OpenClicks is built on the belief that your data is yours. This Privacy Policy describes how we collect, use, and protect your personal information when you use the OpenClicks platform.
Full Frame Marketing Inc., operating as OpenClicks ("OpenClicks", "we", "us"), is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding it.
OpenClicks is the data controller for personal data you provide directly. For data processed through your connected advertising accounts, you remain the controller and OpenClicks acts as a data processor on your instructions.
Plain English summary: We collect what we need to run the service. We don't sell your data. We don't use your specific campaign data to train AI for other customers. You can delete your data by closing your account.
When you create an account: your name, work email address, and company name. Authentication is handled by our identity provider, Clerk. We do not collect payment details during the beta period.
When you connect your Google Ads account, we access a deliberately narrow slice of it: your campaign names, statuses and daily budgets, and the daily spend, impressions, clicks, conversions and conversion value recorded against each campaign. We also read your account's name, currency and time zone so figures display correctly. We do not access keywords, search terms, ad creative, Quality Scores, auction insights, audience data, or any personal data belonging to your own customers.
So that the Service can work in profit rather than revenue, we store the cost-of-goods and returns percentages you enter, for your organisation and optionally per ad account. You may also upload a file of your own daily revenue, typically exported from your ecommerce or analytics platform, so that the revenue your ad platform reports can be reconciled against your own records. We store one row per day per platform: the date, the revenue total, a count of orders, and which method attributed those orders to that platform. We do not store individual orders, customer names, email addresses, or any other detail about your customers, and none of this is sent to Google or any other advertising platform.
The Service includes a chat assistant. When you send it a message, we assemble a snapshot of your organisation's current figures and send that snapshot, together with your message and the recent messages in the same conversation, to OpenAI so that a reply can be generated. The snapshot contains your organisation name; your seven-day spend and profit totals and average profit per ad dollar; the cost-of-goods and returns percentages you have entered; your guardrail settings; any pending budget proposal, including the reasoning recorded against each campaign in it; and your campaign names with their spend, profit, tier and trend. It does not contain your name or email address, and it contains no personal data belonging to your own customers. We do not store the conversation on our servers. It is held in your browser and you can clear it at any time. Our own logs record only that a message was sent and how long it was, never its content.
We collect information about how you use the platform: pages visited, features used, recommendations accepted or declined, and session data. This is used to improve the Service.
IP address, browser type, device information, and cookies as described in our Cookie Policy. We do not use cross-site tracking cookies.
If you contact support or submit feedback, we retain that correspondence.
If you request early access, we store your name, email address, business name, and the page you signed up from, plus a one-way hash of your IP address used only to limit automated abuse. We use this solely to contact you about beta access. You can ask us to delete your waitlist entry at any time by emailing hello@openclicks.ai.
We use your data to:
We do not use your data for advertising, sell it to third parties, or share it with partners for their own marketing purposes.
We share data with the following categories of third parties, strictly for service delivery:
We may share data if required by law, court order, or to protect the rights and safety of OpenClicks, our users, or the public.
We retain your personal data for as long as your account is active, and delete it after account closure unless a longer retention period is required by law.
Campaign performance data pulled from your advertising accounts is retained while your account is active so the Service can compare current performance against history. Disconnecting an advertising account stops further collection. Revenue figures and margin settings you supply yourself are retained on the same basis. Re-importing a corrected export overwrites the days it covers, and you can ask us to delete them using the contact below.
You may request deletion of your personal data at any time by contacting hello@openclicks.ai. We will complete deletion within 30 days, except where retention is required by law or our legitimate business interests (e.g. fraud prevention, accounting records).
Depending on your jurisdiction, you have rights including:
Canadian residents have rights under PIPEDA and applicable provincial privacy legislation. EU/EEA and UK users have rights under GDPR. California residents have rights under CCPA/CPRA. To exercise your rights, contact hello@openclicks.ai. We will respond within 30 days.
You have the right to lodge a complaint with your local data protection supervisory authority.
We implement industry-standard security measures including:
Despite these measures, no internet transmission is 100% secure. Please notify us immediately at hello@openclicks.ai if you suspect a security breach.
We use cookies for:
We do not run advertising or retargeting pixels, and we do not sell the data collected through analytics. You can prevent analytics cookies by using your browser's cookie controls or Google's opt-out browser add-on.
For privacy-related queries, data subject requests, or to exercise your rights:
We aim to respond to all requests within 30 days. If you are not satisfied with our response, you may complain to your local data protection authority.