1. Who this policy covers
This policy explains how Lethir (“Lethir,” “we,” or “us”) handles information when you visit our website or use the workspace. It covers our service; Google, Meta, and other linked services apply their own privacy policies to information they handle independently.
2. Information we handle
- Account and workspace details: your email address, sign-in and session records, workspace name, website, and reporting currency.
- Connected advertising data: platform and account identifiers, account names, authorization tokens, campaign names and settings, budgets, and performance metrics such as spend, impressions, clicks, conversions, and attributed revenue.
- Content and activity: campaign drafts, ad copy, creative URLs, analyst questions, recommendations, approved actions, activity history, and information you send when contacting us.
- Newsletter signup: if you opt in, your email address, temporary confirmation record, and confirmation date. We keep a hashed email and consent version as a consent record.
- Technical information: service providers may process IP addresses, browser or device information, request records, and error or security logs to deliver, operate, and protect the service.
3. How we use information
We use information to sign you in, maintain your workspace, connect accounts you authorize, import campaign reports, prepare drafts and recommendations, carry out approved changes, answer your questions, provide support, and protect against abuse. We may also use records to resolve disputes and comply with legal obligations.
Where a legal basis is required, processing may be necessary to provide the service you request, meet legal obligations, or pursue legitimate interests in operating and securing the service, subject to your rights. We seek consent where applicable law requires it.
4. Service providers and sharing
We use Vercel for website hosting, Convex for application data and authentication, and Resend for sign-in email delivery, newsletter confirmation, contact management, and newsletter delivery. Newsletter signup is optional and requires email confirmation. Creating a workspace does not subscribe you. These providers process information needed to supply their services. Google and Meta receive authorization requests and the campaign actions you choose to perform through their integrations.
When you ask a question using AI analysis, we send your question and relevant campaign names, settings, and performance metrics to OpenAI. We do not send the access keys that connect your Google or Meta account. We ask OpenAI not to save responses for later retrieval. OpenAI may still retain data under its applicable policies and service terms. Running an account audit does not send your data to an AI provider.
We do not sell your personal information or share it for cross-context behavioral advertising. We may disclose information when legally required, to protect rights and security, or as part of a business transfer subject to applicable law and appropriate notice. We do not publish your private workspace data as marketing content.
6. Retention and security
Workspace records remain available while your account is in use unless removed through a supported feature or a verified deletion request. Retention depends on the type of information, the purpose for holding it, and legal or security needs. Copies may remain in provider backups or logs under their retention processes after removal from active systems.
Unconfirmed newsletter requests expire and are removed after 24 hours. After confirmation, we remove the temporary request and retain a hashed email, consent version, and confirmation date for up to one year after the latest confirmation. Resend manages the subscriber address and unsubscribe status; suppression records may be retained to honor opt-outs. Provider logs and backups follow provider retention policies.
We use access controls, encrypted connections, and encryption for stored ad-platform tokens to help protect information. No online service can guarantee absolute security. Keep your email account secure and never share sign-in links or platform credentials.
7. Your choices and requests
You can update available workspace settings, export campaign reports, and disconnect platforms in Connections. Disconnecting removes the saved connection and imported campaign reports for that connection; it does not delete your Lethir account or your ads, or remove every historical activity record. You can also revoke access directly in Google or Meta account settings.
You can withdraw newsletter consent using the unsubscribe link in any newsletter, or contact support@lethir.com. Unsubscribing from marketing does not stop necessary sign-in or service emails.
Contact us to request access, correction, deletion, or a copy of your personal information. Depending on where you live, you may also have rights to object to or restrict processing, withdraw consent, appeal a decision, or complain to a privacy regulator. We will handle requests in accordance with applicable law and may need to verify your identity. Exceptions may apply where records must be kept for legal or security reasons.
8. International processing
Lethir and its providers may process information in countries other than where you live, including the United States. Privacy protections may differ between countries. Where legally required, appropriate safeguards apply to international transfers.
9. Children
Lethir is a business advertising service intended for adults, not children under 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can investigate and take appropriate action.
10. Policy updates
We may update this policy when our practices or service change. We will revise the date above and provide additional notice of material changes through the service or another appropriate channel. We will obtain consent for changes where required by law.
11. Contact
For questions or requests, contact Lethir at support@lethir.com. For account-related requests, use your sign-in email so we can verify your request. Do not send passwords, sign-in links, or ad-platform credentials.