Thank you for choosing to use our services. We operate the Ads Automation Portal Plug Stack AI, a web-based tool that helps real-estate professionals create, manage, and report on Google Ads® and Facebook Ads campaigns.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or use the Service, and the choices you have with respect to that information.

1. Information We Collect

Category – What it includes – How we collect it

Account Information –
Name, business name, email, phone, billing address, timezone, login credentials.
Provided directly by you during signup or profile edits.

Advertising Platform Data (Google Ads & Facebook Ads) –
Developer-token or app-scoped data such as campaign settings, ad accounts, budgets, audiences, ad creatives, impressions, clicks, conversions, and cost metrics.
Retrieved via the Google Ads API and the Facebook Marketing API after you grant explicit OAuth 2.0 access or equivalent permissions from your Google and/or Facebook accounts.

Payment & Subscription Data –
Last 4 digits of payment card, billing history, plan tier.
Collected by our payment processor (we never store full card numbers).

Usage & Device Data –
IP address, browser type, referring URLs, pages visited, actions taken, error logs, cookies, and similar technologies (e.g., localStorage).
Automatically collected through server logs, cookies, and analytics scripts.

Support Communications –
Emails, chat transcripts, and attachments sent to our support team.
Collected when you contact us.

2. How We Use Your Information

We use the information we collect to:

Service delivery – Create, edit, manage, and report on your Google Ads and Facebook Ads campaigns.

Authentication & security – Verify your identity, enforce security measures, and prevent fraud.

Billing – Process payments, issue invoices, and detect delinquent accounts.

Improvement & analytics – Monitor performance, debug issues, and develop new features.

Communications – Send onboarding tips, product updates, service notices, and—if you opt in—marketing materials.

Legal & compliance – Satisfy auditing, tax, and regulatory obligations.

3. Legal Bases (EU/UK GDPR)

Where the GDPR applies, we process your data under the following legal bases:

Performance of a contract – To provide and maintain the Service.

Legitimate interests – To improve the Service, secure our platform, and prevent abuse.

Consent – For optional marketing emails and non-essential cookies (you may withdraw at any time).

Legal obligation – To comply with applicable laws and regulations.

4. How We Share Information

Recipient – Purpose – Safeguards

Google LLC –
Access to the Google Ads API for campaign management and reporting.
OAuth 2.0 tokens are stored encrypted; we comply with the Google API Services User Data Policy (including Limited Use requirements).

Meta Platforms, Inc. (Facebook) –
Access to the Facebook Marketing API (and related Meta advertising APIs) to create, manage, and report on your Facebook ad campaigns.
Access tokens are stored encrypted; we comply with applicable Meta Platform Terms, Developer Policies, and data protection requirements.

Service Providers –
Cloud hosting (e.g., Google Cloud), payment processing (e.g., Stripe), email delivery (e.g., Postmark), logging, and monitoring.
Bound by confidentiality and data-processing agreements.

Analytics Providers –
Aggregate usage statistics (e.g., Google Analytics 4).
IP anonymization enabled where possible.

Legal/Regulatory Authorities –
Responding to court orders or lawful requests.
Disclosed only when required by law.

Business Transfers –
Merger, acquisition, or asset sale.
Notice provided before data is transferred and becomes subject to a new policy.

We never sell or rent your personal information.

5. Cookies & Tracking Technologies

We use:

Essential cookies – Keep you logged in and secure the admin area.

Analytics cookies – Understand feature adoption and improve UX.

Preference cookies – Remember UI settings (e.g., dark mode).

You can control cookie usage through your browser settings or by using our in-app cookie banner for consent management (GDPR/CPRA).

6. Data Retention

Data Type – Retention Period

Account & advertising campaign data – While account is active + 12 months

Billing & financial records – 7 years (tax & audit)

Support tickets – 24 months

Logs (anonymized) – 90 days

Upon request or account closure, we will delete or anonymize personal data unless we are legally required to retain it.

7. Security

Encryption – Data is encrypted in transit (TLS 1.3) and at rest (e.g., AES-256-GCM).

Least-privilege access – IAM roles isolate services; secrets (including Google Ads and Facebook API tokens) are stored in a secure secret manager.

Penetration testing – Annual third-party security assessments.

Incident response – 24/7 monitoring with alerts; affected users notified within 72 hours of a breach.

8. Your Rights

Depending on your jurisdiction (GDPR, CPRA, etc.), you may have rights to:

Access the personal data we hold about you.

Correct inaccurate or incomplete data.

Request deletion (“right to be forgotten”).

Object to or restrict processing.

Data portability.

Opt-out of the sale or sharing of personal data (we do not sell data, but we honor CPRA opt-out requests).

Submit requests by emailing [email protected]. We will verify your identity before fulfilling any request.

9. International Transfers

We store data primarily in the United States. If you access the Service from outside the U.S., your data may be transferred to, stored, and processed in the U.S. We rely on Standard Contractual Clauses for cross-border transfers where applicable.

10. Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect data from them. If you believe we have inadvertently collected such information, please contact us to delete it.

11. Changes to This Policy

We may update this Privacy Policy periodically. If changes are material, we will notify you by email or through an in-app banner at least 30 days before the new terms take effect.

12. Contact Us

The Plug Stack AI
Attn: Privacy Team

Email: [email protected]
Phone: +1-214-414-2811

By using our Service, you acknowledge that you have read and understood this Privacy Policy.