Privacy Policy

1. Who controls your data

“Skuens”, “Skuens”, “we”, “us”, and “our” refer to the Skuens service and the contracting entity identified on your order form, checkout record, or invoice. That entity is the data controller for account and commercial data. Where we process personal data solely on a business customer's documented instructions, we act as a processor.

2. Data we collect

We may collect: account and profile details; authentication records; billing, tax, and transaction metadata; business, brand, product, campaign, audience, and creative information you submit; website URLs and publicly available website content you ask us to analyse; files and media you upload; advertising-platform identifiers, permissions, tokens, campaign objects, and performance metrics; support communications; product usage, device, browser, IP address, diagnostic, security, and audit data; and cookie or similar-technology data.

Payment card details are generally collected by our payment provider and are not stored directly by Skuens. Connected-platform credentials and OAuth tokens are intended to be stored encrypted and used only to provide the requested integration.

3. Sources of data

We receive data directly from you, your organisation's administrators and users, connected services such as advertising platforms, payment and authentication providers, publicly available sources you direct us to analyse, and automatically from your use of the service.

4. Why we use data

We use data to provide and secure the service; authenticate users; create business profiles, strategies, copy, images, video prompts, reports, and campaign recommendations; connect and synchronise third-party accounts; process purchases and maintain wallet or usage balances; provide support; prevent abuse and fraud; monitor reliability; comply with law; enforce our agreements; and improve product quality.

Depending on location and context, our legal bases may include performing a contract, our legitimate interests in operating and securing the service, consent, and compliance with legal obligations. You may withdraw consent where processing relies on consent, without affecting earlier lawful processing.

5. AI processing

Inputs needed to generate or analyse content may be sent to configured AI and infrastructure providers. Do not submit unnecessary sensitive personal data, confidential regulated data, or information you are not authorised to use. AI output may be inaccurate and must be reviewed before publication, targeting, spending, or other consequential use.

We do not claim ownership of your submitted business content. We may use de-identified or aggregated operational data to measure reliability and improve the service. We will not use customer confidential content to train a general-purpose model unless our agreement or an explicit setting clearly permits it.

6. Cookies and local storage

We use essential technologies for authentication, security, session continuity, preferences, checkout status, and fraud prevention. With consent where required, we may also use analytics or performance technologies. You can control non-essential cookies through the available consent controls or browser settings, but disabling essential storage may prevent the service from working.

7. How we share data

We may share data with vetted service providers that support hosting, databases, authentication, monitoring, communications, AI generation, payments, customer support, and security; with advertising or other platforms you choose to connect; with professional advisers and authorities where legally required; and in connection with a merger, financing, acquisition, reorganisation, or sale of assets subject to appropriate safeguards. We do not sell personal data for money.

8. International transfers

Our providers and users may operate in different countries. Where required, we use recognised transfer mechanisms and contractual safeguards for cross-border personal-data transfers. Local law may provide additional rights.

9. Retention

We retain data only as long as reasonably necessary for the purposes described here, including providing the service, maintaining security and audit records, resolving disputes, enforcing agreements, meeting tax and accounting duties, and complying with law. Retention periods vary by data type. We may retain de-identified data that can no longer reasonably identify you.

10. Security

We use administrative, technical, and organisational safeguards designed to protect data, including access controls, encryption in transit, encryption of sensitive integration tokens at rest, environment-based secret management, logging, and database access policies. No system is completely secure. You must protect account credentials, use appropriate access controls, and promptly report suspected compromise.

11. Your choices and rights

Subject to applicable law, you may have rights to access, correct, delete, restrict, object to, or obtain a portable copy of personal data; withdraw consent; and complain to a supervisory authority. Organisation-managed accounts may require us to direct a request to the relevant account administrator. We may verify identity before completing a request.

12. Children's privacy

Skuens is a business service and is not directed to children. You must be at least 18 years old, or the age of legal majority in your location, to create an account or purchase the service.

13. Third-party services

Connected services and external websites operate under their own terms and privacy notices. Their processing is outside our control. Disconnecting an integration stops future access by Skuens but may not delete data already held by that provider.

14. Google API Services and User Data (Limited Use)

When you connect your Google Ads account to Skuens, we request access to the sensitive scope https://www.googleapis.com/auth/adwords. This allows Skuens to discover your accessible Google Ads customer accounts, retrieve advertising performance metrics (such as impressions, clicks, cost, and conversions), and manage campaigns and ad groups created or approved by you.

We access and use Google user data exclusively to provide and improve prominent user-facing features within the Skuens application, specifically enabling advertiser account selection, campaign performance analytics reporting, and user-authorized campaign deployment. OAuth tokens are encrypted at rest using AES-GCM and in transit via TLS.

Skuens' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We do not transfer Google user data to third parties unless necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger or acquisition.
• We do not use or transfer Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
• We do not use Google user data to train, retrain, or fine-tune generalized artificial intelligence (AI) or machine learning (ML) models.
• Humans do not read Google user data unless you have given explicit affirmative consent for technical troubleshooting, it is strictly necessary for security purposes, or it is required by law.

You may disconnect your Google Ads account at any time in Skuens via Settings → Ad accounts → Disconnect, or revoke access at any time through your Google Account Permissions. Upon disconnection, stored OAuth tokens are permanently deleted from our database.

15. Changes to this policy

We may update this policy as the service, providers, or law changes. We will post the updated version and revise the effective date. Where required, we will provide additional notice before material changes take effect.

16. Contact

Privacy questions and rights requests may be sent to support@skuens.com. Security reports may be sent to support@skuens.com. Please do not include passwords, API keys, or other secrets in email.