Privacy Policy

1.1 Account & Identity

• Your name, email address, and authentication data — sign-in and account management are handled through our authentication provider, Clerk.

1.2 Product & Brand Details You Submit

• Business and brand details, product descriptions, ad copy, website URLs, and any images or media you upload to generate ads.

1.3 Payment Information

• Subscription billing is handled by our payment provider, Razorpay. We receive limited transaction metadata (such as payment status and the plan purchased) but do not store your full card or bank details.

1.4 Usage & Product Analytics

• How you interact with the Service — pages viewed, features used, timestamps, and device/browser information — collected via PostHog to understand and improve the product.

1.5 Diagnostics & Error Data

• Crash reports and error diagnostics collected via Sentry to keep the Service stable and secure.

1.6 Connected Advertising Platform Data

• If you choose to connect an advertising account — for example a Meta, Google Ads, Pinterest, LinkedIn, or X advertising account — you authorize the connection through that platform’s own sign-in and consent process. Once connected, we may receive information that the platform makes available through its APIs and that you have authorized us to access.
• Depending on the platform, this may include advertising account details and identifiers; campaigns, campaign groups or ad groups, ads, and creatives; targeting or audience-related settings where the platform permits; performance and reporting data such as spend, impressions, clicks, reach, engagement, conversions, conversion value, and video or delivery metrics; billing, currency, and time-zone settings; and platform-specific reporting and attribution information.
• Not every platform provides every category. What we actually receive depends on the platform, the APIs available to us, the permissions you grant, the level of access your own account has, and the platform’s policies and technical restrictions.

1.7 Lead Data (collected for you from Meta Lead Ads)

• If you run lead ads through KOgenie, we retrieve the form submissions (“leads”) that people send to your connected Facebook Page — typically a name, email address, phone number, and any custom fields your form collects. This information belongs to the people who submitted your forms; we process it on your behalf so you can view and manage your leads inside KOgenie.

• Operate, provide, and maintain the Service
• Generate ad creatives and, where you choose, deploy them to connected platforms
• Connect and authenticate the advertising accounts you choose to link to KOgenie, and retrieve account and campaign data from them
• Provide campaign reporting and performance dashboards, and analyze how your advertising is performing
• Provide AI-assisted insights, recommendations, experiments, and optimization suggestions based on your advertising data
• Where supported by the relevant platform and authorized by you, create, update, pause, or otherwise manage campaigns and related assets on your behalf
• Compare performance across the advertising platforms you have connected
• Support the end-to-end workflow of creating, launching, measuring, learning from, and improving your campaigns
• Process subscriptions and payments
• Analyze usage to improve features and performance
• Secure the Service and detect or prevent fraud and abuse
• Meet our legal and regulatory obligations

Service Providers

• Clerk — authentication and account management
• Razorpay — subscription billing and payment processing
• Amazon Web Services (AWS) — cloud hosting, infrastructure, and data storage
• Cloudinary — storage and delivery of images and generated creatives
• PostHog — product and usage analytics
• Sentry — error monitoring and diagnostics

• Meta (Facebook and Instagram)
• Google Ads (including YouTube advertising run through Google Ads)
• Pinterest
• LinkedIn
• X (formerly Twitter)

• We use industry-standard security measures to protect your data. No system is completely secure, so please use a strong, unique password.
• Credentials and access tokens for connected advertising platforms are handled with security measures appropriate to their sensitivity, including encryption at rest, and are used only to communicate with the relevant platform on your behalf.
• We retain personal data and connected-platform data only as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, enforce our agreements, and maintain legitimate business records.
• You can request deletion of your data at any time. Disconnecting a platform does not by itself erase every related record: we may keep certain information where retention is required for legal, security, fraud-prevention, or legitimate operational reasons.

• Access or update your information
• Request deletion of your data
• Request a copy of your data
• Opt out of marketing emails
• Manage cookies through your browser and our cookie settings

Meta / Facebook / Instagram

• Depending on how you connect and the Meta permissions you approve, we may access your advertising account information, campaign and ad information, advertising performance data, Page-related information required for the advertising workflows we support, and lead information where you use Meta Lead Ads through KOgenie. The individual permissions we request are listed below.
• Access your public profile and email
• Manage and publish ads (ads_management)
• Read engagement insights from your pages (pages_read_engagement)
• Analyze ad performance from your business assets
• Retrieve leads submitted to your Page’s lead forms (leads_retrieval)
• Manage Page-backed lead ads and read your Page’s lead forms (pages_manage_ads)
• Subscribe your Page to lead notifications so new leads appear in KOgenie in real time (pages_manage_metadata)

Google Ads / YouTube

• If you connect a Google Ads account, we may access account, campaign, ad group, ad, creative, and reporting information that Google makes available through the Google Ads API and that you have authorized. Reporting may include spend, impressions, clicks, conversions, conversion value, and other metrics where available.
• Where YouTube advertising is run through your Google Ads campaigns, its performance data may be included in what Google Ads reports to us. This connection does not give us access to your personal YouTube account or to YouTube Analytics.

Pinterest

• If you connect a Pinterest advertising account, we may access advertising account, campaign, ad group, ad, creative, and performance or reporting information that Pinterest makes available through its APIs and that you have authorized. We may use this information for reporting, analysis, recommendations, experimentation, and, where supported by Pinterest and authorized by you, campaign-management workflows.

LinkedIn

• If you connect a LinkedIn advertising account, we may access advertising account, campaign, ad, creative, and reporting information that LinkedIn makes available through its APIs and that you have authorized. We may use it for reporting, performance analysis, AI-assisted insights, recommendations, experimentation, and, where supported by LinkedIn and authorized by you, campaign-management workflows.
• LinkedIn advertising API access and the permissions available through it depend on LinkedIn’s approval and on your own account, and may not be available to every customer.

X (formerly Twitter)

• Where we hold the applicable X advertising API access and you authorize the connection, we may access advertising account, campaign, ad, creative, and performance or reporting information that X makes available through its APIs. We may use this information for campaign reporting, performance analysis, AI-assisted insights, recommendations, experimentation, and, where supported by X and authorized by you, optimization and campaign-management workflows.
• Access depends on the X API access we hold at the time, the capabilities X makes available, and the permissions you grant.