the objective inside limits you set.
No ad spend commitment · Connect one channel to start · [email protected]