Privacy Policy

1. Introduction

DevorAI ("we", "our", "us") is a marketing intelligence platform that helps businesses analyze and optimize their digital advertising campaigns. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at devorai.com.br.

We are committed to protecting your privacy and handling your data with transparency. By accessing or using DevorAI, you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

When you create an account or use our services, you may provide us with: your name and email address, account credentials (username and password, stored as secure hashes), billing information processed through Stripe (we do not store credit card numbers), and business information such as company name and advertising goals.

2.2 Google Ads Data

When you connect your Google Ads account through OAuth 2.0, we access and process: campaign performance metrics (impressions, clicks, conversions, cost), keyword and search term performance data, ad group and ad creative performance data, and account structure information (campaigns, ad groups, ads). We access this data in read-only mode to provide analytics and AI-powered recommendations. Any changes to your Google Ads account require your explicit approval before execution.

2.3 Automatically Collected Data

When you use our platform, we may automatically collect: IP address and browser type, pages visited and features used, session duration and interaction patterns, and device information (operating system, screen resolution).

3. How We Use Your Information

We use the collected information to:

Provide our services: analyze your advertising campaigns, generate AI-powered optimization recommendations, display performance dashboards, and track the impact of applied optimizations.

Improve our platform: understand usage patterns to enhance features, develop new AI models for better recommendations, and fix bugs and improve performance.

Communicate with you: send service-related notifications, provide customer support, and share product updates (with your consent).

Process billing: manage subscriptions and process payments through our payment processor (Stripe).

4. Google API Services — Limited Use Disclosure

DevorAI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We only access Google Ads data necessary to provide and improve our advertising analytics and optimization services. We do not use Google Ads data for serving advertisements. We do not transfer Google Ads data to third parties unless necessary to provide our services, comply with applicable laws, or as part of a merger or acquisition (with adequate data protection). We do not use Google Ads data for purposes unrelated to the core functionality of DevorAI. Human access to Google Ads data is limited to what is necessary for debugging, security incident response, legal compliance, or user support, and only when explicitly authorized.

5. Data Storage and Security

Your data is stored on secure servers with industry-standard protections. We implement the following security measures: encrypted data transmission using TLS 1.2+ (HTTPS), secure password hashing, OAuth 2.0 with PKCE for Google Ads authentication, firewall-protected infrastructure with restricted access, and regular security updates and monitoring.

Google Ads refresh tokens are stored encrypted and are only used to maintain your authorized connection. You can revoke access at any time through your Google Account settings or through our platform.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with: payment processors (Stripe) for billing purposes, cloud infrastructure providers for hosting services, and law enforcement or government authorities when required by law. All third-party service providers are bound by contractual obligations to protect your data and use it only for the specified purposes.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. Campaign performance data is retained for up to 24 months to enable historical analysis and trend detection. When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

8. Your Rights

You have the right to:

Access: request a copy of the personal data we hold about you. Correction: request correction of inaccurate or incomplete data. Deletion: request deletion of your personal data. Portability: request your data in a structured, machine-readable format. Objection: object to certain processing of your data. Revocation: revoke Google Ads access at any time through your Google Account or our platform.

To exercise any of these rights, contact us at gusarzua@gmail.com.

9. Brazilian Data Protection (LGPD)

In compliance with Brazil's General Data Protection Law (Lei Geral de Proteção de Dados — LGPD, Law No. 13.709/2018), we ensure that: personal data is processed with a lawful basis (consent or legitimate interest), you can exercise your data subject rights as described in Section 8, we maintain appropriate technical and organizational security measures, and we will notify you and the relevant authority in case of a data breach that may pose risk to your rights.

Data Controller: Gustavo Pereira de Arzua — Contact: gusarzua@gmail.com

10. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We do not use third-party advertising cookies or tracking pixels. Analytics data, if collected, is used solely to improve our platform and is not shared with advertisers.

11. Children's Privacy

DevorAI is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of DevorAI after such changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

DevorAI
Email: gusarzua@gmail.com
Website: https://devorai.com.br