Security
How we protect your advertising accounts. Definitive commitments, no theater.
Encrypted in transit and at rest
All traffic uses HTTPS/TLS. We encrypt OAuth tokens and credentials at rest, stored separately from reporting caches.
OAuth — no passwords
We never see or store your Google or Microsoft passwords. Access is granted on each platform's own screen and limited to accounts you choose.
Least privilege, role-based
Team members access only the accounts their work requires. Every account action is logged against a named person.
Revoke and delete
Disconnect anytime. Tokens for disconnected accounts are deleted promptly; cached advertising data follows the 30-day deletion rule in our Privacy Policy.
Monitoring & response
We operate security monitoring with an incident-response process: contain, notify affected customers without undue delay where legally required, remediate, and record. Report issues to security@casperine.com.
What we don't claim
No SOC 2, ISO 27001, or other certifications are claimed. The commitments above describe our production implementation.