PerflyMax Privacy Policy

2. Data we collect

• Account data such as email address, username, password hash, and verification status.
• Workspace and membership data such as tenant, role, company type, and customer profile details.
• Advertising integration data such as account identifiers, selected account names, OAuth tokens, and connection status.
• Advertising reporting data such as campaign names, account IDs, spend, revenue, clicks, impressions, ROAS, and related metrics.
• Technical and security data such as IP address, request headers, device and browser details, error logs, and audit events.
• Cookie data used for session authentication, workspace context, customer profile context, and theme preferences.

3. How we use data

• To create and manage accounts, authenticate users, and secure access to the application.
• To provide workspace functionality, tenant-level access control, and customer profile selection.
• To connect Google Ads, Meta Ads, TikTok Ads, and similar ad platform accounts.
• To retrieve, store, analyze, and display campaign and reporting data for authorized users.
• To send verification emails, password reset emails, and service-related notifications.
• To maintain service security, prevent abuse, investigate incidents, and comply with legal obligations.

4. How PerflyMax uses Google user data

PerflyMax uses Google user data only to provide the features requested by authorized users inside the application.

• We use Google Ads API data to connect ad accounts, read advertising account information, and generate reporting and analytics views.
• We do not use Google user data to sell personal data, run unrelated advertising, or profile users for unrelated purposes.
• We do not transfer Google user data to third parties except where required to operate the service, comply with law, or use vetted infrastructure and service providers acting on our behalf.
• Our use of Google user data is limited to the practices described in this Privacy Policy.

5. Cookies and similar technologies

PerflyMax uses essential and functional cookies, including:

• Authentication cookies for secure login sessions.
• Tenant and customer profile context cookies to keep users in the correct workspace scope.
• Theme preference cookies for user interface settings.

6. Sharing and international transfers

We share data only as needed to operate PerflyMax, including with hosting, email, infrastructure, monitoring, and security service providers. We may also disclose data if required by law, regulation, or a valid legal request.

Where data is processed outside your country, we apply reasonable contractual, technical, and organizational safeguards appropriate to the service and applicable law.

7. Security

PerflyMax uses role-based access controls, encrypted storage for sensitive integration secrets, session protections, and operational logging to protect data. No system can be guaranteed perfectly secure, but we apply reasonable administrative, technical, and organizational safeguards.

8. Data retention

We retain personal data and Google user data only for as long as necessary to provide the service, maintain security, meet contractual obligations, and comply with legal requirements. When retention is no longer necessary, data is deleted, destroyed, or anonymized as appropriate.

9. Your rights

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, object to, or request a copy of your personal data. To submit a request, contact info@perflymax.com.

10. Updates to this policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date on this page and publish the revised version at this URL.