Antplify - Privacy Policy

4.1 Service Providers and Sub-processors

We share information with vetted service providers who process data on our behalf under written contract. Categories include:

• Cloud infrastructure: Google Cloud Platform (compute, database, secret management, monitoring)
• Payments: Stripe (subscription billing and invoicing; PCI-DSS compliant)
• Transactional email: our email delivery provider for account, security, and receipt messages
• Error and performance monitoring: Sentry (application error reporting, no advertising use)

4.2 Advertising and Analytics Platforms You Connect

When you connect an ad account (Google Ads, Meta, TikTok) or a streaming/social account (YouTube, Spotify, Facebook, Instagram, TikTok, Twitter), we act as your agent. We send campaign configuration, creative assets, and audience targeting parameters that you configure to the platform of your choice, using OAuth credentials you authorized.

We do NOT:

• Sell your data or your audience data to any third party
• Transfer data to advertising networks, data brokers, or information resellers
• Use data received from these platforms to retarget, build cross-context advertising profiles, or make credit decisions
• Use data received from these platforms to train generalized artificial-intelligence or machine-learning models

4.3 Legal Disclosures

We may disclose information when required by law (subpoena, court order, or valid government request) or when necessary to protect the rights, property, or safety of Antplify, our users, or the public. Where legally permitted, we will notify affected users before responding to any such request.

4.4 Business Transfers

If Antplify is acquired, merged, or reorganized, personal information may be transferred as part of that transaction. We will require the recipient to honor the commitments made in this policy, and we will notify affected users before the transfer takes effect.

4.5 Google User Data — Limited Use

Antplify's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, data obtained through Google APIs (including YouTube and Google Ads) is used only to provide or improve user-facing features that are prominent in the Antplify interface. We do not use Google user data for advertising, we do not sell Google user data, we do not transfer Google user data to third parties except as necessary to provide or improve those user-facing features (and only with your consent), to comply with applicable law, or as part of a merger, acquisition, or sale of assets with prior notice to you. We do not use Google user data to train generalized or non-personalized AI/ML models.

6.1 Retention Periods by Data Category

6.2 How to Request Deletion

You may request that your data be deleted at any time using any of the following methods:

• In-app: Settings → Privacy → Delete Account. This starts an immediate account-deletion workflow.
• Disconnect a specific integration: Settings → Social Connections → Disconnect. Doing this revokes the OAuth token, deletes it from our database, and schedules any cached data derived from that integration for deletion within 30 days.
• Email: privacy@mail.antplify.com — include the email address associated with your account.

6.3 Response and Completion Timelines

• Acknowledgment: within 5 business days
• Substantive response: within 30 days (may be extended by an additional 30 days for complex requests, with notice)
• Full deletion: within 60 days of request completion, except where retention is required by law (for example, billing records held for tax purposes)

6.4 Google User Data — Deletion

You may revoke Antplify's access to your Google account at any time by (a) disconnecting the Google integration in Antplify Settings, or (b) visiting Google's Third-party apps & services page. Disconnecting immediately revokes the stored OAuth refresh token in our database and initiates deletion of Google user data derived from that connection (YouTube analytics, Google Ads metrics, cached channel/video metadata). Deletion completes within 30 days.

6.5 Backups and Legal Holds

Deleted data may persist in encrypted backup snapshots for up to 35 days before those snapshots roll off. During that window the data is not accessible to application code or personnel and is used solely for disaster recovery. Data subject to a legal hold (litigation, regulatory investigation) may be retained longer, and only to the extent legally required.