Privacy policy
Ad Sidekick is a dashboard for ecommerce brands: it reports on Meta ads and Shopify sales, and helps brands review, name, upload and test ad creative. This policy explains what we collect when a brand connects its accounts, how we use it, and how to have it deleted.
What we collect
- Your account: name, email address and a hashed password for each person who logs in.
- Meta (Facebook & Instagram): when you connect Meta we receive an access token for the ad account you choose, and read that account's campaigns, ad sets, ads, creatives, performance statistics, and the Facebook Pages and Instagram accounts it can advertise as. When you use Creative Launch we create, duplicate and pause ads in that ad account on your instruction.
- Shopify: when you connect a store we read products, inventory, orders and store reports to calculate daily totals (revenue, order counts, new vs returning customer order counts). We store the totals — we do not store your customers' names, emails, addresses or other personal details.
- Creative files: videos and images you upload, or place in a Google Drive folder you share with us, plus what we generate from them (frames, transcripts, descriptions, suggested names and copy) and your approve/reject decisions.
How we use it
- To show your brand's performance, and to upload, launch, duplicate and pause ads when you ask us to.
- To analyse creative so it can be named, described and reviewed.
- We don't sell your data, use it to advertise to you, or share it with other customers.
- Data from Meta and Shopify is used only to provide Ad Sidekick to the brand that connected it.
Who processes it for us
- Vercel (hosting) and Neon (database) — data is stored on their infrastructure.
- Anthropic and OpenAI — creative frames and audio are sent to their APIs to produce descriptions and transcripts. Their API terms don't allow them to train on this data.
- Google — only to read files in a Drive folder you choose to share with us.
- An email provider to send notifications, such as creative waiting for approval.
Security
Access tokens for Meta and Shopify are encrypted at rest. Access to a brand is limited to the people in its workspace. All traffic is encrypted in transit (HTTPS).
How long we keep it
We keep your data while your account is active. If you disconnect an account, its access token is deleted straight away. If you close your account or ask us to delete your data, we delete it within 30 days — see data deletion.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it, by emailing hello@rankify.com.au. We handle personal information in line with the Australian Privacy Principles. If you're not happy with how we've handled a request you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
Contact
Rankify Pty Ltd · Gold Coast, Queensland 4220, Australia · hello@rankify.com.au