Privacy Policy

Account Information

When you create an account, we collect your name, email address, company name, and role. This information is used to set up and manage your account.

Advertising Platform Data

When you connect your advertising accounts, we access and sync the following data via secure OAuth-based API connections:

• Creative assets. Images, videos, and carousel content from your ad campaigns
• Performance metrics. Spend, impressions, clicks, CTR, CPC, CPM, ROAS, CPA, conversions, and days active
• Campaign metadata. Ad names, ad set details, campaign structure, and status

We currently support or are developing integrations with the following platforms:

• Meta Ads. Live.
• TikTok Ads. Live.
• Amazon Ads. In development.
• Google Ads. In development.

Brand Intelligence Data (Reddit)

When you use the Brand Intel feature, peachblue collects publicly available data from Reddit for brand monitoring purposes. This includes:

• Public Reddit posts and comments that match keywords you choose to track
• Associated metadata including subreddit names, post titles, comment text, author usernames, scores, and comment counts
• Sentiment labels assigned to each mention via AI analysis

This public data is processed by AI to generate sentiment analysis, trending topic identification, and competitive intelligence summaries. You choose which keywords to track, and all collected data is scoped to your organization. Reddit data can be deleted upon request alongside all other user data.

Usage Data & Cookies

We use cookies solely for session management (authentication). We do not collect IP addresses, browser fingerprints, or device information for analytics purposes. We do not use third-party advertising cookies or tracking pixels.

We use the information we collect to:

• Provide the service. Sync your ad data, run AI-powered creative analysis, generate performance insights, produce creative intelligence tags, and deliver actionable creative briefs.
• AI-powered analysis. Your creative assets (images and videos) are processed by AI vision models to generate structured intelligence tags covering visual design, copy strategy, hook effectiveness, color palette, pacing, and more. This analysis is performed solely to provide insights back to you as the account owner.
• Improve the platform. Understand usage patterns to build better features and fix issues.
• Communicate with you. Send account-related updates, respond to support requests, and share product updates (with your consent).

Your advertising data is treated with strict confidentiality:

• We access your ad platform data only with your explicit authorization via OAuth
• Your data is used solely to provide creative intelligence insights to you, the account owner
• We do not use your ad data to train AI models
• We do not aggregate your data with other customers' data
• We do not sell, rent, or share your advertising data with any third party for their own purposes
• You can disconnect your ad accounts and request deletion of your data at any time

We comply with the terms of service and data use policies of each advertising platform we integrate with, including the Meta Platform Terms, Google Ads API Terms of Service, Amazon Ads API License Agreement, and TikTok for Business Commercial Terms.

We implement comprehensive administrative, physical, and technical safeguards to protect your data, including:

• Encryption. All data is encrypted in transit (TLS 1.2+) and at rest.
• Access controls. Role-based access with the principle of least privilege. Only authorized personnel can access customer data.
• Infrastructure. Hosted on industry-standard, SOC 2-compliant cloud infrastructure.
• Credential security. OAuth tokens are stored encrypted and are never exposed in logs or client-side code.
• Incident response. We maintain a documented incident response process and will notify affected users and relevant authorities promptly in accordance with applicable law.

To provide creative intelligence and brand monitoring features, certain data is sent to Google's Gemini API for processing. This includes:

• Creative assets. Images and videos from your connected ad accounts are sent for visual analysis, creative tagging (format, style, tone, hook type, CTA, etc.), and optical character recognition (OCR) of text in images and videos.
• Ad copy. Headline and body text from your ads are sent for copy strategy analysis and strategic recommendations.
• Brand mentions. Public Reddit posts and comments matching your tracked keywords are sent for sentiment analysis, trending topic identification, and competitive intelligence summarization.

These third-party AI services process data under their respective data processing agreements. Peachblue does not use your ad data to train AI models. Processing is performed on-demand and data is not retained by the AI provider beyond the scope of each individual processing request.

Subscription payments are processed by Stripe, Inc. Your payment card details are entered on and handled entirely by Stripe's hosted checkout and billing pages, so Peachblue never receives or stores your card number. We share with Stripe the information needed to manage your subscription (email address, plan selection, and billing status), and Stripe processes payment data under its own privacy policy and PCI-DSS compliance. Invoices, payment methods, and cancellation are managed through Stripe's customer portal, accessible from your billing settings.

We do not sell your personal information or advertising data. We may share limited data with:

• Infrastructure providers. Cloud hosting, database, and AI processing services that help us operate the platform, bound by confidentiality agreements and used solely to provide our service.
• Payment processing. Stripe, for subscription billing as described above.
• Legal requirements. If required by law, regulation, or legal process.

We retain your data for as long as your account is active and as needed to provide the service. If you close your account or request deletion, we will delete your data within 30 days, except where retention is required by law. Disconnecting an ad platform will stop new data syncs; previously synced data will be deleted upon request.

Meta Data Deletion Callbacks

When you deauthorize the Peachblue app from your Meta (Facebook) account settings, Meta sends an automated data deletion request to Peachblue. Upon receiving this request, Peachblue will:

• Delete all stored OAuth tokens associated with your Meta connection
• Queue deletion of all synced ad performance data, creative assets, and analysis results linked to your Meta ad accounts
• Complete deletion within 30 days of the request
• Provide a confirmation code and status tracking URL to Meta for your records

You can also request data deletion at any time by contacting nick@peachblue.io.

Depending on your jurisdiction, you may have the right to:

• Access your personal data we hold
• Correct inaccurate or incomplete data
• Delete your data (right to erasure)
• Export your data in a portable format
• Withdraw consent for data processing
• Object to certain types of processing

We comply with applicable privacy legislation, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). For users in the European Economic Area, we comply with the General Data Protection Regulation (GDPR). For users in California, we comply with the California Consumer Privacy Act (CCPA).

To exercise any of these rights, contact us at nick@peachblue.io.

peachblue is a business-to-business service and is not directed at children under 16. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the effective date. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Peachblue Technologies Inc.
nick@peachblue.io