1. Introduction
Kortex Solutions LLC (“Company,” “we,” “us”) operates Kortex, a marketing intelligence platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
Account Information
- Name and email address
- Business name and industry
- Billing information (processed by Stripe)
- Login credentials (passwords are hashed)
Connected Account Data
When you connect your Google Ads account, we access:
- Campaign data, ad groups, keywords, and ads
- Performance metrics (impressions, clicks, conversions, cost)
- Account settings and configuration
- Billing summaries (we do not access payment instruments)
Additional integrations (Google Business Profile, Google Analytics, website data) may be offered in the future and will be governed by this same policy at the time they are activated.
Automatically Collected Information
- IP address and device information
- Browser type and version
- Usage data and analytics
- Cookies and similar technologies
3. How We Use Your Information
- To provide and maintain the Service
- To analyze and optimize your advertising campaigns
- To make automated changes to your connected accounts (with your authorization)
- To generate reports and recommendations
- To process payments and manage subscriptions
- To communicate with you about the Service
- To improve our algorithms and AI systems
- To comply with legal obligations
4. Data Sharing
We do not sell your personal information. We may share data with:
- Service Providers: Hosting (Vercel), database (Supabase), payments (Stripe), analytics providers
- API Partners: Google (to access your connected accounts)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger or acquisition
5. Google API Services User Data Policy — Limited Use
Kortex's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we affirm that data received from Google APIs is:
- Used only to provide the Kortex Google Ads optimization service to the account owner who authorized access.
- Not used for serving advertisements, including retargeting, personalized advertising, or interest-based advertising.
- Not transferred to third parties except as necessary to provide the service (e.g., to our infrastructure providers Vercel and Supabase under data processing agreements), to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.
- Not accessed by humans except (a) with the user's explicit consent for specific support requests, (b) for security investigations or to address abuse, or (c) to comply with applicable law.
- Not used to develop, improve, or train generalized AI or machine learning models. Data is used only to inform optimization decisions for the originating user's own account.
6. Data Security
We implement industry-standard security measures including:
- Encryption in transit (TLS/SSL) and at rest
- Secure OAuth 2.0 for account connections
- Regular security audits
- Access controls and authentication
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
7. Data Retention
- Account data: Retained while your account is active
- Campaign snapshots: Retained for 90 days after account termination
- Analytics data: Retained for 24 months
- Billing records: Retained as required by law (typically 7 years)
8. Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data (“right to be forgotten”)
- Export your data (portability)
- Object to processing
- Withdraw consent
To exercise these rights, contact us at privacy@kortexsolutions.com
9. California Privacy Rights (CCPA)
California residents have additional rights under the CCPA, including the right to know what personal information we collect, request deletion, and opt-out of sales (we do not sell personal data).
10. International Transfers
Your data may be transferred to and processed in the United States. By using the Service, you consent to this transfer.
11. Cookies
We use cookies and similar technologies for authentication, preferences, and analytics. You can control cookies through your browser settings, but some features may not function properly.
12. Children's Privacy
The Service is intended for business use and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or prominent notice on the Service.