Privacy Policy

Dimity ("we," "us," or "the Service") provides an AI-assisted advertising management platform that plans, builds, and monitors ad campaigns on Google Ads and Meta Ads on behalf of our clients. This policy explains what information we collect, why, and how we handle it — including data we access from your connected Google and Meta accounts.

Information we collect

• Account information — name, email address, and a hashed password when you create an account.
• Business information — your business name, industry, location, what you offer, advertising goals, and monthly budget, provided during onboarding.
• Connected ad account data — when you connect a Google Ads or Meta Ads account, we request access via OAuth and store an access token and refresh token (encrypted at rest) so we can act on your behalf. We also read account identifiers and campaign performance data needed to plan, build, and report on your campaigns.
• Usage data — standard technical logs (timestamps, error reports) needed to operate and debug the service.

How we use your information

• To generate a media plan and build campaigns on the platforms you connect.
• To run automated quality checks before a campaign goes live.
• To show you campaign status and performance on your dashboard.
• To communicate with you about your account or campaigns.
• To maintain the security and integrity of the service.

We do not sell your personal information or your connected ad account data. We do not use it to serve you ads or for any purpose unrelated to operating this service for you.

Google user data

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request the Google Ads (adwords) scope needed to view your accessible accounts and manage campaigns you explicitly approve.
• We do not use Google user data for serving advertisements, and we do not transfer it to any third party except as needed to provide the core features of this service (e.g., the underlying Google Ads or Meta Ads APIs themselves), to comply with the law, or as part of a merger or acquisition with your notice.
• We do not allow humans to read Google user data unless: we have your affirmative agreement for specific messages, doing so is necessary for security purposes (e.g. investigating abuse), to comply with the law, or the data has been aggregated and anonymized.
• Access tokens and refresh tokens are encrypted at rest. You can revoke our access at any time from your Google Account permissions page, or by disconnecting the account from your dashboard.

Meta platform data

Data we access through Meta's Marketing API is used solely to build, manage, and report on the ad campaigns you authorize us to create on your behalf, consistent with Meta's Platform Terms. You can revoke access at any time from your Meta Business Manager settings or by disconnecting the account from your dashboard.

Data retention and deletion

We retain your account and campaign data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us at privacy@dimityad.com. We will delete your data within 30 days, except where we're required to retain records by law.

Security

We use industry-standard measures to protect your information, including encryption of OAuth tokens at rest, hashed passwords, and access controls limiting who can view your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above when we do, and for material changes we'll make reasonable efforts to notify you directly.

Contact us

Questions about this policy? Reach us at privacy@dimityad.com or [PLACEHOLDER: mailing address — add once you have a settled business address].