Privacy Policy

Last updated: September 2026. This policy describes how Casperine SAS ("Casperine", "we") handles data for its advertising-management service.

1. Who we are

Casperine provides managed advertising services using Google Ads and Microsoft Advertising data. Contact: contact@casperine.com. Privacy contact: privacy@casperine.com.

2. Personal information we collect

• Name, email, and company information you provide when you inquire or onboard.
• Service account identifiers and support communications.
• Billing records under our contract/invoice terms. Card data is never collected on this website.

3. Advertising-platform data (only with your authorization)

When you connect accounts via each platform's OAuth authorization screen, we access only what you authorize: campaigns, ad groups, ads, budgets, bids, spend, clicks, impressions, conversion actions and counts, performance metrics, account identifiers, and account structure and configuration.

4. Why we access it and how it is used

• Connecting and verifying your advertising accounts.
• Campaign analysis, budget pacing, and performance monitoring.
• Weekly summaries, alerts, and optimization recommendations.
• Campaign, ad, and budget actions you approve.

5. AI processing

Advertising data may be processed by our own AI layer running on systems we operate (locally-hosted models) to draft summaries, flag anomalies, and prepare recommendations. No external AI provider receives your Google Ads data. AI output is advisory and never changes your accounts without your approval.

6. Google API Services User Data Policy / Limited Use

Google user data accessed via Google Ads API scopes is used only for the purposes described in this policy and in accordance with Google's applicable API and user-data policies, including Limited Use requirements. We do not sell Google user data, do not use it for unrelated advertising, and share it only as described here, for legal compliance, or at your direction. Google Ads API scope used: https://www.googleapis.com/auth/adwords. Microsoft Advertising permission used: https://ads.microsoft.com/msads.manage (plus offline_access where refresh tokens maintain a connection you requested).

7. Storage, retention, deletion

We process advertising data transiently: a rolling reporting cache retained up to 90 days, then deleted or aggregated. OAuth tokens are stored encrypted, separately from reporting caches. On disconnection, tokens for that account are deleted promptly and caches stop refreshing; cached data for the disconnected account is deleted within 30 days. On full deletion request, personal data and caches are deleted within 30 days except where law requires longer retention (e.g., invoicing records). Requests: privacy@casperine.com.

8. Revoking access

• Tell us, and we disconnect the account.
• Google: remove access in your Google Account third-party access settings.
• Microsoft: remove consent in your Microsoft account app settings.

Revocation stops future collection; cached data is handled per section 7.

9. Sharing

Only with: (a) service providers necessary to operate the service (hosting, email delivery) under confidentiality obligations; (b) Google and Microsoft as required by integrations you authorize; (c) authorities where legally required; (d) a successor in a business transfer, with notice. We do not sell personal information and do not share it for cross-context behavioral advertising.

10. Security

HTTPS/TLS in transit. We encrypt credentials and tokens at rest, use OAuth rather than handling your platform passwords, restrict team access by role under least privilege, revoke tokens on disconnect, and operate monitoring with an incident-response process including legally required breach notification. We claim no third-party certifications. See Security.

11. Email and notifications

Summaries and alerts go only to addresses you provide, per your preferences, with opt-out or preference instructions in each message.

12. Your rights (GDPR / CCPA/CPRA)

Under GDPR (lawful bases: contract, consent, legitimate interests, legal obligation) you may request access, correction, deletion, portability, restriction, or objection, and withdraw consent at any time. California residents may request to know, delete, and correct personal information; we do not sell personal information. Exercise rights or request a DPA via privacy@casperine.com.

13. Children

The service is for business users 18+ and is not directed to children.

14. Cookies

This website uses only strictly-necessary technical functions — no analytics or advertising cookies. See Cookie Policy.

15. Changes

Material changes are posted here with a new date; connected customers are also notified by email before material changes take effect.