Privacy Policy

Last updated: August 6, 2026

What we store

Account data — your name, email, and a bcrypt hash of your password.
Integration credentials — the Apple Search Ads API credentials and RevenueCat webhook secret you provide, encrypted at rest (AES-256-GCM) and used only to operate your workspace.
Advertising data — your campaigns, ad groups, keywords, and their performance metrics mirrored from the Apple Search Ads API.
Revenue events — purchase events RevenueCat sends to your workspace's webhook (price, currency, attribution ids). We do not receive or store your end users' names, emails, or payment details.
Audit history — who changed what (bids, budgets, statuses) inside your workspace.

What we don't do

We don't sell your data, use one workspace's data for another, or train models on your data. Workspace data is strictly isolated per tenant.

Third parties

We call Apple's Search Ads API with your credentials, AppTweak (keyword market data; keyword text only, no personal data), Apple's public iTunes API, and Resend (to deliver verification, reset, and invite emails). Hosting and the database run on DigitalOcean in the EU (Frankfurt).

Retention and deletion

Deleting your workspace (Settings) permanently removes its campaigns, metrics, revenue events, credentials, and audit history. Deleting your account removes your user record; contact us for assistance: [email protected].

Cookies

One first-party session cookie (adsmo_session) keeps you signed in. No advertising or analytics cookies.