Get ScaleLogic

Privacy Policy

Last updated: June 20, 2026

At Get ScaleLogic we respect your privacy and are committed to protecting the personal data you share with us. This policy explains what we collect, how we use it, and the rights you have over your information.

1. Information we collect

We collect the email and name you provide at sign-up, the campaign data you log manually, and metrics imported from ad platforms (Meta Ads, Google Ads) once you authorize the connection. We also store technical data such as access logs, IP address, and browser type for security purposes.

2. How we use your data

Your data is used exclusively to operate the dashboard, calculate ROI and net profit, sync ad spend, send service notifications, and improve the product. We never sell your data to third parties.

3. Sharing with third parties

We share data only with infrastructure providers strictly necessary to run the service (hosting, database, authentication). When you connect Meta Ads or Google Ads, data is exchanged via official APIs under the terms of those platforms. When you connect a sales platform such as Hotmart or another supported affiliate/sales platform via webhook, sale and commission events sent by that platform are received and stored to power your dashboard metrics.

4. Data retention

We keep your data while your account is active. You can delete your campaigns at any time from the dashboard, and request full account deletion via support.

5. Your rights

You have the right to access, correct, export, and delete your data, as well as revoke consent for ad-platform integrations at any time from the Integrations page.

6. Google API Services — Limited Use disclosure

Get ScaleLogic's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only request the Google Ads scope (https://www.googleapis.com/auth/adwords) to read campaign spend, impressions, clicks and daily performance from accounts you authorize. We never create, edit, pause or delete campaigns, never sell Google user data, never use it for advertising, and never allow humans to read it except (a) with your explicit consent, (b) for security and abuse investigations, or (c) when required by law. Tokens are stored encrypted and are only accessible to backend processes that sync your dashboard. You can revoke access at any time from the Integrations page or from https://myaccount.google.com/permissions.

7. Meta API Services — Limited Use disclosure

When you connect Meta Ads, Get ScaleLogic only requests the scopes ads_read, ads_management, business_management, pages_read_engagement, pages_show_list and public_profile, used solely to read ad spend, impressions, clicks and insights from the ad accounts and pages you explicitly authorize. We never post, create, edit, pause or delete ads, campaigns, ad sets, pages or any content on your behalf. Meta data is never sold, never used for purposes outside of populating your own dashboard, and never made available to third parties beyond the infrastructure providers strictly required to run the service. Tokens are stored encrypted and used only by backend sync processes. You can disconnect at any time from the Integrations page or from https://accountscenter.facebook.com/.

8. Meta Pixel and advertising analytics

Our public website uses the Meta Pixel (ID 2309477786461756) to measure ad performance and improve our marketing, including for visitors who have not yet created an account. The pixel collects browser and device information (such as user agent, IP address, referrer, and approximate location), the pages you visit on our site, and standard events including PageView, ViewContent, InitiateCheckout and Lead. This data is shared with Meta and used for ad performance measurement, conversion tracking, retargeting and the creation of similar audiences. You can opt out at any time by adjusting your browser cookie settings, by using your Meta ad preferences at https://www.facebook.com/adpreferences/, or by using industry opt-out tools such as https://www.youronlinechoices.com/. For more information on how Meta processes this data, see Meta's Privacy Policy at https://www.facebook.com/privacy/policy/.

9. Contact

For privacy questions, write to support@getscalelogic.com.

Data Protection for Sensitive API Scopes

Get ScaleLogic accesses Google Ads data (and other ad platform data) through OAuth scopes that Google classifies as sensitive. We apply the following safeguards specifically to Google Ads data and the OAuth tokens that authorize access to it:

  • Encryption in transit: All data — including Google Ads API calls and OAuth token exchanges — is transmitted over industry-standard TLS/HTTPS. Plain-HTTP traffic is never accepted.
  • Encryption at rest: OAuth access tokens and refresh tokens are stored in our managed Postgres database (Supabase) with encryption at rest enabled at the storage layer.
  • Minimum data necessary: We only persist what is strictly required to sync ad spend (account ID, refresh token, short-lived access token, and the login-customer-id needed by the Google Ads API). We do not copy or store Google Ads creatives, audiences, keywords, or any user personal data from the Ads account.
  • No browser storage of access tokens: Google Ads access tokens are never written to localStorage, sessionStorage, cookies, or any client-side storage. They live only server-side and are used exclusively from our backend to call the Google Ads API.
  • Revocable at any time: You can disconnect Google Ads at any time from the Integrations page, which deletes the stored tokens. You can also revoke access directly from your Google Account permissions page.
  • Regular security audits: We conduct regular reviews of access controls, RLS policies, dependency vulnerabilities, and OAuth token handling.
  • Secure infrastructure: Data is processed and stored on Supabase (Postgres) with row-level security policies that restrict every user to only their own integration rows.
  • No sale or sharing for ads: We never sell, share, transfer, or otherwise disclose user data (including Google Ads data) to third parties for advertising, marketing, or data-broker purposes.
  • Right to deletion: You can request permanent deletion of all your data, including stored OAuth tokens and synced ad metrics, at any time from your account settings or by contacting support.