Privacy Policy
Last updated: 2026-09-17
SaveAds ("we") provides an AI-assisted advertising management platform for Google Ads, Meta Ads, TikTok Ads, LinkedIn Ads and Snapchat Ads, with call-tracking integrations and content publishing to connected accounts, including YouTube through the YouTube API Services. This policy explains what data we collect, how we use and protect it, and your rights. It is accepted, together with the terms of use, when you create your account: that acceptance is requested only once, at first registration, and applies for as long as you use the service.
1. Data we collect
• Account: your email address and profile information (business, goal, budget, area, preferences) that you provide. • Google Ads data: when you connect your account via Google OAuth, we access (read, and with your permission write) your campaigns, ad groups, keywords, search terms, ads, performance metrics and conversion settings, through the official Google Ads API. • Creation and publishing content: the images, videos, text and briefs you upload or have generated in SaveAds, together with the metadata of the posts you prepare, schedule or publish on the platforms you connected (chosen destination, caption, timestamp, status, link to the published item). • Data from the other connected platforms: advertising data and, where you enable publishing, the account and content data described in articles 12 to 16. • Technical data: usage logs and an audit trail of actions performed in the app.
2. How we use your data
We use your data solely to provide the service: analyse campaigns across platforms, connect spend, conversions and calls, detect waste and opportunities, generate explained recommendations, measure their impact and — with your explicit approval — apply changes to compatible advertising accounts. Where you enable publishing on a platform, those permissions are also used to create, publish, schedule and track, in your name and on the destination you designated, only the content you approved. We never sell your data.
3. Limited Use disclosure (Google API Services)
SaveAds' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including its Limited Use requirements. This applies to all data received from Google APIs, including Google Ads, Google Search Console and YouTube data. Specifically: that data is used only to provide SaveAds' features, is never sold, is not used for advertising, and is not accessed by any human except with your consent, for support at your request, for security/compliance, or as required by law.
4. Sharing with third parties
We only share data with subprocessors strictly necessary to run the service: • Supabase (database hosting); • Cloudflare (application hosting); • Anthropic (AI models) — we send the AI only aggregated, filtered context, never your credentials or access tokens. No data is sold or used for advertising by these parties.
5. Security and protection of sensitive data
Data obtained through Google APIs (Google Ads data and OAuth tokens) is treated as sensitive data and protected by the following mechanisms: • Encryption in transit: all traffic between your browser, our servers and Google APIs uses HTTPS/TLS 1.2 or above, exclusively. • Encryption at rest: stored data is encrypted (AES-256). Your Google access tokens (refresh tokens) are encrypted with a dedicated key held in a secret manager, never written in clear text, never logged and never exposed to the browser. • Isolation: data access is isolated per user at the database level (Row Level Security); no user can access another user's data. • Staff access: least-privilege access, mandatory two-factor authentication on administrative accounts, and no human access to OAuth tokens or to your Google Ads data, except with your explicit consent, for support at your request, for a security requirement, or where required by law. • Logging and audit: every change applied to your Google Ads account is timestamped and traced; system access is logged and reviewed. • Subprocessors: our hosting providers and vendors (Supabase, Cloudflare, Anthropic) are bound by a data processing agreement (DPA) and may only use your data to operate the service. • Secure development: code review, centralised secret management (no secret in source code), security updates of dependencies, and periodic review of access rights. • Incident response: we maintain a security incident detection and response procedure. In the event of a data breach affecting you, we notify the competent supervisory authority within 72 hours and inform you without undue delay where the risk requires it.
6. Retention and deletion
We keep your data while your account is active. You can revoke SaveAds' access to your Google account at any time (via your Google account or from the app) and request deletion of your data. Upon request, we delete your data within 30 days, unless a legal retention obligation applies.
7. Your rights
Under GDPR, you have the right to access, rectify, erase, port and object to the processing of your data. To exercise these rights, contact us (see below).
8. Cookies
By default we only use cookies and local storage necessary for the service to work (cookie choice, language preference, authentication session). Audience measurement and conversion tracking are enabled only with your explicit consent, collected through the banner and changeable at any time from the "Manage cookies" link at the bottom of every page. Full details are in our cookie policy (save-ads.com/cookies).
9. Changes
We may update this policy. If a material change occurs, we will notify you. The last updated date appears at the top of this page.
10. Artificial intelligence processing
The analyses and recommendations shown to you are generated in part by artificial intelligence models, from aggregated and filtered context taken from your Google Ads account (never your credentials or access tokens). These models can produce inaccurate or incomplete results: recommendations are provided for guidance only and remain subject to your approval. No decision producing legal effects concerning you is taken solely on the basis of automated processing; these limits are detailed in article 6 of the terms of use. Your data is not used to train AI models.
11. Trademarks and logos
Google, Google Ads, YouTube, Meta, Facebook, Instagram, WhatsApp, LinkedIn, TikTok, Snapchat and the names of the telephony and call tracking providers mentioned on this site (Keyyo, Ringover, Aircall, Axialys, OVHcloud, Orange Business, Diabolocom, CallRail, CallTrackingMetrics, Invoca, WhatConverts, Twilio, RingCentral, Dialpad, among others) are trademarks of their respective owners. They are mentioned solely to indicate the compatibility or intended purpose of the service. SaveAds is not a partner, affiliate, sponsored or certified provider of these companies, and does not act on their behalf.
12. Connecting Meta (Facebook, Instagram)
If you connect a Meta account, Meta shows a permission screen where each access is ticked or unticked individually. You may decline any or all of them: SaveAds then runs with the permissions you granted, and you can withdraw them at any time from your Meta settings (Accounts Center › Apps and websites) or from the app. • Ads (ads_read, and ads_management if you grant it): read access to your ad accounts, campaigns, ad sets, ads, audiences and performance metrics. No change is applied without your explicit approval, action by action. • "Manage messaging & content on Instagram" (unticked by default, optional): if you enable it, access to the linked Instagram professional account, its posts, its insights and its messages, to attribute organic results and conversations to the matching campaigns. Without this access, SaveAds works normally, without Instagram metrics. • "Manage everything on your Page" (unticked by default, optional): if you enable it, access to your Facebook Page, its posts, its messages and its insights, for the same measurement and attribution purposes. Without this access, SaveAds works normally, without Page metrics. • Content publishing (SEPARATE, optional connection): if you enable publishing from SaveAds, Meta shows a second, dedicated permission screen covering the list of your Facebook Pages (pages_show_list), those Pages' engagement metrics (pages_read_engagement), publishing on the Page (pages_manage_posts), the linked Instagram professional accounts (instagram_basic) and publishing on those accounts (instagram_content_publish). These permissions are used only to let you choose the destination, to publish or schedule the content you approved (image, video, Reel, caption), and then to read back its status and results. Nothing is published, scheduled, modified or deleted without an explicit action from you. This connection is independent from the measurement one: you may enable neither, one, or both, and withdraw one without losing the other, from your Meta settings or from the app. In every case: this data is used solely to provide SaveAds' features. It is never sold, is not used for advertising on our behalf or on behalf of a third party, is not used to train artificial intelligence models, and is not accessed by any human except with your consent, for support at your request, for a security requirement, or where required by law. The content of Instagram and Facebook messages is never resold or passed to third parties for commercial purposes, and is kept only as long as measurement requires. Our use of data obtained from Meta platforms complies with the Meta Platform Terms and the Meta API terms. You can request deletion of this data at any time by writing to contact@save-ads.com: we delete it within 30 days and confirm the deletion to you. Removing SaveAds from your Meta settings triggers the same deletion.
13. Connecting LinkedIn (Ads, publishing and Community Management)
If you connect a LinkedIn account, the authorisation is requested by LinkedIn and is limited to the advertising platform: • Sign-in profile (identifier, name, work email address): only to identify you and attach the ad account to your SaveAds account. • Ad accounts and reporting (read): accounts, campaigns, campaign groups, creatives, audiences, lead generation forms and performance metrics. • Campaign management (write, only if you grant it): creating, pausing and adjusting campaigns, budgets and bids, exclusively after your explicit approval, action by action. We do not access your feed, your connections or your LinkedIn messaging. Contact details submitted through your lead generation forms are used only to hand them back to you and to measure your cost per lead: they are never sold, never used for advertising, and never used to train artificial intelligence models. Our use of this data complies with the LinkedIn API Terms of Use and the Marketing Developer Platform terms. You can revoke access at any time from your LinkedIn settings (Data privacy › Permitted services) or from the app. Content publishing (SEPARATE, optional connection): if you enable publishing from SaveAds, LinkedIn shows a second, dedicated permission screen covering your publishing identity (openid, profile), posting in your name on your profile (w_member_social), and reading and posting on the LinkedIn Pages you administer (r_organization_social, w_organization_social, Community Management API). These permissions are used only to let you choose the destination, to publish or schedule the content you approved, and to read back its status, comments and engagement metrics when you view them in SaveAds. Nothing is published, scheduled, modified or deleted without an explicit action from you. Advanced advertising features, only if you enable them: Lead Sync (retrieving the contact details submitted through your LinkedIn lead generation forms, to hand them back to you and compute your cost per lead), Conversions API (sending LinkedIn the conversions you ask us to report, as hashed identifiers, solely to measure YOUR campaigns) and Matched Audiences (sending LinkedIn the audience lists you provide, hashed before transmission, solely to target YOUR campaigns). This data serves no other purpose, is never combined with another customer's data, is never sold or disclosed, and is never used to train artificial intelligence models. It is deleted from our systems as soon as processing ends, and within 30 days at the latest. Revoking access immediately stops all publishing, including scheduled posts not yet sent, and deletes the corresponding tokens.
14. TikTok Business Integration
Save Ads allows users to connect their TikTok Ads and TikTok Business accounts to the Save Ads platform. When a user authorizes this connection, Save Ads may access advertising data made available through the TikTok for Business APIs, including advertising account information, campaigns, ad groups, advertisements, performance metrics, spend, conversions and related reporting data, depending on the permissions granted by the user. Save Ads uses this information solely to provide advertising management, reporting, analytics, optimization and AI-assisted insights to the authorized user. Save Ads does not sell TikTok user or advertising data. TikTok data is not shared with third parties for independent advertising or marketing purposes, except where necessary to provide the Save Ads service, comply with applicable law, or where the user has provided appropriate authorization. Access to TikTok data is limited to the permissions authorized by the user. Users may disconnect their TikTok integration from Save Ads and may request deletion of their associated data by contacting contact@save-ads.com. Save Ads implements reasonable technical and organizational security measures designed to protect advertising account data and access credentials from unauthorized access, disclosure, alteration or destruction. Content publishing (SEPARATE, optional connection): if you enable publishing from Save Ads, TikTok shows a second, dedicated permission screen covering basic information about the target account (user.info.basic), uploading videos and photos as drafts (video.upload) and, where TikTok grants it, publishing them directly (video.publish). These permissions are used only to send the content you approved, with the caption and the privacy, comment, duet and stitch settings you chose, and then to track its status. Before every send, Save Ads reminds you of TikTok's posting rules and discloses content generated or edited by artificial intelligence, as TikTok requires. Nothing is sent, published or scheduled without an explicit action from you; where only the draft permission is granted, final publishing is still done by you from the TikTok app. Disconnecting the TikTok integration, from Save Ads or from your TikTok settings, immediately stops scheduled posts not yet sent and deletes the TikTok tokens and account data, within 30 days at the latest. Publishing metadata (destination, timestamp, status, link) is kept as a log of what Save Ads did in your name, and is deleted with your account. TikTok's processing of information is governed separately by TikTok's own terms and privacy policies.
15. Connecting Snapchat (Snapchat Ads)
If you connect a Snapchat Business account, the authorisation is requested by Snapchat and is limited to the advertising platform: • Sign-in identity (identifier, display name, email address): only to identify you and attach the connection to your SaveAds account. • Organisations and ad accounts (read): the organisations you belong to, the ad accounts they own, and each account's currency and time zone. • Campaigns and metrics (read): campaigns, objectives, budgets, spend, impressions, swipes and conversions. Snapchat publishes a single authorisation for its advertising platform, and it technically covers writing: SaveAds only READS and applies no change to your Snapchat campaigns — recommendations about them are yours to apply in your own manager. We do not access your personal Snapchat account, your Snaps or your messages. This data is used solely to provide SaveAds' features: it is never sold, never used for advertising on our behalf or on behalf of a third party, and never used to train artificial intelligence models. You can revoke access at any time from your Snapchat Business Manager (Business settings › OAuth apps) or from the app. Marketing API (Snapchat Ads): the access described above goes through the Snapchat Marketing API and depends entirely on your OAuth consent. Withdrawing it immediately stops all reading and deletes the corresponding tokens, within 30 days at the latest. Content publishing (Public Profile): SaveAds does not currently use Snapchat's publishing APIs and posts nothing on your Public Profile. Should that feature be opened, it will require a SEPARATE, optional permission, limited to identifying the target profile and sending the content you approved, and subject to the same rules as our other publishing: nothing is sent, published or scheduled without an explicit action from you, access depends on your OAuth consent, and it remains revocable at any time.
16. Connecting YouTube (YouTube Data API)
If you connect a YouTube channel, the authorisation is requested by Google and is limited to what publishing requires: • Sign-in identity (Google identifier, email address): only to identify you and attach the channel to your SaveAds account. • Channel read access (youtube.readonly): the list of channels you administer, their videos and their metrics, so you can choose the destination of a post and then measure the results of videos published from SaveAds. • Upload, publishing and scheduling (youtube.upload): sending to the channel you designate the videos and Shorts you approved, with the title, description, tags, thumbnail, visibility status and, where applicable, the scheduled publication date you chose. No video is uploaded, published, scheduled, modified or deleted without an explicit action from you. Until Google's verification of the application is obtained, uploaded videos remain private: that is a Google rule, not a SaveAds choice. We do not access your watch history, your subscriptions, or the videos of channels you do not administer. SaveAds uses the YouTube API Services. By connecting your channel you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms); Google's processing of data is governed by the Google Privacy Policy (https://www.google.com/policies/privacy). You can revoke SaveAds' access at any time from the Google security settings page (https://security.google.com/settings/security/permissions) or from the app: revocation immediately stops scheduled posts not yet sent and deletes the corresponding tokens. Sharing: YouTube data is shared with no third party, except the processors strictly needed to run the service (hosting and database, see article 19), under the same restrictions. Videos you publish are sent only to Google, on the channel you chose. Retention: in accordance with the YouTube API Services Terms of Service, channel data obtained through the API (video metadata, metrics) is either refreshed or deleted from our systems within 30 days of retrieval. It is never sold, never used for advertising on our behalf or on behalf of a third party, and never used to train artificial intelligence models. Data obtained through Google APIs, tokens included, complies with the Google API Services User Data Policy and its Limited Use requirements (see article 3).
17. Data controller and legal bases
SaveAds is published and operated by WebLink, acting as the data controller under the GDPR, which applies because the service is offered to users located in the European Union. For any question about your data: contact@save-ads.com. We process your data on the following legal bases: • Performance of the contract (art. 6.1.b): account creation, connecting your ad accounts, analysis, recommendations, billing. Without this data the service cannot be provided. • Legitimate interest (art. 6.1.f): service security, abuse prevention, audit logs of applied actions, product improvement. You may object at any time. • Consent (art. 6.1.a): audience measurement, non-essential emails, and the OPTIONAL platform permissions (Instagram insights, Facebook Page insights). Withdrawable at any time, without the rest of the service stopping. • Legal obligation (art. 6.1.c): retention of accounting records.
18. Retention periods
Your data is kept while your account is active, then erased within 30 days of its deletion. Beyond that, each category has its own period, applied automatically by a daily purge: • Daily performance snapshots: 400 days (two comparable seasons). • Recommendations never applied: 180 days. • AI usage log: 180 days. • Analysis findings: 90 days. • Resolved error logs: 90 days. • Scheduled task runs: 30 days. • Anti-abuse counters: 24 hours. • Media uploaded to or generated in SaveAds (images, videos): kept while your account exists, deleted with it or as soon as you remove them from your library. • YouTube channel data obtained through the API: refreshed or deleted within 30 days (YouTube requirement). • Publishing log (destination, caption, timestamp, status, link): kept while your account exists, and deleted with it. • Log of changes applied to your campaigns and measurements of their impact: kept while your account exists, and deleted with it. These are the evidence of what we changed on your account: erasing them sooner would remove your means of checking. Invoices are kept in anonymised form for the legally required period, even after the account is deleted.
19. Processors and transfers outside the European Union
We only use processors necessary to run the service, each bound by a data processing agreement: • Supabase — database and authentication; • Cloudflare — hosting of the application and the API; • Anthropic — artificial intelligence models (aggregated, filtered context only; never your credentials or tokens); • Resend — transactional email delivery; • Cleeng — payment. Cleeng acts as merchant of record: it collects the payment and issues the invoice, and we never see your card number; • Google, Meta and, where applicable, your telephony provider — only the platforms you connected yourself. Some of these providers are established in the United States or operate infrastructure there. Those transfers are covered by the European Commission's standard contractual clauses and, where the provider is certified under it, by the EU–US Data Privacy Framework. Access tokens for your ad accounts are encrypted before any storage and never leave our servers.
20. Payment, invoicing and Cleeng
SaveAds subscriptions are sold by Cleeng B.V. (Reimersbeek 14, 1082 AG Amsterdam, Netherlands, KvK 34392902), acting as MERCHANT OF RECORD: Cleeng is the seller of record, collects the price, collects applicable taxes, issues the invoice and executes refunds. What Cleeng collects: your billing details (name, email address, postal address, VAT number where applicable), your payment data, your country and the technical signals needed for fraud prevention. THIS DATA IS COLLECTED DIRECTLY BY CLEENG, on its own checkout pages: your card number never passes through our servers and we never see it. What we receive from Cleeng: your customer and subscription identifiers, the plan purchased, the billing frequency, the amount, the currency, the subscription status, the last four digits and brand of the card, the billing country and links to your invoices. We use this information to open the entitlements attached to your plan, send you your invoices and keep our accounts. For that processing Cleeng acts as an INDEPENDENT CONTROLLER (accounting, tax, fraud and anti-money-laundering obligations) and not as our processor: its privacy policy (cleeng.com/privacy-policy) then applies directly, and you may exercise your rights with Cleeng. Legal basis: performance of the contract (art. 6.1.b) and legal obligation (art. 6.1.c); accounting records are kept for ten (10) years, as required by law. Refund terms are described in the refund policy (save-ads.com/en/remboursement).
21. Complaints and automated decisions
You may lodge a complaint with the supervisory authority of your country of residence — in the European Union, the data protection authority of your Member State (for France, the CNIL, www.cnil.fr). No decision producing legal effects concerning you is taken solely on the basis of automated processing. The artificial intelligence analyses are PROPOSALS: nothing is changed in your campaigns without your explicit approval, action by action. If you enable automatic application of certain optimisations, it remains switchable off at any time, every change is logged, and it can be rolled back from the history.
22. U.S. residents
If you reside in California, Colorado, Connecticut, Virginia, Texas, Utah or another state with a consumer privacy law, you have the right to know which categories of personal information we process and for what purposes, to obtain a copy of it, to have it corrected or deleted, to limit the use of sensitive information, and not to be discriminated against for exercising those rights. We do not sell or share your personal information within the meaning of the California Consumer Privacy Act (CCPA/CPRA) or equivalent laws: we do not disclose it to anyone for consideration, and we do not use it for cross-context behavioural advertising. We do not process personal information for profiling that produces legal or similarly significant effects concerning you. Where we process, on your behalf, personal information contained in your advertising accounts, we act as a "service provider" or "processor": we do not retain, access or use it outside performance of the service, and we do not combine it with other data for purposes unrelated to your request. To exercise these rights, write to contact@save-ads.com. We verify your identity before responding and handle your request within the time limits set by applicable law. You may designate an authorized agent to act on your behalf.
23. Minors
The service is intended for professionals and is not designed for minors. We do not knowingly collect data about people under 16 (under 13 in the United States). If you believe a minor has provided us with data, write to us and we will delete it.
24. Contact
For any question about your data or this policy: contact@save-ads.com.