Privacy Policy

2.1 Account & Profile Data

When you register, we collect your name, email address, and password (hashed). If you upgrade to a paid plan, we also store your billing name and company name. We do not store credit card numbers — these are handled by our payment processors (Mollie / Stripe).

2.2 Meta (Facebook/Instagram) Ads Data

When you connect your Meta Ads account, we request access via Meta's official API using OAuth 2.0. We store your Meta access token (encrypted) to perform actions on your behalf, such as fetching campaign performance data, creating campaigns, and publishing ads. We access:

• Ad account IDs and names
• Campaign, ad set, and ad data (names, budgets, performance metrics)
• Audience insights and targeting data
• Creative assets (images, videos) you upload or that exist in your ad account
• Billing and spend data from your ad account

We never share your Meta data with third parties outside of what is necessary to operate the service. You can disconnect your Meta account at any time from your workspace settings.

2.3 Google Ads Data

When you connect your Google Ads account via OAuth 2.0, we store your Google access token and refresh token (encrypted). We use these to read campaign performance, manage budgets, and create/publish Google Ads campaigns on your behalf. We access:

• Google Ads customer account IDs and names
• Campaign, ad group, and ad performance metrics
• Budget and spend data
• Keyword and audience data

Google Ads data is used exclusively to provide the Neuramerce service to you. We comply with Google's API Services User Data Policy.

2.4 WooCommerce & E-commerce Data

If you connect your WooCommerce store, we synchronise product catalogue data, inventory levels, order data, and customer records for the purpose of ROAS tracking, campaign targeting, and inventory management. This data is stored in your isolated workspace database and is never shared with other users or workspaces.

2.5 Email & Inbox Data

If you connect an email account (via IMAP/SMTP or Google/Microsoft OAuth), we access your inbox to power the customer inbox feature. We read and store email metadata (sender, subject, date) and message bodies solely to display them within Neuramerce and to power AI-assisted reply drafting. We do not read or process emails for advertising or profiling purposes.

2.6 AI Processing (Claude / Anthropic)

Neuramerce uses Claude AI (Anthropic) to generate ad copy, audiences, campaign strategies, and other content. When you use AI features, we send relevant context (such as your product descriptions, target audience parameters, and campaign goals) to Anthropic's API. We do not send personally identifiable information about your customers to Anthropic. Anthropic's privacy policy applies to data processed by their API.

2.7 Usage & Technical Data

We collect technical data to improve the platform and monitor errors, including: IP address, browser type, pages visited, feature usage, API response times, and error logs. We use Sentry for error tracking and may use analytics tools. This data is pseudonymised where possible.

2.8 Payment Data

Subscription payments are processed by Mollie or Stripe. We store transaction IDs, subscription status, plan type, and payment history for billing purposes. Full payment card details are never stored on our servers.

2.9 Domain & Site Management Data

If you use our domain registration or website management features, we process domain names, DNS records, hosting configuration, and website content you provide. Domain registrations are processed via OpenSRS; their privacy policy also applies.

2.10 WhatsApp Business Messaging Data

If you connect a WhatsApp Business account via the WhatsApp Cloud API (Meta Embedded Sign-Up), we store configuration data including your WhatsApp Business Account ID (WABA ID), Phone Number ID, and a System User Token (encrypted). When your end customers contact you via WhatsApp, we process:

• The sender's WhatsApp phone number (used as a pseudonymous contact identifier)
• Message content (text, images, documents) sent and received within your inbox
• Message timestamps and delivery status

This data is stored in your isolated workspace database and is used solely to provide the inbox functionality. We do not use message content for advertising, profiling, or training AI models. Meta independently processes transmission data as an independent data controller under their own privacy policy (WhatsApp Privacy Policy). You can disconnect your WhatsApp account and request deletion of associated data at any time.

2.11 Facebook Messenger & Instagram Direct Messages

If you connect a Facebook Page or Instagram Business account, we request a Page Access Token via OAuth 2.0 and store your Facebook Page ID and Page Access Token (encrypted). When end users message you via Messenger or Instagram DM, we process:

• Page-Scoped User IDs (PSID) or Instagram-Scoped User IDs — pseudonymous identifiers assigned by Meta
• Display names retrieved from the Messenger Profile API (where permitted)
• Message content (text, attachments, story mentions) sent and received in your inbox
• Message timestamps

PSIDs and Instagram-Scoped User IDs are platform-specific and cannot be used to identify individuals across other platforms. This data is stored in your isolated workspace database solely to provide the inbox functionality. Meta is an independent data controller for the transmission of messages; their privacy policy (Meta Privacy Policy) applies to that processing. You can disconnect your Facebook/Instagram account and request deletion of associated data at any time.