Privacy Notice

The controller responsible for processing the personal data described in this notice is Akvertising, S.A. de C.V., operator of TrackerAds («we», «us»).

This notice applies to every use of the Service: the public site, sign-up and sign-in, the metrics dashboard and the integrations with advertising platforms.

• Exercising your rights and deletion requests: [email protected].
• All other enquiries: [email protected].

We apply data minimization: we collect only what the Service needs in order to work. The data falls into four categories.

What we do NOT process

• Data about the people who see or interact with your ads. The metrics we receive are aggregated and do not allow any individual to be identified.
• Custom audiences, contact lists, private messages or profile content.
• Special category data (health, beliefs, orientation, membership) or card payment data.

The Service never pulls data from a platform on its own initiative. It only connects after the ad account holder expressly authorizes the connection through that platform's official flow, and always with the minimum permissions required to read metrics.

3.1 Meta (Facebook and Instagram)

• We process this data in accordance with the Meta Platform Terms and the Developer Data Use Policy.
• We access only metrics for ad accounts, campaigns, ad sets and ads. We do not access messages, contacts, audiences or private profile content.
• We do not sell, license or transfer this data to data brokers, and we do not use it for any purpose other than showing you your own metrics.
• We delete the data without undue delay when you ask us to, when you close your account, when it is no longer needed, when Meta requires it or when the law requires it.
• We keep both deletion mechanisms Meta requires in place: an automated callback endpoint that receives and verifies the signed request, and a public instructions page with confirmation-code tracking.

3.2 Google Ads

• We process this data in accordance with the Google Ads interface Terms of Service and the Google API Services User Data Policy, including its Limited Use requirement.
• The data is used exclusively to provide user-facing, prominent features inside the dashboard itself. Never for advertising, remarketing, profiling, audience building, or sale or transfer to third parties.
• No member of our team reads this data unless you expressly authorize it, it is strictly necessary for security or to investigate an incident, or the law requires it.
• Access credentials are stored encrypted and always transmitted over an encrypted channel.

3.3 X

• We process this data in accordance with the X Developer Agreement and Policy, and we limit use to the declared and approved use case: measuring advertising campaign performance.
• We honour the account holder's actions. If an account is protected, deactivated or deleted, we remove the associated content from our systems.
• If content ceases to be available through the X interface, or if X or the account holder request its removal, we delete it from our storage within a maximum of 24 hours.
• Our processing is consistent with X's own privacy policy, and we would cease access if we could not maintain that consistency.

3.4 Rules common to every platform

• Minimum permissions: we request read-only metric scopes only. We do not request permission to publish, edit campaigns or manage spend.
• Credentials are stored encrypted with AES-256-GCM and are never displayed in full in the interface.
• You can revoke access at any time, either from the platform itself or from the dashboard. Once revoked, syncing stops immediately.
• Metrics already downloaded are deleted according to the periods in section 7, or earlier if you ask us.

Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.

• Minimization: we download aggregated metrics only. We neither request nor store data about the people who see your ads.
• Incremental syncing: we re-request only the periods that have changed, which keeps calls to the platforms to a minimum.
• Normalization: one definition per metric. If a platform does not report a figure, it is stored as empty and never as zero, so totals are not distorted.
• Separation by organization: each organization has its own identifier and access to campaigns, metrics and clients is scoped to it.
• Encryption in transit via TLS, plus specific encryption of platform credentials with AES-256-GCM.
• Passwords stored only as bcrypt hashes. They are not kept in clear text and cannot be recovered.
• Mandatory two-step verification on every sign-in, using a one-time code sent to your email address, with an expiry time and a single valid use.
• Role-based access: each person sees only what their role allows, and client accounts never reach administration areas.

We do not sell personal data and we do not disclose it to third parties for advertising, profiling or data brokerage purposes. Only the following recipients receive data:

In the event of a corporate reorganization, merger or sale of assets, the data could be transferred to the acquirer, who would be bound by the same obligations described in this notice. We would notify you in advance.

You can request deletion of your data through any of these three routes, all with the same effect:

• 1.From the data deletion page, by completing the public form.
• 2.By writing to [email protected] from the address linked to your account.
• 3.From the advertising platform settings (for example, Meta), by removing the permission granted to the application. That removal reaches us automatically and opens a deletion request.

In every case you receive a confirmation code that lets you check progress on the status page. The maximum committed turnaround is 30 days.

• Access: find out what data of yours we process and obtain a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion when the data is no longer needed or you withdraw consent.
• Objection: object to processing based on legitimate interest.
• Restriction: ask us to suspend processing while a complaint is resolved.
• Portability: receive your data in a structured, commonly used format.
• Withdrawal of consent: at any time, without retroactive effect.
• Complaint: lodge a complaint with the competent supervisory authority if you believe we have not handled your request properly.

To exercise them, write to [email protected]. We may ask you to prove your identity before responding, so that we do not hand data to the wrong person. We respond within a maximum of 30 days.

The Service relies on infrastructure providers that may process data on servers located outside the country where you reside. In those cases we require contractual guarantees equivalent to our own processing: standard contractual clauses, confidentiality commitments, encryption in transit and at rest, and a prohibition on using the data for their own purposes.

The advertising platforms you connect operate their own infrastructure and their own transfer policies, which you accept when you authorize the connection from their environment.

The Service is intended exclusively for professionals and organizations. It is not directed at minors and we do not knowingly collect data from minors. If we detect that an account has been created with a minor's data, we will delete it without delay. If you believe this has happened, let us know at [email protected].

• Strictly necessary session cookie: keeps you signed in and protects against request forgery. The dashboard cannot be used without it.
• Browser local storage: keeps interface preferences such as light or dark theme and the filters you leave applied. It never leaves your device.
• We do not use advertising cookies, cross-site tracking or third-party analytics tools.
• You can clear cookies and local storage from your browser at any time. If you delete the session cookie you will have to sign in again.

We may update this notice to reflect changes in the Service, in the integrations or in applicable regulation. The version in force is always the one published on this page, with its last-updated date. If a change materially affects your rights or the purposes of processing, we will notify you by email or through a notice in the dashboard with reasonable advance warning before it takes effect.

Akvertising, S.A. de C.V., operator of TrackerAds.

• Privacy and exercise of rights: [email protected].
• Support and general enquiries: [email protected].
• Related documents: Terms of Service, Security and Data deletion.