Merqad("we", "us") provides a multi-platform ad optimization service. This policy describes how we collect, use, and protect your information when you use our website and application.

We collect only what's needed to run the service:

• Google account information (name, email) when you sign in
• Ad platform data via OAuth — campaign metrics, spend, conversions, keywords, and ad sets
• Usage data (pages visited, features used) to improve the product

• Your ad platform passwords — we use OAuth only
• Payment card details — billing is handled by Polar
• Customer PII from your ad accounts (names, emails, phone numbers from ad data)

Ad platform data is used exclusively to provide optimization recommendations to you. It is not shared with third parties, used for cross-user analysis, or used to train machine learning models without your explicit written consent.

• Multi-Factor Authentication (MFA) required on every account
• OAuth tokens encrypted at rest using AES-256 via AWS KMS
• All data in transit protected with TLS 1.2+
• Access limited to authenticated API requests on your behalf
• Authentication events logged for audit purposes

Read our full Security overview for details on MFA, encryption, and access controls.

You may request export or deletion of all personal data at any time. Deletion includes all platform tokens and synced campaign data. Email privacy@yourdomain.com to submit a request — we respond within 30 days.

Questions about this policy? Email privacy@yourdomain.com or visit our contact page.