Privacy Policy

1. Who we are

Imperium AI ("the service") is operated by Imperium Management Agency. For any privacy question or request, write to contato@imperiumagency.com.br.

The service helps advertisers and agencies view and analyze paid advertising performance across Meta, Google and TikTok, and prepares optimization suggestions that a person reviews and approves.

2. Data we process

Account data: name, e-mail address, role and a password stored only as a salted hash.

Advertising data from the platforms you connect: advertiser accounts, campaigns, ad groups, ads, budgets and aggregated performance metrics such as spend, impressions, clicks and conversions.

Connection credentials: the access and refresh tokens that the advertising platforms issue when you authorize the service.

Operational records: an audit trail of actions taken in the service, notifications, and the content of your conversations with the built-in assistant.

We do not collect personal data of the end users of your ads. The advertising data we read is aggregated performance data of the advertiser who authorized us.

3. How we use it

To show dashboards, reports and exports; to generate analysis and optimization suggestions; to keep the service secure; and to communicate with you about your account. We do not use your data for advertising or to build profiles of individuals, and we do not sell it.

4. Advertising platforms

You choose which accounts to connect and can disconnect at any time. Meta and Google connections allow changes only after a person approves them in the service. The TikTok connection is read-only: we call only endpoints that read data and never create, edit, pause or delete anything.

The service's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from TikTok and Meta is used only to provide the features described here.

5. Sharing

We use service providers that process data on our behalf, such as infrastructure hosting, e-mail delivery, an AI model provider for the assistant and analysis features, and Slack if you enable that integration. They may process data only to provide their service to us. We may also disclose data when the law requires it.

6. Security

Platform tokens are encrypted at rest with AES-256-GCM and are never written to logs. Each organization's data is isolated from other organizations at the database level, access inside the service is controlled by role, and the session cookie is HttpOnly.

7. Retention and deletion

When you disconnect a platform, the stored tokens for that connection are deleted immediately and synchronization stops. Advertising data already synchronized stays in your organization's workspace until you ask us to delete it or your account is closed; send the request to the e-mail above. Backups are overwritten on their regular cycle.

8. Your rights

Under Brazil's General Data Protection Law (LGPD) and similar laws you may ask for confirmation that we process your data, access, correction, anonymization or deletion, portability, information about sharing, and to withdraw consent. Write to the e-mail above and we will answer within the period set by law.

9. Cookies

We use one HttpOnly session cookie to keep you signed in and a local browser setting that remembers your light or dark theme. We use no advertising or tracking cookies.

10. Changes

We may update this policy. The date at the top shows the latest version, and we will notify account owners of material changes.