Privacy Policy
Effective May 29, 2026
1. Who we are
This Privacy Policy describes how FluxPPC LLC, a Utah limited liability company (“FluxPPC,” “we,” “us”), collects, uses, and shares information when you use the FluxPPC website, application, and related services (collectively, the “Service”).
2. Information we collect
We collect the following categories of information:
- Account information. Your name, email address, workspace name, and authentication credentials when you sign up or sign in.
- Connected-account data. When you connect a Google Ads account, we receive an OAuth refresh token (encrypted at rest) and the campaign, budget, and performance data needed to plan and pace your spend. We access only the data your OAuth grant permits.
- Billing information. If you subscribe to a paid plan, our payment processor (Stripe) collects and stores your payment details. FluxPPC does not store full card numbers; we receive only the metadata Stripe returns (last four digits, brand, expiration).
- Usage and diagnostic data. Pages viewed, actions taken, browser type, IP address, and error reports — used to operate the Service, debug issues, and improve the product.
3. How we use information
We use the information we collect to:
- Provide, maintain, and improve the Service.
- Generate budget plans, pacing forecasts, and reallocation proposals.
- Send transactional emails (alerts, billing receipts, account notices).
- Respond to support requests and compliance inquiries.
- Detect and prevent fraud, abuse, and security incidents.
- Comply with applicable law and Google's API terms.
We do not sell your personal information. We do not use your Google Ads data to train machine-learning models that are then made available to other customers.
4. Third-party services
FluxPPC relies on a small set of infrastructure providers to deliver the Service. Each is bound by its own privacy policy and processes data only as needed:
- Supabase — database, authentication, and file storage.
- Vercel — application hosting and edge runtime.
- Stripe — subscription billing and payment processing.
- Resend — transactional email delivery.
- Google — the Google Ads API, used only with the OAuth scopes you grant.
- Sentry — error monitoring.
- PostHog — product analytics, configured to omit personally identifiable replay content.
5. Data retention
We retain workspace data, audit history, and account records for as long as your account is active, plus the retention window associated with your subscription tier. When you close your account, we delete or anonymize your data within thirty (30) days, except where retention is required by law or to resolve disputes.
6. Your rights
Subject to applicable law (including the GDPR for European users and the CCPA for California residents), you have the right to access, correct, export, or delete the personal information we hold about you. To exercise these rights, email privacy@fluxppc.io from the email address associated with your account.
7. International users
FluxPPC is operated from the United States. If you access the Service from outside the U.S., you understand and consent to your information being transferred to and processed in the United States, where data-protection laws may differ from those of your jurisdiction.
8. Children
FluxPPC is not directed to children under sixteen (16). We do not knowingly collect personal information from children. If we learn that we have, we will delete it promptly.
9. Security
We protect your information using industry-standard encryption in transit (TLS) and at rest. OAuth refresh tokens are encrypted with authenticated encryption (libsodium) before being written to the database. No system is perfectly secure; we cannot guarantee absolute security but we maintain reasonable administrative, technical, and physical safeguards.
10. Cookies
We use essential cookies for authentication and session management. We use a small number of analytics cookies (PostHog) to understand product usage in aggregate. We do not use advertising or tracking cookies for cross-site retargeting.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Effective” date at the top of this page and, for material changes, notify you by email or in-app notice before the change takes effect.
12. Contact
Questions about this Privacy Policy or our data practices? Email privacy@fluxppc.io. Postal correspondence may be sent to FluxPPC LLC, 1147 N 1000 E, Lehi, UT 84043, USA.